KALTHAM's CV

Message
WhatsAppLinkedIn

Profile summary

Dedicated Risk Officer with 4 years of GRC and cybersecurity experience in the UAE. Specializes in ISO 27001 compliance, vulnerability management, and AI security governance. Proven track record in executing compliance audits, coordinating threat detection workflows, and enforcing institutional security frameworks across national healthcare assets.

Career highlights

Compliance and GRC: Executes ISO 27001:2022 compliance activities including evidence collection, gap assessments, control reviews, and internal audit support across information security domains.

Vulnerability and Threat Management: Coordinates vulnerability management lifecycles using Tenable for scan operations, remediation tracking, and reporting across IT and OT assets.

AI Security and Governance: Conducts AI security assessments and governance reviews for AI systems and Agentic AI projects deployed within the Ministry, aligning with emerging frameworks.

Career Progression: Advanced through 4 roles, progressing from engineering and ministry traineeships to a dedicated Risk Officer position in GRC.

Key skills

TechnicalDigital Forensics Kali Linux Python
ProfessionalCybersecurity Governance & GRC Risk Assessment & Risk Management ISO 27001:2022 Compliance Vulnerability Management (Tenable) Security Operations (SOC) SIEM Monitoring (LogRhythm) Endpoint Detection & Response SOAR Automation (FortiSOAR) Privileged Access Management (CyberArk) AI Security & Agentic AI Governance Cloud Security Governance Healthcare Cybersecurity Microsoft Security Stack Data Classification UAE IA Standards & PDPL National Cloud Security Policy CIS Benchmarks Security Policy Development Incident Coordination Stakeholder Management Security Awareness & Advisories KPI Tracking & Reporting Threat Intelligence Coordination Tenable (Vulnerability Management) Trellix EDR LogRhythm SIEM FortiSOAR CyberArk PAM Fortinet Microsoft Defender Suite Microsoft Sentinel Microsoft Purview (Information Protection & Compliance) Intune Azure AD ISO 27001:2022 UAE IA Standards UAE PDPL Cloud Security Governance Reviews SaaS Security Assessment Data Residency Compliance Cloud Configuration Benchmarking SIEM Monitoring Threat Triage Vulnerability Remediation Tracking Security KPI Reporting FTK Imager Autopsy Wireshark (Network Forensics & Packet Analysis) MATLAB Simulink Raspberry Pi Mission Planner Pixhawk SVM GLCM Image Processing AI Security Assessment Agentic AI Governance Vulnerability Management (Tenable) Endpoint Detection & Response (Trellix EDR) AI Security & Agentic AI Governance Microsoft Purview & Data Classification Security Policy Development Fortinet (Firewall/UTM) NIST CSF Cloud Configuration Benchmarking Security KPI Reporting

Professional experience

Risk Officer – GRCOct 2024 - Present
Ministry of Health & Prevention (MOHAP)UAE

Manages governance, risk, compliance, and security operations activities within the national healthcare cybersecurity function, overseeing technical risk management and regulatory alignment across critical government assets.

  • Executes ISO 27001:2022 compliance activities including evidence collection, gap assessments, control reviews, and internal audit support across information security domains.
  • Coordinates vulnerability management lifecycles using Tenable for scan operations, remediation tracking, and reporting across IT and OT assets.
  • Monitors security operations activities using Trellix EDR, LogRhythm SIEM, and FortiSOAR to support threat detection and incident coordination workflows.
  • Conducts AI security assessments and governance reviews for AI systems and Agentic AI projects deployed within the Ministry, aligning with emerging frameworks.
  • Administers CyberArk PAM platform activities, supporting privileged access governance, session monitoring, and access control policy enforcement.
Trainee – Ministry of Health & PreventionJan 2023 - Oct 2024
Ministry of Health & Prevention (MOHAP)UAE

Executed information security governance tasks within a federal healthcare setting, coordinating alongside the Information Security Office to support compliance documentation, security awareness initiatives, and vulnerability reporting.

  • Contributed to security awareness campaigns and risk assessment activities under direct supervision.
  • Built foundational knowledge of SIEM operations and incident coordination workflows.
  • Maintained GRC processes and security policy frameworks.
Engineering Trainee – Electrical InfrastructureSep 2022 - Dec 2022
Ministry of Energy and InfrastructureUAE

Completed structured training focused on electrical infrastructure projects, reporting to senior engineering staff and gaining applied experience in building load calculations, load distribution design, and site-based engineering validation.

  • Received Best Electrical Trainer Award recognition for Resulted in engineering competence and applied problem-solving across electrical infrastructure projects.
  • Developed systems-thinking and engineering analysis skills applicable to operational technology and industrial control systems security and critical infrastructure protection.
Engineering Trainee – Electrical SystemsJan 2021 - Present
Ministry of Energy and InfrastructureUAE

Completed a nationally recognised engineering development programme focused on electrical systems. Applied core engineering principles to real world infrastructure scenarios within the energy sector.

  • Participated in structured training activities for electrical infrastructure planning and system evaluation.
  • Contributed to engineering case studies using standard power distribution frameworks.

Projects

AI-Powered Autonomous Drone for Precision Agriculture Monitoring

Designed, built, and programmed an autonomous quadcopter UAV using Pixhawk flight controller, Raspberry Pi, and RGB camera for real-time crop health monitoring across agricultural fields.

Pixhawk Raspberry Pi Python MATLAB Mission Planner

Education

MSc Cybersecurity EngineeringJan 2023
University of Sharjah
  • Current GPA: 3.88 / 4.0
  • Research Focus: AI Security, Post-Quantum Cryptography, Lightweight IoT Cryptography, Agentic AI Governance
BSc Electrical & Electronic EngineeringJan 2022
University of Sharjah

Embedded Systems, Microcontrollers, Signal Processing

  • GPA: 3.97 / 4.0 - First Class Honours
  • Specialisation: Embedded Systems, Microcontrollers, Signal Processing
MSc Cybersecurity Engineering — University of SharjahJan 2023
Current GPA: 3.88 / 4.0 | Research Focus: AI Security, Post-Quantum Cryptography, Lightweight IoT Cryptography, Agentic AI

Governance

Certifications

Cybersecurity Governance – Crash CourseUAE / aeCERT aligned
Cyber Fundamentals for IT Professionals
Training with aeCERT – UAE National Cybersecurity AuthorityaeCERT
Software Engineering and Artificial Intelligence
Research Methodologies in Computing and Technology
Exploring Artificial Intelligence – Foundations and Applications
Solar Technology and Renewable Energy Systems

Languages

Arabic · Professional

English · Professional