
governance, risk, and compliance professional who started her career in the Big 4 (PwC, EY) executing IT audit engagements, ITGC reviews, and cybersecurity maturity assessments. She then moved into senior leadership roles where she built compliance and risk functions from the ground up: risk methodologies, control frameworks, business continuity programs, and audit readiness structures. Certified as CISM, ISO 31000 Lead Risk Manager, ISO 22301 Lead Implementer, and PECB Certified Trainer. Her work spans regulatory environments including ISO 27001, SOC 2, NIST CSF, NCA ECC, SAMA Cybersecurity Framework, and UAE IAS. She is also an international speaker on business continuity and cybersecurity resilience.
She works directly with CEOs, CFOs, and CISOs to translate complex security and compliance landscapes into clear, actionable architectures. Whether your organization is preparing for a certification audit, formalizing its risk management program, or building a business continuity capability, she brings the strategic lens and the hands-on execution to make it happen.