Raed Baafif

Experience

• 

  Tysons Institute

  Jan 2020 - Jun 2020

  IT Support Technician

  1- Secured and monitored 10+ institute’s websites with zero breaches or downtime.2-Troubleshot and resolved 50+ software and connectivity issues per week.3-Ensured 99% uptime of servers and systems during peak periods.4-Installed and updated software for 100+ users to enhance security and data protection

• 

  BMO U.S.

  Apr 2022 - Nov 2023

  Cybersecurity Analyst

  1-Collaborated with Third Party Cybersecurity Intake team to manage and perform risk assessments for both new and ongoing relationships BMO has.2-Managed 100+ cybersecurity third-party risk assessment processes per month through BMO's partner CyberGRX portal.3-Evaluated and conducted risk calculations for 50+ suppliers per week4-Reported identified risks and recommendations to senior management to initiate and drive risk remediation.5-Used RSA Archer to communicate findings and deploy questionnaires to vendors and track their progress. Show less

• 

  Hemaya حماية

  Aug 2023 - now

  Member
• 

  Bupa Arabia

  Nov 2023 - May 2024

  Cybersecurity Risk Operations Manager

  1- Orchestrate comprehensive risk management strategies to proactively identify and mitigate potential cybersecurity threats. 2- Lead the risk assessment process for all new projects, ensuring a comprehensive evaluation of potential cybersecurity threats and vulnerabilities.3- Conduct annual risk assessments, providing critical insights into the evolving risk landscape and informing strategic decision making for the organization's cybersecurity measures.4- Collaborate with cross-functional teams to develop and refine risk frameworks, ensuring alignment with industry best practices. 5- Demonstrate leadership in fostering a risk-aware culture, driving continuous improvement in cybersecurity risk operations. Show less

• 

  Salam

  May 2024 - Jul 2024

  Cybersecurity GRC Specialist

  1- Develop, review, and update cybersecurity policies, standards, and procedures in alignment with industry regulations and best practices.2- Conduct risk assessments and identify potential cybersecurity threats and vulnerabilities.3- Ensure compliance with relevant cybersecurity regulations and frameworks (e.g., NCA, SAMA, CST, ISO, NIST)4- Identify gaps and weaknesses in the security posture and recommend remediation actions. 5- Provide guidance and support to employees on cybersecurity best practices and policies. Show less

• 

  Devoteam

  Jul 2024 - now

  Cybersecurity GRC Consultant