Kholoud Khalid

Cybersecurity Architecture professional with 7+ years of experience in designing and implementing secure enterprise environments. I specialized in Architecture Security, Zero Trust Architecture (ZTA), and aligning security controls with NIST frameworks. Experienced in building cybersecurity capabilities from the ground up, ensuring compliance with SAMA and NCA regulations, and leading security architecture across complex infrastructures.

Cyber Security Architecture Specialist at General Authority of Civil Aviation (2021-11 – Present)

• Design and implement enterprise-wide cybersecurity architecture aligned with organizational strategy and NCA regulations.
• Manage security operations by monitoring, analyzing, and responding to advanced threats within the SOC environment.
• Develop and deploy threat intelligence frameworks, including IOCs, YARA rules, and CVE-based detections.
• Oversee vulnerability management lifecycle, performing risk assessments, patch validation, and remediation tracking.
• Review and approve cybersecurity requirements for RFPs, change requests, and new technology initiatives.
• Enforce network security controls, including firewall configurations, secure port management, and intrusion prevention.
• Implement endpoint security measures to safeguard user systems against malware, ransomware, and unauthorized access.
• Ensure compliance with NCA standards, ISO 27001, and regulatory frameworks, conducting periodic audits and reporting.
• Partner with IT and application teams to integrate secure architecture into infrastructure and software development lifecycles.
• Conduct penetration testing validation (PTVA) and document mitigation strategies for executive reporting.
• Strengthen data protection and access controls to safeguard critical information assets and sensitive aviation systems.
• Drive implementation of multi-layered defense mechanisms, enhancing resilience against emerging cyber threats.
• Provide executive-level reporting on cyber risk posture, security KPIs, and incident trends for informed decision-making.
• Led the adoption of Zero Trust Architecture (ZTA) principles, including identity-based access, micro-segmentation, and continuous verification.
• Aligned enterprise security architecture with NIST frameworks (e.g., NIST CSF, NIST 800-53), ensuring governance, risk, and compliance requirements.
• Developed and enforced security controls across network, application, and cloud layers.
• Integrated security solutions such as WAF, EDR, and IAM within a secure architecture model.
• Conducted risk assessments and implemented mitigation strategies based on regulatory standards (SAMA, NCA).

Cyber Security Specialist at Jeddah Municipality (2019-06 – 2021-06)

• Provided cybersecurity support across enterprise systems, ensuring business continuity and secure operations.
• Managed daily operations of firewalls, proxies, vulnerability assessment tools, and intrusion prevention systems (IPS).
• Investigated and resolved cybersecurity incidents, conducting network and system analysis to contain threats.
• Administered and controlled proxy solutions, ensuring secure web access and policy enforcement.
• Led vulnerability identification, classification, and remediation, coordinating with system owners for closure.
• Proposed and implemented countermeasures and mitigations to address advanced threats and vulnerabilities.
• Conducted YARA rule scans and forensic investigations to detect and mitigate malicious activity.
• Managed ticketing workflows and remediation tasks across multiple security platforms and business units.
• Researched and assessed emerging threats, integrating findings into security strategy and defense planning.
• Produced and tracked mitigation plans, ensuring execution and reporting to management and stakeholders.
• Administered and supported cybersecurity solutions to strengthen infrastructure security posture.
• Oversaw system integration and deployment of security tools, enhancing overall defense capabilities.

Cyber Security Analyst at Salama Insurance (2018-06 – 2019-06)

• Supported the CISO in building a cybersecurity department, briefly acting as interim Chief Information Security Officer.
• Developed and updated security plans and controls to ensure compliance with SAMA regulations and frameworks.
• Performed vulnerability assessments, threat analysis, and penetration testing, reporting findings and leading remediation efforts.
• Conducted cybersecurity audits on hardware, software, and infrastructure to identify security gaps and risks.
• Designed and delivered cybersecurity awareness programs to strengthen organizational security culture.
• Authored and enforced cybersecurity policies and procedures, driving maturity against regulatory frameworks.
• Administered Data Loss Prevention (DLP) systems and ensured effective incident detection and response.
• Managed and closed Indicators of Compromise (IOCs) issued by SAMA, coordinating with IT teams for resolution.

Master's Degree in Cyber Security – King Abdulaziz University (2021 – 2024)

Bachelor's Degree in Information System Security – Effat University (2013 – 2018)