Experienced GRC Specialist with over five years in governance, risk, and compliance. Certified ISO 27001 Lead Implementer with expertise in designing, implementing, and maintaining security policies aligned with ISO 27001 standards. Skilled in risk assessments, compliance audits, and regulatory adherence, with knowledge of frameworks such as SOC 2, GDPR, SAMA, and NCA. Proven track record in leading certification processes, creating ISMS policies, and conducting threat risk assessments to strengthen data protection and business resilience.