Looking for a job

Omar Abdelsalam

@omarabdelsalam2

I build audit-ready security governance programs across FedRAMP, SOC 2, ISO 27001, and PCI environments.

At Paymob, I lead enterprise risk, policy, audit, and control-testing programs across FedRAMP, SOC 2, ISO 27001, and PCI environments.

I've built a Python-based AWS Lambda control-testing framework mapped to CIS Controls, automating evidence pipelines through AWS Config snapshots, CloudWatch, and Jenkins CI/CD gates. I also author System Security Plans and lead cloud incident response and forensic investigations.

I manage and mentor eight GRC analysts while coordinating audit evidence with Security, Engineering, IT, Legal, Internal Audit, Authorizing Officials, and 3PAOs. Previously, I delivered NIST CSF, ISO 27001, and SOC 2 gap assessments and supported Azure GCC High and CyberArk PAM designs.

Experience

Work history, roles, and key accomplishments

Current

GRC Leader

Current

Paymob

Jan 2021 - Present (5 years 8 months)

Administer the enterprise risk register and manage the full lifecycle of security policies and standards. Lead audit planning and evidence collection for SOC 2, ISO 27001, and FedRAMP assessments, and manage a team of 8 GRC analysts.

Power BI AWS Azure Okta CyberArk Python Jenkins PowerShell BASH FedRAMP SOC2 ISO 27001 PCI DSS NIST CSF CIS Controls RSA Archer ServiceNow GRC

Independent GRC Consultant

Self Employed

Jan 2020 - Jan 2021 (1 year)

Conducted NIST CSF, ISO 27001, and SOC 2 gap assessments for multiple clients, producing POA&Ms and prioritized remediation roadmaps. Configured SAP GRC Access Control and supported design of an Azure GCC High CUI enclave with CyberArk PAM integration.

NIST CSF ISO 27001 SOC2 SAP GRC Azure CyberArk

IT Systems Administrator

UX Centers

Jan 2019 - Jan 2020 (1 year)

Managed Active Directory lifecycle and endpoint protection using Microsoft Defender for Endpoint. Automated recurring administrative and security workflows using PowerShell and Bash scripting.

Active Directory Microsoft Defender For Endpoint PowerShell BASH