[ Briefing: Cybersecurity & AI Risk Governance ]

Securing Sovereign Infrastructure & Enterprise Value.

An 18+ year track record directing large-scale security, governance, and risk programs across Saudi Arabia and North America. Serving as a trusted advisor to government ministries, corporate boards, and executive suites on critical framework modernizations, Zero Trust migrations, and secure AI adoption architectures.

CISSP CCSP CAISS (AI Security) PMP

Ali Hilal

Director / VP Level Executive

SAR 2.3 Billion

National Program Oversight Managed

40% Reduction

Credential Exposure Risks Achieved

CAISS Core

Certified Next-Gen AI Risk Mitigation

Areas of Authority

National Compliance

Aligning enterprise controls strictly with complex legal and state mandates, including the NCA Essential Cybersecurity Controls (ECC), SAMA, ISO 27001, and NIST frameworks.

Zero Trust & Cloud

Architecting modern, defense-in-depth perimeters, orchestrating enterprise-wide migrations to cloud security models (Azure), and establishing centralized privileged-access systems (CyberArk).

AI Risk Architecture

Vetting enterprise AI adoption use cases under cutting-edge standards like the NIST AI Risk Management Framework and ISO/IEC 42001 to ensure early compliance in highly regulated sectors.

Professional Leadership Timeline

Source document verification: Ali Hilal Resume Director VP Cybersecurity KSA.docx

Allstate Canada (Toronto, ON) Sep 2025 – Present

Merger Lead | Strategy & Planning (Cybersecurity)

Sponsoring cross-border identity consolidation strategies, multi-phase endpoint standardization programs, and enterprise SIEM/telemetry maturity frameworks directly linked to corporate risk-reduction objectives.

Allstate Canada Sep 2024 – Sep 2025

Sr. Cybersecurity Program Specialist

Directed tooling migration to integrated Microsoft Security platforms (Defender XDR, Entra ID, Purview) alongside CyberArk EPM deployments across 10,000+ endpoints, yielding a 30% license cost optimization and 40% credential risk reduction.

Scotiabank (Toronto, ON) Jan 2024 – Aug 2024

Information Security Manager | Cybersecurity

Spearheaded secure CyberArk credential lifecycle isolations and designed reporting metrics and custom dashboards providing executive board level transparency into OSFI, ISO 27001, and NIST framework control health.

Detecon Al Saudia Company Limited (Riyadh, KSA) Sep 2017 – Dec 2020

Director of Implementation — Infrastructure

Orchestrated on-premises infrastructure transformation strategies to isolated Microsoft Azure zones utilizing Private Link mechanisms. Enforced rigid national standard compliance structures aligned seamlessly with NCA baselines.

Al Mozoon Telecom (Ministry of Interior, KSA) Feb 2009 – Mar 2012

Regional Manager — NEMO Network Modernization Program

Managed delivery lines for a massive SAR 2.3 billion national critical network core backbone program, uniting strategic IP/MPLS communications arrays securely across 390 sovereign border-guard post stations.