Ahmed Jm

Experienced and results-driven Senior Information Security Analyst with over 6 years of expertise in designing, implementing, and managing robust security solutions for diverse organizations. Proven track record in risk assessment, incident response, vulnerability management, and regulatory compliance. Adept at collaborating with cross-functional teams to safeguard critical assets and ensure business continuity.

Recognized for analytical thinking, attention to detail, and a proactive approach to emerging threats.

Information Security Officer at Kuwait Petroleum Corporation KPC (2025-04 – Present)

• Managed the creation and maintenance of comprehensive security documentation, including policy frameworks, risk assessments, compliance reports, and audit evidence repositories.
• Led and coordinated incident response activities, including detection, analysis, containment, eradication, recovery, and post-incident review, minimizing business impact and supporting continuous improvement.
• Evaluated and assessed new IT security solutions by conducting risk assessments, defining success criteria, and ensuring alignment with organizational security requirements and regulatory standards

Senior Information Security Analyst | Threat Intelligence at Burgan Bank (2023-03 – 2023-11)

• Participate in incident response activities, including conducting root cause analysis, containment, and remediation of security incidents.
• Develop and implement the information security program, including policies, procedures, and guidelines to ensure the protection of information assets.
• Perform security audits and assessments to ensure compliance with industry standards, regulations, and best practices such (CBK CSF, PCI DSS, ISO 27001).

Information Security Analyst at GBM ( Central Bank of Kuwait | KOC ) (2022-06 – 2023-03)

• Proactively Monitor and Investigate suspicious activities, contain and prevent them using IBM Qradar and Perform Root Cause Analysis of security incidents.
• Conduct vulnerability assessments and risk analysis to make recommendations for hardening the overall security posture of the organization using (burpsuite , rapid Nexpose).
• Monitor the structure and perform analysis of logs from different log sources such as FW, IDS,IPS,WAF Windows DC, AV and antimalware software, email security etc.

SOC / NOC Specialist at Zain Group (2020-12 – 2022-02)

• Conduct proactive monitoring, investigation, and mitigation of security incidents. Facilitate the design, integration, and optimization of customer assets within SIEM
• investigative support of large scale and complex security incidents and.
• Perform Root Cause Analysis of security incidents for further enhancement of alert catalog and Provide expert analytic solutions to enhance threat visibility and incident response efficiency.
• Develop and implement information security policies, procedures, and controls to mitigate identified risks and ensure compliance with industry standards and best practices.
• Managed project implementation for clients, including data center deployments and integration of security solutions such as SIEM-as-a-Service, Firewall-as-a-Service, DLP-as-a-Service, and Cloud-as-a-Service, ensuring robust security controls throughout the project lifecycle.

IT Security Engineer at Arabsque (2018-03 – 2020-12)

• mplement and manage security controls, including firewalls, intrusion detection and prevention systems, data loss prevention systems, and endpoint protection.
• Providing technical support internally and externally for company client through phone, Team Viewer, WebEx or physically on the site.
• Monitor and Manage network, Infrastructure and Security Logs and Preform a Vulnerability Scanning Using Qualys and open-Source-Tools.

BSc in Information Technology and Computing – Arab Open University (2013-08 – 2018-07)