Sami A.

GRC

• Coordination of audit/pentest campaigns (LPM, PCI-DSS, Swift): scoping, debriefing, report validation
• Vulnerability Management: detection, scoring/risk analysis, remediation tracking
• Conducting counter-audits: verification of remediations and reports
• Coordination of external service providers (auditors, pentesters)
• Reporting and dashboards for management (Power BI, Excel)

Operational

• Security incident response and remediation action coordination
• Security alert management (DLP, integrity controls)
• Cybersecurity watch and threat monitoring
• Participation in crisis management procedures (CCO)
• Support to business teams on security topics

• Lead penetration tests & regulatory audits
• Monitoring of penetration tests on the PCI DSS scope
• Counter-audit of vulnerabilities (verification of corrections, remediation tracking)
• Vulnerability management: analysis, prioritization, reporting
• Security incident resolution (SOC)
• Security support for project teams (integrating security from design)
• Creation of security dashboards (Power BI, Advanced Excel) for management committees Drafting of security procedures & policies

• Cybersecurity training for students and professionals (IT teams, business units, consultants)
• Awareness of cyber risks: social engineering, phishing campaigns, and daily security best practices
• Training in technical fundamentals: penetration testing, network scanning tools, and information system security
• Training in scripting and automation applied to cybersecurity
• Participation in educational and professional events
• Project supervision (annual projects, theses, practical case studies)