Mohammed Sharjeel Sada Sada

• Partnered with teams to integrate advanced security measures throughout the software development life cycle, ensuring robust and secure product releases.
• Reduced cyber-attack risks by executing vulnerability assessments and penetration testing, leading to proactive threat mitigation.
• Led vulnerability management initiatives for clients, delivering in-depth reports with prioritized findings and actionable remediation plans.

ITC Infotech Ltd - Cybersecurity Manager (Sep 2016 - Oct 2024)
• Application Security Practice: Managing a portfolio of client accounts (W1tty, SAP, SNB (Jeddah), KONE, NBB, Ministry of Culture (Riyadh), Eurofins, 4 Seasons, Qatar Airways etc, leading a 20-member team while consistently achieving a 45% GOM.
• Delivered security services: Including Penetration Testing (Web, Mobile, API, Infra), SAST, DAST, Secure Configuration Reviews, Threat Modelling, Vulnerability Management, and Secure SDLC consulting and testing activities.
• Risk Assessment: Conducted risk assessments and impact analyses to identify and mitigate vulnerabilities.
• Policy Development: Drafted and enforced security policies, procedures, and standards aligned with requirements. Creating SOW’s.
• Skilled Project Management: Proven track record of driving short- and long-term project objectives through effective coordination between offshore and onshore teams.
• Oversaw the entire project lifecycle from scope and resource planning to stakeholder engagement, final delivery, and post assessment support, ensuring strict alignment with client security policies and SAMA compliance standards.
• Drove a 40% reduction in high-severity vulnerabilities within eight months through focused assessments and continuous improvement initiatives.
• Prepared baseline documents for the client as per SAMA guideline and organization Policy.

Received An Appreciation from the CTO of W1TTY and team for exceptional project management and client relationship.
• Led large-scale projects managing resources and ensuring successful execution.
• Strengthened team performance by monitoring progress and providing structured feedback.
• Managed cybersecurity and IT transformation projects across banking, healthcare, and public sector clients.
• Implemented security frameworks for compliance with global standards, enhancing operational security.
• Partnered with IT teams to integrate advanced security measures throughout the software development life cycle, ensuring robust and secure product releases.

• Supervised multiple project teams at ITC Infotech and AlTurki Enterprises (OMAN, Muscat), focusing on cybersecurity VAPT & project management
• Developed business proposals, and training programs to enhance internal capabilities.
Implemented security frameworks for compliance with global standards, enhancing operational security.
• Partnered with IT teams to integrate advanced security measures throughout the software development life cycle, ensuring robust and secure product releases.

• Led security testing for the account, overseeing vulnerability management and conducting penetration tests across multiple clients & projects.
• Performed WAPT, VAPT and security testing on servers and systems.
• Prepared comprehensive report on findings and action items to fix the identified vulnerabilities
• Interaction with clients to provide appropriate remediation's and recommendations to strengthen the security of the product.