About

Aamir Mahmood is a seasoned Cyber Security Compliance Specialist with over 11 years of experience in the field. Currently, he is serving as a Sr. Cyber Security Compliance Specialist at Saudi Telecom Company, where he is responsible for Cyber Security Audits, Compliance Assessment, and Reporting. Aamir's expertise lies in conducting Gap Analysis, Risk Assessment, and establishing Information Security Policies and Procedures. He has implemented ISO 27001, ISO 20000, and ISO 22301 leading to certification audits. Aamir has a proven track record of managing teams and developing Cyber Security Assurance strategies. He has experience in Vendor Risk Assessment and Third-Party Assurance Compliance around Security Operation Control Data Classification. Aamir has also implemented SHEM and provided Information Security Training and Awareness ITIL and COBIT. He is well-versed in Table Top Exercise Preparation to test CSIRP and Business Continuity and Disaster Recovery Implementation and Audit Business Impact Analysis (BIA). In the past, Aamir has worked with General Directorate of Water in Eastern Region (GDWER) as an Information Security Consultant, where he implemented ITIL V3 and Business Continuity Management. He has also worked with SABIC as an IT/OT Cyber Security Assurance Technical Lead (GRC), where he managed the Assurance Team and prepared Cyber Security Assurance Strategies. Aamir has managed compliance assessment, information security audits, GDPR Gap Assessment, and prepared security assessment for OT environment based on ANSI-ISA-62443 and NIST SP 800-82. Aamir holds a Master's degree in Information Systems Security from Sheffield Hallam University, England, and a Master's degree in Computer Sciences from Preston University. He is proficient in various technologies and has relevant experience in the field. Aamir is a diligent professional who is committed to delivering exceptional results.