Omar H.

I help fintech companies, banks, and government entities build compliance programs that pass audits and actually work in practice. 6 years across PwC Middle East, HSBC, and a UAE digital identity startup. I've reduced regulatory exposure by 30%, cut false KYC rejections by 40%, and led ISO 27001 readiness for a federal government agency from gap analysis to audit-ready documentation. WHAT I'VE DELIVERED: ▸ ISO 27001 readiness for a federal government agency (20-department team) full ISMS: gap analysis, risk register, SoA, asset inventory, and policy suite ▸ Built uqudo's compliance framework from scratch PDPL, NDMO & DIFC aligned reducing regulatory exposure by 30% and false KYC rejections by 40% ▸ Internal audit cycles at PwC across banking, insurance, and manufacturing reports presented at board and regulatory committee level ▸ EDD on $10M+ client accounts at HSBC flagging AML red flags across UBO structures and PEP exposure ▸ SOP framework for a National Tourism Authority cut response time by 20% and passed internal audit readiness WHERE I SPECIALIZE: ✔ ISO 27001 Gap Analysis & ISMS Implementation ✔ Regulatory Compliance — PDPL, NDMO, DIFC, FATF, AML/KYC ✔ Internal Audit & Remediation (ISO 19011 aligned) ✔ Risk Registers & ERM Frameworks (COSO) ✔ Compliance Program Build — policies, SOPs, controls ✔ Third-Party & Vendor Due Diligence ✔ Risk Dashboards — Power BI / Alteryx WHO I WORK WITH: ▸ Fintech & digital banking startups needing compliance built from scratch ▸ Government & regulated entities preparing for ISO 27001,PDPL, or regulatory audit ▸ Scale-ups that have outgrown informal processes and need structured GRC operations ▸ Consulting firms needing a senior GRC resource for client engagements HOW I WORK: I don't deliver templates and disappear. Every engagement starts with your regulatory environment, your team's capacity, and your actual risk exposure then I build frameworks your team can own and maintain. Deliverables are always practical: policies your legal team can approve, dashboards your executives can read, SOPs your operations team will follow. Certifications: GRCP | GRCA | Google Cybersecurity | IBM PM Industries: Fintech · Banking · Government · SaaS · Insurance Regions: UAE · Saudi Arabia · Egypt · MENA · Global Remote