Anas Eltahir

Starting my career in academia, I developed a strong foundation in simplifying complex technical concepts—a skill that continues to shape my approach to security leadership. Over the years, I have transitioned into a strategic consultant, certified auditor, and public sector advisor, delivering security-led transformation across both government and private organizations.

My leadership roles include directing cybersecurity functions for high-profile entities such as Dubai Media Incorporated and H.H. The Ruler’s Courts of Dubai, where I successfully deployed Information Security Management Systems (ISMS), led enterprise-wide Zero Trust initiatives, and ensured compliance with frameworks such as ISR, ISO 27001, 22301, 20000, and COBIT. I have also served as a senior consultant for major regional projects including Neom ITSM & Compliance Implementations (KSA), Balady Platform Project at the Ministry of Municipality and Housing (Riyadh, KSA), and ISMS Implementation & Certification at ViVA Telecom (Manama, Bahrain). I am trusted for my ability to develop risk-resilient infrastructures, conduct enterprise audits, and establish data privacy, business continuity, and IT risk strategies.

I hold a distinguished set of credentials, including C|CISO, CISSP, CGEIT, ISO Lead Auditor (27001, 22301, 20000), ITIL Expert, and multiple certifications in governance, risk, and compliance. Known for my hands-on leadership style and advisory capabilities, I have supported organizations in implementing digital resilience, strengthening information assurance, and navigating today’s complex threat landscape.

• C|CISO, EC-Council, Certified Chief Information Security Officer by EC-Council, which demonstrates expertise in managing and overseeing an organization's information security strategy, helping to protect vital assets and mitigate risks.
• Certified Information Systems Security Professional (CISSP), Simplilearn, Certified Information Systems Security Professional (CISSP) from Simplilearn, which demonstrates expertise in cybersecurity best practices and principles, helping to safeguard sensitive information, and enhance organizational security frameworks
• Privacy Information Management System, ISO 27701:2019, Achieved certification in Privacy Information Management System ISO 27701:2019, which demonstrates a commitment to effective data protection practices and enhances trust with stakeholders.
• ISO Certified Lead Auditor, LRQA, Certified Lead Auditor from LARQA for Management Systems ISO 20000, ISO 27001, and ISO 22301, which ensure compliance and enhance organizational efficiency and resilience
• ITIL Certified Expert, APMG-International, achieved ITIL Certified Expert status by fulfilling the requirements for ITIL Service Manager in ITIL 2 and ITIL 3, followed by an upgrade to ITIL Version 4, enhancing service management skills

The Complete List of Professional certifications:

• C|CISO Certified,
• COBIT Certified,
• CGEIT Certified,
• CISSP
• ISO 27701 ISO 27000, ISO 20000 & ISO22301 Licensed Lead Auditor,
• Privacy Information Management Systems Certified,
• GDPR Certified Practitioner.
• PCI DSS Certified
• TOGAF 9.1 Professional
• Certified PRINCE2 Practitioner
• ITIL Expert
• IT Governance Certified
• Cloud Computing Associate
• Certified Ethical Hacker,
• Microsoft Certified Technology Specialist
• TIL Service Manager V2 & V3 Certified,
• CCNA, MCSE, MCDST.

Dubai Legal Affairs Department | Zero Trust & Cyber Resilience Strategy (Project Duration: 2023–2025 | Role: Strategy Lead)

Directed the development and rollout of a Zero Trust and Cyber Resilience Strategy tailored for the Dubai Legal Affairs Department. Enhanced organizational defenses by integrating advanced access controls, modernized security architecture, and staff-wide training programs. Fostered a security-first culture and ensured readiness against evolving cyber threats while aligning with national ISR regulations and international cybersecurity standards.

Dubai Legal Affairs Department | Digital Transformation Program (Project Duration: 2022–2024 | Role: Program Lead)

Led the end-to-end digital transformation journey for the Dubai Legal Affairs Department, aligning technology initiatives with Dubai Government’s 04 platform and Service 360 policy. The program encompassed infrastructure modernization, AI-based service automation, cloud migration, and the development of Tawtheeq 2.0—the region’s first AI-powered legal platform. Oversaw platform architecture, data governance, and digital service modeling, ensuring strategic alignment, security, and compliance across the transformation lifecycle.

NEOM – Public Safety Department (KSA) | ITSM Design & Implementation (Project Duration: 2021–2022 | Role: Senior ITSM Consultant)

Led the comprehensive IT Service Management (ITSM) transformation initiative for NEOM’s Public Safety Department, delivering a full framework based on ITIL and ISO 20000 standards. The engagement included service catalogue development, process design, policy formation, and integration of ITSM functions into NEOM’s operational landscape. Aligned IT services with business units through structured service models, established performance indicators, and enabled governance via defined roles and review mechanisms. The project elevated service maturity, improved end-user experience, and ensured long-term maintainability and compliance across all IT service domains.

ISMS & Governance Framework Implementation | Multiple Government Entities (Project Duration: 2007–2024 | Role: Lead ISMS Consultant)

Led the design, implementation, and certification of Information Security Management Systems (ISMS) across multiple public and private sector organizations. Delivered successful implementations for entities including Dubai Media Incorporated, Dubai Legal Affairs Department, Abu Dhabi Police, and GDRFA Fujairah, aligning with ISO 27001 standards and enhancing their security posture and compliance. Developed repeatable methodologies for secure deployment and streamlined ISMS adoption across SME clients in the GCC region.

VIVA Telecommunication B.S.C. – Bahrain | ISO 27001 Implementation & ISMS Upgrade (Project Duration: Aug – Oct 2017 | Role: Lead Implementor)

Led the full-cycle implementation and upgrade of the Information Security Management System (ISMS) for VIVA Telecom, aligning with ISO/IEC 27001:2013 standards. Managed all project phases from gap analysis to certification, including policy development, risk assessment, SoA creation, internal audits, and management reviews. Delivered a fully certified ISMS tailored for a high-availability telecom environment, enhancing cybersecurity governance, audit readiness, and regulatory compliance. Coordinated cross-functional teams and certification bodies to ensure successful outcomes within timeline and scope.

• The World's CIO 200 Award

07/01/24, , South Africa, Selected as one of the top Worlds 200 CIOs in South Africa for exceptional achievements and contributions, highlighting impactful leadership and innovative solutions within the industry.

• MENA CISO 100 Award

2024 Selected as one of the top regions CISO in Dubai UAE,  for exceptional achievements and contributions the industry.

• Dubai Excellency Award Program (DEGP)

01/01/07, Distinguished Government Team - , UAE News Team

• Arabic, Native
• English, Professional
• Turkish, Limited

07/2024

The World's CIO 200 Award

South Africa

Selected as one of the top Worlds 200 CIOs in South Africa for exceptional achievements and contributions, highlighting impactful leadership and innovative solutions within the industry.

01/2007

Distinguished Government Team - Dubai Excellency Award Program (DEGP)

UAE News Team

• Advisory Board Member for Certification Partner Global

CPG is a full-scope certification body accredited by JAS-ANZ (Joint Accreditation System – Australia New Zealand), SAC (Singapore Accreditation Council), EIAC (Emirates International Accreditation Centre), SANAS (South African National Accreditation System), and Highfield Certified