Omar Elmashhrawi

OT Cybersecurity GRC Manager specializing in governance, risk management, compliance, and advisory for Operational Technology (OT), Industrial Control Systems (ICS), and critical infrastructure environments. Experienced in NCA OTCC compliance and gap assessments, ISA/IEC 62443-aligned risk and architecture reviews, HRA/DRA, OT cybersecurity strategy and roadmaps, governance frameworks, policies and procedures, asset inventory and classification, and risk treatment planning. Proven experience leading OT advisory delivery, managing teams, supporting presales and proposals, and advising stakeholders across government, utilities, smart infrastructure, defense, aviation, and industrial sectors.

OT Advisory Services Manager at RESILIENCE (2026-03 – Present)

• Lead end-to-end delivery of OT cybersecurity advisory services, with emphasis on governance, risk, compliance, security improvement, and client assurance across industrial and critical infrastructure environments.
• Oversee OT cybersecurity assessments and advisory engagements covering NCA OTCC compliance, OT risk assessment, cybersecurity governance, strategy and roadmap development, and control implementation.
• Provide quality assurance across OT cybersecurity deliverables, ensuring consistency, technical rigor, actionable recommendations, and alignment with client and regulatory requirements.
• Manage OT advisory team operations, staffing, capability development, engagement execution, and performance while maintaining delivery quality and client satisfaction.
• Support business development, presales, technical proposals, scope definition, effort estimation, and commercial negotiations for OT cybersecurity opportunities.
• Develop strategic partnerships and complementary capabilities to expand the OT cybersecurity advisory service portfolio.

Cybersecurity Consultant at RESILIENCE (2024-05 – 2026-02)

• Delivered NCA OTCC compliance assessments and gap analyses for government, utilities, smart infrastructure, and industrial clients.
• Performed High-Level and Detailed Risk Assessments (HRA/DRA), OT asset inventories, risk registers, and risk treatment planning for operational technology environments.
• Developed OT cybersecurity strategies and roadmaps to prioritize governance, technical, and operational security improvements.
• Authored OT cybersecurity governance frameworks, policies, standards, and SOPs covering asset management, change management, incident response, and supply chain security.
• Designed and reviewed secure OT network architectures using segmentation principles, zones and conduits, and DMZ patterns.
• Led OT cybersecurity awareness and training initiatives and contributed to establishing the Resilience OT/ICS Cybersecurity Academy & Industrial Lab using real ICS hardware.

Concurrent Responsibility - Cybersecurity Awareness & Training Lead at RESILIENCE (2024-09 – 2026-02)

• Developed and delivered OT cybersecurity awareness programs for smart cities, defense industries, water, aviation, and petrochemical environments, with structured KPIs for effectiveness and knowledge retention.
• Designed a VR-based interactive cybersecurity awareness program in C# and supported its deployment in petrochemical and high-security environments.

Cybersecurity Associate Consultant at RESILIENCE (2023-09 – 2024-05)

• Supported OT cybersecurity risk assessments, compliance audits, and gap analyses aligned with NCA OTCC, ISA/IEC 62443, and NIST frameworks.
• Supported development and implementation of OT security policies, procedures, risk management frameworks, network segmentation, and access control improvements.
• Collaborated with engineering, IT, and security teams on incident response planning and cyber resilience initiatives for industrial environments.

Master of Science in Cybercrime and Digital Criminal Investigation – Naif Arab University for Security Sciences (NAUSS)

Bachelor of Science in Computer Science – King Fahd University of Petroleum and Minerals (KFUPM)