My career started in technical cybersecurity, moved through information-security governance and risk, and now brings those layers together in technology & data audit — with data analytics, automated control testing and technical control assessment.
The current assurance role is not separate from the earlier cybersecurity work. Each chapter added a layer: technical depth, control understanding, governance perspective, risk thinking and data-driven audit execution.
Technology and information-security audits with a stronger technical and analytical approach — combining control assessment, data analytics, full-population testing, automated control testing and technical control validation.
How systems, processes and controls operate in practice.
Move beyond narrative and samples when stronger evidence is available.
Use analytics and automated testing to expand assurance coverage.
Bring technical, governance and business context into one assurance view.
Current work combines technology assurance, information-security audit and data analytics, with deeper emphasis on technical evidence and control effectiveness.
Technology and security audits, technical control validation and evidence-based assessment.
Power BI, full-population testing, exception analysis and automated assurance use cases.
This chapter broadened the view from individual technical controls to how an information-security program is governed, measured, implemented and improved.
Frameworks, policies, procedures, risk assessments, maturity and control design.
ISO 27001, DLP, MDM, IAM/SailPoint, third-party risk, cloud and AI-security related review.
Hands-on exposure across vulnerability management, infrastructure, network, application and endpoint security built the technical foundation later used in governance and audit.
Vulnerability assessment, patching, network, infrastructure, application and endpoint security.
Exposure to preventive, detective and corrective security controls and risk requirements.
Early professional experience focused on OT security controls, vulnerability management, network security and security compliance — creating the technical base for everything that followed.
Operational-technology and IT security controls, vulnerability and network-security activities.
DESC / Dubai information-security and ICS security requirements form part of the relevant local security context for this chapter.
The value of the path is the combination: understanding how technical controls work, how governance and risk should shape them, and how audit can test them using stronger evidence, data analytics, automated controls and technical control testing.
Clearer than a badge wall: the standards and regulatory references below are grouped by what they are used for and where they connect to the career path.
Information-security management system requirements and the core ISMS reference across governance, risk and security-control environments.
Official ISO reference ↗Service-management system requirements relevant to technology service governance, delivery, monitoring and continual improvement.
Official ISO reference ↗National information-assurance control context covering management and technical security requirements and a risk-based approach.
UAE Government reference ↗Dubai information-security regulation providing minimum security requirements, with governance, operations and assurance domains.
Official DESC reference ↗Outcome-based cybersecurity risk framework spanning Govern, Identify, Protect, Detect, Respond and Recover.
Official NIST reference ↗Industrial automation and control-system cybersecurity standards covering organizational and technical IACS security.
Official IEC reference ↗The current mandatory Global Internal Audit Standards are part of the IPPF and guide professional internal-audit practice.
Official IIA reference ↗National governance and protection framework for critical information infrastructure, including baseline security and assurance mechanisms.
UAE Government reference ↗National cybersecurity governance model defining regulatory, emirate-level and sector-level roles for coordinated cyber governance.
UAE Government reference ↗Federal data-protection framework covering personal-data processing, confidentiality, governance and data-subject rights.
UAE Government reference ↗Professional moments connected to the role where they happened — with the original LinkedIn post and media kept together.
Selected credentials aligned to audit, information security, networking and technical security.
Information systems audit credential aligned with technology and assurance work.
ISMS implementation, governance and information-security management focus.
Security monitoring and analytics capability.
For the complete professional profile, connect on LinkedIn or download the CV.