Musab K.

I am a Senior Cybersecurity & GRC Consultant with over 15 years of experience helping organizations across the Middle East (banking, government, telecom, and private sectors) secure their operations, achieve compliance, and build resilience. My expertise spans Governance, Risk & Compliance (GRC), Cloud Security, Penetration Testing, and Business Continuity. I specialize in: Governance & Compliance – ISO 27001, ISO 22301, ISO 31000, NCA ECC/CCC, SAMA CSF, QCSF, PDPPL, PCI-DSS, CSA CCM & STAR. Risk & Privacy Management – data classification, privacy frameworks, regulatory gap assessments, evidence validation, compliance documentation. Cybersecurity Architecture – cloud security design (AWS, Azure, GCP), secure configurations, AI security, and security posture improvements. Offensive Security – penetration testing (Web, API, Infrastructure, Mobile), red teaming, and advanced threat simulation. Defensive Security – SOC optimization, incident response, threat intelligence, SIEM, and DLP/EDR deployments. Business Continuity & Resilience – ISO 22301 BCMS implementation, DR planning, and crisis management strategies. What I deliver to clients: ✔️ Comprehensive cybersecurity assessments and roadmaps aligned with global standards. ✔️ GRC frameworks, policies, and technical documentation tailored to business needs. ✔️ Hands-on security testing (infrastructure, applications, APIs, cloud). ✔️ Strategic workshops and training on Data Protection, Risk, and Compliance. ✔️ Audit readiness support for ISO, NCA, SAMA, PCI-DSS, and regulatory certifications. I hold multiple global certifications including CISM, CRISC, CSA CCSK, ISO 27001/22301 Lead Implementer & Auditor, OSCP, OSWE, and AWS Solutions Architect, ensuring both strategic insight and technical execution. If you need a consultant who can bridge technical security and business objectives, deliver end-to-end GRC programs, and prepare you for regulatory compliance or certifications, I can help.