Ghazal Y. Shamma

Cybersecurity Strategy Refresh

• Developed and refined cybersecurity policies, standards, processes, and procedures for a key client in KSA, ensuring compliance with ISO 27001, National Cybersecurity Authority (NCA) regulations, and other relevant standards.
• Led the development of the Unified Cybersecurity Framework (UCF) to ensure end-to-end compliance with NCA requirements, integrating policies, risk management, governance structure, and operational processes under a unified model.
• Conducted a comprehensive cybersecurity maturity assessment using Deloitte's CSF tool, developed a Heat Map, identified improvement areas, and benchmarked against peer entities to inform TOM development.
• Designed and implemented a cybersecurity strategy and roadmap, aligning with the Target Operating Model (TOM), including mission, vision, strategic objectives, and initiative planning.

Cybersecurity Counter Fraud Framework (CFF)

• Performed assessments on B2B web and mobile applications, evaluating security controls, fraud prevention measures, and business functionalities.
• Documented the existing fraud prevention framework, identified gaps, and provided high-level recommendations while collaborating across cybersecurity, counter-fraud, and business continuity teams to enhance detection, response, and resilience.

Cybersecurity Awareness

• Lead the cybersecurity awareness initiatives for a confidential project, including training sessions, tailored workshops, and educational campaigns to promote information security across various military forces.
• Lead the development of a structured awareness plan, such as monthly briefcases and a yearly campaign master plan, using diverse materials (infographics, posters, screensavers) to align with organizational goals and enhance employee understanding of cyber risks and best practices.

• Supported in the testing phase of a major facelift for the bank website and mobile application.
• Designed and executed test cases to validate new UI/UX components and overall functionality.
• Performed functional, regression, and usability testing across web and mobile platforms.
• Identified, documented, and tracked bugs using JIRA.
• Collaborated with developers and product teams to ensure timely fixes and improvements.
• Verified that the upgraded application met both technical and business requirements.