IT INFRASTRUCTURE // CYBERSECURITY // GRC
I'm Zeeshan Khan — an IT Infrastructure & Cybersecurity professional with 8+ years of experience across technology operations, cyber defense, governance, risk, assurance and transformation across KSA & UK.
I work where infrastructure reliability, cybersecurity and governance meet — keeping technology operational while reducing risk and strengthening assurance.
My background spans IT infrastructure and support, network operations, cybersecurity implementation, SIEM, vulnerability and patch management, IT/IS audit, cyber-risk analysis, policy development, data protection, ERP/business systems and disaster recovery.
I work with requirements and frameworks including NIST CSF, NCA ECC, SACS-210, ISO/IEC 27001, SAMA Cybersecurity Framework, CIS Controls, NCA OTCC and GDPR.
Leading IT infrastructure and cybersecurity operations across KSA & UK, including network and data security, IT policies and best practices, system audits, technology projects, ERP/business systems, vendor improvement, training, backups, disaster procedures, data protection and security assurance.
Focused consulting engagement covering penetration testing, security policy development, NCA ECC work programs and IT General Controls audit activities.
Worked across Windows, VoIP and file servers, endpoint protection, vulnerability and patch management, IBM QRadar SIEM, threat and incident monitoring, risk analysis, security policies, network monitoring, service providers and integrated physical-security technologies.
Enterprise systems, Windows Server, networks, technology lifecycle, service continuity, backups and operational resilience.
OPS_NODESIEM monitoring, vulnerability management, patch management, endpoint security, threat monitoring and incident support.
SEC_NODESecurity frameworks, ITGC, cybersecurity maturity, risk analysis, policies, control assurance and audit coordination.
GRC_NODEData protection governance, GDPR responsibilities, policy development and privacy-aware technology operations.
PRIV_NODEERP implementation support, business systems, technology improvement, vendor coordination and digital transformation.
TRANSFORM_NODEStaff workshops, cybersecurity awareness, technical guidance, stakeholder coordination and executive communication.
LEAD_NODERecognition beyond the job description.
Recognized as a Distinguished Winner of the CIO200 Next-Generation Award.
Recognized through the U.S. Department of Energy responsible disclosure program.
2014 — 2018