amna.elsheikh's CV
amna.elsheikh
Cyber GRC Analyst | ISO 27001
Profile summary
Adaptable professional transitioning from computer science to a Cyber GRC Analyst role with 2 years of experience across 10 organizations in Qatar. Competent in ISO 27001 implementation, ITGC testing, risk assessment, and compliance monitoring. Committed to applying security controls and information security policies to support operational compliance and risk management.
Career highlights
Compliance Implementation: Led ISO/IEC 27001:2022 implementation activities including ISMS documentation, risk assessments, and security control alignment across enterprise systems.
Auditing Practice: Tested IT General Controls and IT Application Controls across critical client systems while conducting walkthroughs of IT processes.
Security Awareness: Trained 200 students on cybersecurity fundamentals including online safety, threat identification, and data protection.
Certifications: Earned professional credentials including CompTIA CySA+ CS0-003, CompTIA Security+ SY0-601, and EC-Council Certified SOC Analyst.
Key skills
Professional experience
Managed compliance activities within security operations, focusing on governance frameworks and risk management procedures across enterprise systems. Oversaw document creation, audit preparation, and policy maintenance to support standard adherence.
- Led ISO/IEC 27001:2022 implementation activities including ISMS documentation, risk assessments, and security control alignment across enterprise systems.
- Developed, reviewed, and maintained security policies, standard operating procedures, audit evidence packages, and compliance documentation.
- Drove internal audit preparation, corrective action tracking, and security governance activities to sustain ongoing compliance posture.
Executed IT audit engagements for banking and insurance clients, coordinating with audit teams to review critical systems and prepare documentation following firm standards.
- Tested IT General Controls and IT Application Controls across critical client systems.
- Conducted walkthroughs of IT processes covering user access management, change management, and IT operations.
- Identified control deficiencies and prepared working papers aligned with audit requirements.
Reported to the program director, managing training delivery for public audiences across varied age brackets, focusing on core curriculum execution, material adaptation, and participant engagement.
- Trained 200 students on cybersecurity fundamentals including online safety, threat identification, and data protection.
- Designed interactive educational sessions tailored to varied knowledge levels to improve security awareness outcomes.
Reported to the technology department while coordinating across museum visitor services teams to build operational analytics tools and visitor engagement systems.
- Designed and deployed an RFID-based interactive system integrated with Raspberry Pi and APIs.
- Built a responsive exhibition audio guide website using Ruby and Jekyll.
- Analyzed visitor engagement data and developed interactive Power BI dashboards.
- Developed a real-time web monitoring tool to track website availability and response times with automated reporting.
- Designed a Power BI data visualization solution to enhance business intelligence reporting for internal stakeholders.
- Developed front-end user interface components using Angular to support application features.
- Integrated REST APIs to enable data transfer for real-time optimization workflows.
- Executed threat analysis drills to identify potential system vulnerabilities.
- Completed training modules for security operations.
- Completed technical exercises aligned with bootcamp requirements.
- Engaged in collaborative security labs.
- Documented potential security incidents after reviewing alert logs according to standard operating procedures.
- Forwarded escalated tickets to Tier 2 personnel with relevant contextual data attached.
- Delivered training sessions covering cyber threat identification and prevention strategies for attendees.
- Distributed educational materials regarding online security practices and phishing recognition.
- Contributed to front-end development using Angular for web interfaces.
- Supported REST API integration for real-time data optimization workflows.
Education
Computer Science - Concentration: Cybersecurity
- Dean's List Honoree - Spring 2019 & Fall 2023
- Third Place Winner - Senior Design Project Contest, 2023
Certifications
Languages
Arabic · Native
English · Professional