Principal Security Advisor · CISO-Level Advisory

Senior security judgment for regulated institutions across the GCC and South Asia.

25 years building, leading and advising security programmes. Available on retainer, onsite, online or hybrid.

Start a conversation

25+ years in security GCC & South Asia Financial services, telecom & government

What I do

Four ways I work with clients

CISO-Level Advisory

Security leadership and executive reporting on retainer, without a full-time hire.

AI Governance

Risk and accountability frameworks for AI and agentic systems, set up before they reach production.

Digital Fraud Risk

Fraud risk frameworks and controls for digital channels facing AI-enabled attacks.

GRC & Regulatory Compliance

Programme design and regulatory readiness across ISO 27001, NIST, PCI DSS and regional frameworks.

Selected experience

Work that holds up under scrutiny

Critical Infrastructure

Qatar 2022 FIFA World Cup

Led cybersecurity advisory for a Qatari financial institution under the national critical infrastructure protection programme. Highest compliance maturity rating across multiple cybersecurity domains under the Qatar 2022 framework, with zero security incidents through the tournament.

EY Consulting, Qatar · 2021 to 2023

Security Leadership

Building a security function from zero

Built and led a 20-person information security unit at AlRayan Bank over nearly nine years, covering governance, risk, operations and regulatory compliance, reporting to the CEO.

AlRayan Bank, Qatar · 2009 to 2018

Transformation

Security governance for a major transformation

Currently leading security governance for a large transformation programme at a regulated institution in Qatar, covering core platform migration, digital channels, cloud adoption and AI adoption.

Independent practice · 2023 to present

About

25 years in. Still in the field.

I started as an engineer and ended up at the table where technology, risk and regulation collide. I have built security functions from zero, run them as CISO, and directed advisory engagements at EY and through my own practice.

My clients are regulated institutions in financial services, telecom and government that need senior security judgment without a full-time hire. The work covers CISO-level advisory, GRC and regulatory compliance, digital fraud risk, and AI governance.

On AI governance, I am a PhD researcher in agentic AI governance. I am not commenting on where this is heading from the outside. I am in the literature, helping to shape it.

I work onsite, online or hybrid depending on what the engagement needs. My primary markets are the GCC and South Asia, and I am open to engagements in other regions.

Certifications

AAISM · CISSP · CISM · CISA · CRISC · ISO 27001 LA · PMP · CEH · CRCMP

Chartered designations

Chartered Engineer, CEng (UK) · Chartered IT Professional, CITP (BCS)

Recognition & research

MESA CISO 100 · PhD researcher, agentic AI governance · Member of ISACA, ISC2, IEEE, IESL

Sulaiman Razmik, Principal Security Advisor

25+

Years in security

GCC + South Asia

Primary markets

Regulated

Financial services, telecom, government

Get in touch

Let's talk about your next engagement.

Engagement terms

USD 2,500 / day

Advisory engagements start at USD 2,500 per day with a minimum commitment of 10 days. Retainer and long-term arrangements are structured differently. Let's talk.

Currently in a dedicated engagement through mid-2027. Taking enquiries now for future engagements.

Prefer email? sulaiman@razmik.org