Summary
Overview
Work History
Education
Skills
Languages
Timeline
Generic
Jennifer El Khoury

Jennifer El Khoury

Paris

Summary

Dedicated Manager offering over 8 years of experience in Cyber Security, Data Privacy, Business Continuity and IT Audit. Worked with clients in various industries, including banking, insurance, governmental entities, technology, retail, education, healthcare and manufacturing. Focused and motivational mentor adept at challenging team members to meet and exceed company goals.

Overview

9
9
years of professional experience

Work History

Cyber Security Manager

Deloitte Conseil
Paris
06.2022 - Current
  • Coached, mentored, and trained team members to improve their job performance.
  • Conducted regular meetings with staff to discuss progress and identify areas of improvement.
  • Monitored budgets to ensure cost-effectiveness while maintaining quality standards.
  • Conducted regular audits to verify that security measures were in place and effective.
  • Ensured compliance with all applicable laws, regulations, and industry standards for data protection.
  • Performed IT and IS risk assessments to identify areas of vulnerability in networks or applications.
  • Conducted an ISO 27001:2022 gap assessment to identify the clients' maturity level and supported the client to apply the identified recommendations in order to get the ISO 27001:2022 certification.
  • Conducted a NIST CSF gap assessment in order to identify the clients' cyber security maturity level, developed a cyber security strategy roadmap based on the gap assessment results, and supported the client to achieve these projects.

Cyber Security Manager

PriceWaterhouseCoopers
Beirut
09.2021 - 05.2022
  • Developed a detailed Unified Cybersecurity Framework covering standards/regulations (ISO 27001, NIST CSF, NIST 800-53, PCI DSS, GDPR, COBIT, OWASP, etc.).
  • Conducted meetings with clients regularly to review project performance and identify needs for strategy adjustments.
  • Led the delivery of IT and BCMS audit assignments in accordance with international standards and regulations.
  • Accurately identified project scope, staff requirements, timetable and budget, to consistently meet project goals.

Cyber Security Senior Consultant

PriceWaterhouseCoopers
Beirut
09.2019 - 08.2021
  • Executed IT and Cyber Security risk assessments based on international standards including threat and vulnerability identifications as well as risk impact analysis.
  • Conducted NESA IAS Compliance assessments for Banks in the UAE based on the NESA UAE information assurance standard.
  • Worked on the development of information security policies & procedures for a number of clients in the Middle East.
  • Conducted a Cyber Security Framework assessment for an alpha bank in Lebanon based on NIST and ISO 27001 framework.
  • Conducted different GDPR readiness assessments for various banks in the Middle East covering Strategy, Governance & Accountability, Data Subject Rights & Processing, etc.
  • Led the data privacy program implementation for a Third-Party Administrator in Lebanon. This included the conduction of workshops, creation of the international exhibition's data privacy policy, data privacy target operating model, Records of Processing Activities, and data protection impact assessments.
  • Worked on the implementation of a Business Continuity Management framework based on ISO 22301 by developing the whole framework for the client (Governance structure, policies, business continuity plans, business impact analysis, risk assessment, strategies, awareness and training program, crisis management plan, etc.).
  • Conducted Business Continuity Management and IT Audits for several clients across the Middle East.

Cyber Security Senior Consultant

Potech Consulting
Beirut
08.2017 - 08.2019
  • Ensured compliance audits with local regulations and third-party auditors, specifically for the banking sector.
  • Conducted Cyber Security Framework assessments for various banks in Lebanon based on NIST and ISO 27001 framework.
  • Conducted different GDPR readiness assessments for various banks in the Middle East covering Strategy, Governance & Accountability, Data Subject Rights & Processing, etc.

Cyber Security Consultant

Potech Consulting
Beirut
07.2014 - 07.2017
  • Executed information security assessments (Vulnerability assessments, Active Directory group policies review, IT infrastructure security review, etc.) for more than 15 organisations, including banks, financial institutions, hospitals and retail groups.
  • Ensured compliance audits with local regulations and third-party auditors, specifically for the banking sector.
  • Reviewed, developed and updated information security policies & procedures based on local regulations and international standards (e.g. ISO 27001-27002).
  • Developed and delivered information security awareness programs such as awareness workshops, awareness emails, information security evaluation and social engineering tests.
  • Ensured appropriate monitoring and efficient log review for the different components of the information system (systems, databases, network equipment, security devices).
  • Assisted in the development of the IT security requirements related to new IT projects.

Education

Master of Science - Systems & Networks,Specialty:Information Security

Saint- Joseph University
Beirut, Lebanon
07.2015

Bachelor of Science - Computer Networking And Telecommunications

Saint- Joseph University
Beirut, Lebanon
07.2013

Skills

  • Customer Relationship Management (CRM)
  • Brand Management
  • Agile Project Management
  • Team Leadership
  • Staff Management
  • Performance Management
  • Complex Problem-Solving
  • Time Management
  • Budget Control

Languages

Arabic
First Language
English
Proficient (C2)
C2
French
Proficient (C2)
C2

Timeline

Cyber Security Manager

Deloitte Conseil
06.2022 - Current

Cyber Security Manager

PriceWaterhouseCoopers
09.2021 - 05.2022

Cyber Security Senior Consultant

PriceWaterhouseCoopers
09.2019 - 08.2021

Cyber Security Senior Consultant

Potech Consulting
08.2017 - 08.2019

Cyber Security Consultant

Potech Consulting
07.2014 - 07.2017

Master of Science - Systems & Networks,Specialty:Information Security

Saint- Joseph University

Bachelor of Science - Computer Networking And Telecommunications

Saint- Joseph University
Jennifer El Khoury