Hasan AlOmran

Experience

• 

  Innovative Software, LLC.

  Jun 2014 - Aug 2014

  Summer Intern, Developer

  Worked as an internee developer of mobile and web applications for client projects.

• 

  Alawwal Bank

  Apr 2016 - Aug 2019

  • Conducted vulnerability assessment on bank assets.• Collaborated with IT to identify and unify an assets list, which helped in streamlining security controls.• Reviewed and updated Minimum Baseline Security Standards.• Conducted phishing assessments.• Analyzed security incidents.• Successfully led an implementation project of a security service. • Managed identity and user access of systems including SARIE system.• Proposed recommendations to improve process and security procedures in access management.• Collaborated and implemented automation processes to effectively reduce overhead.• Worked on HSM configurations and key management.• Successfully collaborated on implementation of an identity-and-access-management system project.

  • Information Security Officer

    Feb 2019 - Aug 2019

  • Information Security Officer

    Apr 2016 - Jan 2019
• 

  SAB

  Sept 2019 - now

  • Conducted security risk assessments on third parties for the services provided to identify gaps and implement appropriate security countermeasures.• Conducted security risk assessments on cloud services.• Conducted security risk assessments on Open Banking.• Involved in complying with regulatory requirements from SAMA and NCA.• Managed a Certificate Authority to issue digital certificates.• Responsible for key management on Hardware Security Modules (HSM). • Conducted security risk assessment on third parties for the services provided to identify gaps and implement appropriate security countermeasures.• Managed a Certificate Authority to issue digital certificates.• Responsible for key management on Hardware Security Modules (HSM).• Managed identity and user access of RTGS system. • Conducted security testing and risk assessment on systems and web applications to identify gaps and implement appropriate security countermeasures.

  • Information Security Risk Manager

    Jul 2022 - now

  • Information Security Officer

    Jan 2020 - Jul 2022

  • Information Security Officer

    Sept 2019 - Dec 2019