Hard-working professional with proven teamwork skills.

Aiming to
leverage my abilities to successfully fill the role at your company . HAIFA
Frequently praised as hard-working, detail-oriented, focused by my
peers. I can be relied upon to help your company achieve its .
ALORAINI
Contact
Work History
Address
2021-02 - Analyst - HR Opreations Riyadh
2021-06 KPMG, Riyadh Phone
Employee Onboarding Process: 0553360763
Conducting comprehensive induction program for
E-mail
new hires
orainihaifa@gmail.com
The program aims to ensure smooth integration of
the new employee into
KPMG by providing them with information about Skills
KPMG's core activities, people policies and work
environment Information gathering
Preparing colleagues for the new employee
Statistic analysis
Preparing contracts
Making sure your new employee has access to all MS Office
necessary programs
Dependable and
Preparing access cards, raising IT tickets.
Responsible
Cultivated relationships with industry leaders and
within company to share tips and information. Excellent Communication

2021-04 - Analyst - Recruiter Problem-Solving

2021-05
KPMG, Riyadh Cultural Awareness
Vacancy
Sourcing and screening
Interviewing and selecting
Job offering

2021-02 - Analyst, Data Management

2021-04 KPMG, Riyadh
I used SAP system (enterprise resource planning
software) to get things done and so I have a working
knowledge of it.
Monitored compliance and filing requirements in
conjunction with staff and management.
Troubleshot data-related problems and coordinated
maintenance or modifications to correct defects.
 Conducted system analysis and implementation to
maintain and improve computer systems.

2021-06 - Defense Analyst

2022-06 General Authority For Military Industries , Riyadh, Saudi
Arabia
The business objective of the project was to develop
new regulations of the military industry sector.
The overall scope of the project was to work on over 4
phases starting with an assessment of the current
situations of the industry, its needs, and an initial
recommendations report.
The process for information collection included a series
of meetings with key stakeholders and industry main
players This phase resulted in a comprehensive As Is
Assessment Report. Followed by a benchmark study of
5 leading international organizations in this field, and 2
successful local models.
The third phase was about writing the initial draft of the
regulations' provision, the glossary.
The final phase included finalizing the glossary and
regulations with key stakeholders after providing their
feedback and creating the press release statement.

2022-05 - Cybersecurity Analyst

2022-07
KPMG, Riyadh, Saudi Arabia

NCA Cybersecurity Assessment Review based on ECC

and OTCC frameworks.

●Conduct meetings/interviews with relevant

Information Security teams to understand the scope
and execution of the NCA-ECC and OTCC assessment
and analyze/review the NCA-ECC and OTCC
assessment report.
●Test of Design – Review all relevant documentation,
processes, procedures relating to NCA-ECC and OTCC
assessment.
●Test of Implementation – Review and Assess the
implementation along with relevant evidences for
each control with regards to controls related to
 NCA-ECC and OTCC assessment.
●Test of Operating effectiveness – Assess whether the
key Performance Indicators (KPIs) were verified to
ensure that the processes are periodically monitored
and reported.
●Review the mitigation plans or actions in progress.
Submit a draft of filled in NCA-ECC and OTCC
assessment gaps and recommendations and obtain
agreement with respective stakeholders.
● Develop the Implementation roadmap where it will
be discussed with stakeholders and the central
management of the entity affiliate to include their
conclusion in the final report.
●Develop a roadmap that aims to uplift the entity
cybersecurity capability and controls in addition to
upscaling its cybersecurity posture against NCA ECC
and OTCC frameworks.
●Identify activities, sourcing strategy, constraints, risks,
performance measures and deliverables for each
strategic initiative
●Develop awareness training material for the entity's
employees to understand the IT/OT Cybersecurity
transformation and uplifting journey.

Education

Bachelor Degree of Arts: Languages and

Translation, English
King Saud University

2016-09 - Saudi Arabia - Riyadh

2020-05

Certifications

2022-06 ISO 27001-Compliant Cybersecurity Program

2022-05 IT and Cybersecurity Risk Management Essential

Training

2022-04 Cybersecurity Foundations