// work history
Experience
12+ years in cybersecurity across financial services, utilities, and critical infrastructure in Qatar.
A senior cybersecurity professional with broad expertise spanning security operations, cloud infrastructure, governance, and engineering. Proven track record leading enterprise-wide security programs, managing cross-functional teams, and deploying cutting-edge security technologies across on-premise and cloud environments in Qatar's financial sector.
Qatar Financial Center (QFC)
Senior Specialist Cybersecurity 2025 – Present
IT Security Officer 2020 – 2024
5+ years
- Oversaw compliance and governance for all IT operations, enforcing policies aligned with the Qatar Cybersecurity Framework (QCF) and NIA standards.
- Managed end-to-end security operations including SOC, change management, vulnerability assessments, penetration testing, incident response, and patch management.
- Evaluated and continuously optimized on-premise and cloud security architecture, fine-tuning tools including Palo Alto, Tenable, Darktrace, Forcepoint, CrowdStrike, MS365 Defender, Endgame, and SCCM.
- Led the design, development, and security implementation of the Azure cloud environment in collaboration with internal teams and Microsoft, aligned to Azure reference architecture.
- Spearheaded implementation of major cybersecurity programs across CASB, PAM, DLP, USB controls, AI-based email security, Attack Surface Management (ASM), and Digital Threat Monitoring (DTM).
- Performed risk assessments, led IT audit engagements, and managed the IT Business Continuity Plan (BCP).
- Collaborated with government agencies including the National Cyber Security Agency (NCSA) to acquire threat intelligence and facilitate accurate reporting.
- Assessed all technical initiatives holistically across system architecture and regulatory compliance dimensions.
Marafeq Qatar
IT Support Analyst 2014 – 2020
- Security lead at the organization, managing both IT and OT (operational technology) security environments.
- Implemented robust security controls following comprehensive risk assessment, incorporating business impact analysis and threat modeling.
- Introduced cloud-based patch management, server logging using the ELK Stack, and Cisco Firepower firewall.
- Spearheaded pivotal projects, reporting to senior management while fostering cross-functional collaboration across multiple departments.
- Formulated IT policies and procedures ensuring compliance and enhanced security measures organization-wide.
- Engineered innovative solutions including an E-Receptionist system, Digital Signage, company intranet portal, project management web application, and automation scripts.
- Oversaw critical systems including Attendance, CCTV, Application servers, IP telephony, Server Backup, and Procurement platforms.