Hamza El Orf

Orchestrated the implementation and continuous improvement of the Information Security Management System (ISMS) ISO 27001, achieving and maintaining compliance across critical operations.

Directed the Business Continuity Management System (BCMS) ISO 22301 initiatives, coordinating business impact analyses and disaster recovery preparedness to enhance organizational resilience.

Spearheaded the PCI DSS compliance program, managing readiness assessments, coordinating remediation efforts, and successfully navigating audit processes to secure sensitive data.

Managed end-to-end cybersecurity projects, including budget allocation, timeline management, and risk mitigation, ensuring the timely and effective deployment of security controls.

Provided strategic guidance to executive management on emerging security risks, compliance obligations, and remediation priorities, influencing key security decision-making processes.

Oversaw the vulnerability management program, coordinating remediation of infrastructure, cloud, application, and network vulnerabilities, reducing exposure by an estimated 25%.

Developed and delivered targeted cybersecurity training sessions and awareness initiatives to over 100 employees, fostering a strong security culture and enhancing data protection adherence.

Produced and presented executive-level security reports, effectively communicating risk posture, compliance status, and strategic recommendations to diverse stakeholders.

Managed and optimized critical IT infrastructure and enterprise security solutions, safeguarding sensitive banking data and ensuring compliance with stringent internal and regulatory standards.

Conducted comprehensive security assessments and vulnerability analyses across diverse systems, identifying and mitigating critical risks to enhance the overall security posture.

Administered Privileged Access Management (PAM) and Identity & Access Management (IAM) controls, strengthening access security and reducing insider threat vectors by 15%.

Participated actively in incident response activities, contributing to rapid threat containment and recovery efforts to minimize impact on banking operations.

Supported key compliance and audit initiatives, preparing documentation and evidence to meet regulatory requirements and internal governance standards.

Implemented robust security hardening activities across servers and network devices, significantly reducing attack surfaces and enhancing system resilience.

Contributed to the design and improvement of security architecture, integrating advanced controls to fortify enterprise systems against evolving cyber threats.

Managed SIEM monitoring and threat investigations, proactively detecting and analyzing security events to ensure timely response to potential breaches.

Provided Level 2 technical support, troubleshooting and resolving complex IT and security issues both remotely and on-site, reducing resolution times by 20%.

Efficiently managed and resolved over 150 support tickets monthly, ensuring timely resolution and high customer satisfaction for critical business operations.

Deployed, configured, and continuously monitored 50+ IT servers, ensuring optimal stability, performance, and availability for business-critical applications.

Assisted in maintaining network and system security through regular patching and updates, proactively mitigating vulnerabilities and enhancing system resilience.

Supported escalation processes and collaborated with senior engineers to resolve complex technical and security challenges, ensuring minimal operational disruption.

Optimized and maintained computer networks for 10+ client environments, enhancing reliability, performance, and security by implementing best practices.

Installed and configured diverse IT systems, hardware, and equipment across client sites, ensuring seamless integration and operational efficiency.

Configured and integrated electronic control units (ECUs) to ensure seamless interoperability with existing infrastructures, improving system functionality and security.

Performed rigorous testing, troubleshooting, and validation of IT systems to guarantee system efficiency and compliance with physical security standards.