HATIM LOTFEY EISSA

• Co-Leads IT Integrated Management System for InfoSec & business continuity.
• Co-Directs SBA’s data management & governance framework.
• Co-Manages SBA’s security infrastructure policies & controls, including vendor negotiations and contracts.
• Provides strategic insights for new infrastructure solutions and refined existing systems.
• Continuously researching and integrating emerging technologies to meet SBA’s business requirements.

Achievements:

• Achieved ISO 27001 & 22301 certifications for Information Security & Business Continuity for three consecutive years.
• Directed multiple security infrastructure upgrades, including SBA’s Security Operation Center.
• Delivered consultations and awareness programs, fostering a secure work environment.

• Coordinated entity’s compliance efforts with Information Assurance standards & regulations.
• Managed security infrastructure controls and provided strategic consultations for IT infrastructure security.
• Audited production workflows, ensuring compliance with security standards and regulations.
• Managed media content lifecycle, retention, and restoration processes.

Achievements:

• Established a robust security monitoring system using open SIEM and metrics collection.
• Implemented risk management and change management procedures, enhancing operational security.
• Developed and enforced operational policies for media asset management and handling.

• Managed IT security policies and guidelines as part of the information security program.
• Directed the management and maintenance of IT Security infrastructure and systems.
• Performed security assessments, analysis, and testing, providing strategic recommendations.
• Conducted IT audits and inspections for compliance with EFRA’s regulations.

• Achievements:
• Contributed to the development of the Information Security program, driving organizational compliance.
• Led major IT security infrastructure upgrades, acting as a technical project manager.
• Served as a technical investigator in IT-related security incidents.

• Managed product portfolios and conducted client presentations and demonstrations.
• Responded to technical and financial RFPs, providing strategic solutions.
• Implemented installations and designed solutions for security products.
• Provided post-sales technical support, ensuring client satisfaction.

• Administered the facility’s IS network from domain administration to network infrastructure management.
• Maintained the facility’s information security aspects and systems.
• Provided support for the facility’s client computers and devices.