Sameer GRC

Information Security Consultant

May 2025 - Present • 1 yr 2 mos

During my role as a Cybersecurity GRC professional, I developed and implemented security policies, conducted risk assessments and gap analyses, prepared compliance documentation, and supported internal and external audit readiness. I worked with organizations in the ministerial, banking, oil & gas, and education sectors, aligning security programs with ISO/IEC 27001, ISO/IEC 42001, GDPR, NIST CSF, NCA-ECC, NIA, and CCC frameworks. I also assisted in implementing security controls, managing compliance requirements, and strengthening organizations' overall cybersecurity posture.

Information and GRC Consultant

May 2023 - Apr 2026 • 2 yrs 11 mos

As an Information Security & GRC Consultant, I conducted risk assessments, gap analyses, and compliance assessments while helping organizations strengthen their information security and governance practices. I developed security policies, procedures, standards, and compliance documentation, supported internal and external audit readiness, and implemented security controls aligned with industry frameworks. I worked with clients across the ministerial, banking, oil & gas, and education sectors, ensuring compliance with ISO/IEC 27001, ISO/IEC 42001, GDPR, NIST CSF, NCA-ECC, NIA, and CCC requirements while improving their overall security posture.

Security Consultant

Aug 2021 - May 2023 • 1 yr 9 mos

As a Security Consultant, I conducted cybersecurity risk assessments, gap analyses, compliance reviews, and security control evaluations for organizations across the Middle East. I supported clients including Amlak, Al Rajhi Bank, 2P Solutions etc. My responsibilities included developing information security policies and procedures, preparing compliance documentation, supporting audit readiness, implementing security controls, and ensuring alignment with ISO/IEC 27001, ISO/IEC 42001, GDPR, NIST CSF, NCA-ECC, NIA, and CCC frameworks.