Summary
Overview
Work History
Education
Skills
Affiliations
Certification
Timeline
Generic

Martheed Daghar

Technology Risk Consulting Manager
Riyadh, Saudi Arabia

Summary

Martheed is a seasoned Cybersecurity professional and strategic leader with a robust track record in delivering top-tier advisory services across diverse sectors, including Telecommunications, Government and Public Sector (GPS), Healthcare, and Financial Services. Leveraging five years of distinguished military service in the United States Navy and Fleet Marine Force, Martheed has honed exceptional leadership skills, consistently demonstrating versatility and adaptability.

Throughout a dynamic career, Martheed has successfully navigated complex challenges and rapidly evolving technological landscapes, driving impactful cybersecurity initiatives. Known for an ability to master new roles and technologies swiftly, Martheed excels in consulting engagements, consistently achieving positive outcomes for clients.

Overview

15
15
years of professional experience
4
4
years of post-secondary education
5
5
Certifications

Work History

Cybbersecurity Advisory Manager

KPMG Professional Services
08.2024 - Current
  • Led the largest cybersecurity engagements for the firm, overseeing teams of up to 20+ professionals.
  • Successfully transformed cybersecurity GRC departments for large enterprises, significantly enhancing governance, risk management, and compliance functions.
  • Managed client relationships, ensuring strong partnerships and alignment with client objectives to drive successful outcomes.
  • Collaborated with alliance partners to develop joint go-to-market strategies, expanding service offerings and driving growth.
  • Led business continuity, crisis management, and disaster recovery engagements, ensuring clients were well-prepared for potential disruptions and risks.
  • Provided leadership in cybersecurity strategy and transformation, aligning client operations with industry best practices.
  • Spearheaded the development of firm solutions in Identity and Access Management (IAM) and managed services for cybersecurity GRC, driving new business growth.
  • Contributed to firm-wide business development efforts by drafting numerous winning proposals, securing new client engagements.
  • Managed all aspects of project execution, including team staffing, resource planning, and financial oversight, ensuring timely delivery of high-quality outcomes.

Business Consulting Manager - Technology Risk

EY
07.2020 - 07.2023
  • Managed a team of Technology Risk Consultants providing advisory services and subject matter expertise to the Office of the Army CIO, delivering oversight support and risk mitigation recommendations for cybersecurity contols issues identified during the annual financial statement audit for one of the largest U.S. Department of Defense (DoD) entities.
  • Conducted research on Identity, Credentialing, and Access Management (ICAM) solutions to address entity-level access control vulnerabilities and presented findings to the client, informing strategic decisions.
  • Led a team of consultants in enhancing cybersecurity risk management frameworks to align with financial regulations by identifying risks and controls specific to business systems with unique requirements.
  • Fostered relationships with policy offices across various government departments, including CIO offices, Comptrollers, IT system owners, and technical teams, ensuring coordination on ITGC corrective action plans and other audit remediation initiatives, resulting in the successful completion of the majority of ITGC corrective actions.
  • Prepared senior executives to address audit strategic objectives by researching industry trends, analyzing data, and presenting concise, focused reports that informed decision-making.
  • Utilized analytical tools such as Power BI to create dynamic dashboards that tracked IT risk remediation progress, providing senior executives with actionable insights on project metrics, deviations, and forecasts.
  • Developed and maintained policies and standard operating procedures governing the IT audit remediation lifecycle, ensuring they remained current for all defense business systems.
  • Led a team of Enterprise Risk Consultants to design and implement processes that accurately accounted for internal use software on the entity's balance sheet in accordance with Federal Accounting Standards Advisory Board (FASAB) standards.
  • Contributed to firm business development by performing market research and drafting business proposals for new contract pursuits.

Principal Auditor - Technology/Cyber

Capital One
07.2019 - 06.2020
  • Conducted in-depth cybersecurity audits across key areas, including Third-Party Risk Management, Data Governance, Real-Time Data Streaming, Threat Management, Business Resilience, and Enterprise Access Controls. Identified critical vulnerabilities and control gaps by conducting detailed interviews with stakeholders and utilizing advanced audit tools to assess the effectiveness of security controls.
  • Developed and executed audit plans, work programs, and testing procedures tailored to cybersecurity risks, business objectives, regulatory frameworks, and industry standards. This led to more efficient and risk-focused audit processes.
  • Delivered audit findings and risk-based recommendations to senior leadership, providing actionable insights and remediation guidance. Ensured timely and effective resolution of identified cybersecurity risks.
  • Validated remediation actions across business units, ensuring that commitments to address vulnerabilities were fulfilled and cybersecurity risks mitigated effectively.
  • Led the coordination of MRIA (Matters Requiring Immediate Action) validations, significantly reducing cybersecurity risk exposure in response to critical findings by regulatory bodies such as the Federal Reserve Board and the Office of the Comptroller of the Currency.

Advisory Consultant

Deloitte & Touche, LLP
06.2018 - 07.2019
  • Executed a multinational financial services company's global business continuity resilience and strategic operational effectiveness (RSOE) assessment by performing the following tasks: Analysis of Business Continuity Plans, Business Impact Analysis, Disaster Recovery Plans, Crisis Management and Vendor Resilience programs. This was done by on-site visits, interviews, and a benchmarking of the company's practices against the industry.
  • Performed as an IT audit consultant, supporting multiple financial service organizations as part of the General Information Technology Controls (GITC) team. Performed walkthrough with clients to gain an understanding of the IT infrastructure to identify risks and designing appropriate testing strategies mainly around access controls, SDLC, segregations of duties and interfaces. Executed controls testing for to determine the design and operational effectiveness of the IT internal controls.
  • Executed the establishment of a project management office for a large defense client to enhance and track the readiness of their medical staff. This involved visualizing a future state, identifying gaps, formulating solutions, creating a communication plan, socializing efforts with stakeholders and issuing an official policy.

Audit Associate

Kearney and Company
11.2017 - 06.2018
  • Performed over 20 examination engagements of Medicare Advantage Organizations (MAO) and Prescription Drug Plans (PDP) for CY 2016. The purpose of the examinations was to provide CMS assurance that each of the MAO and PDP bids were properly submitted in accordance with Medicare regulations and other CMS requirements.
  • Conducted testing of internal controls over the processing of medical service claims and payments and processing of rebates from pharmaceutical manufacturers.
  • Performed planning, risk assessment, testing and reporting phases of Medicare Part D Bid financial examinations. Reviewed Internal controls and relevant business processes to determine their adequacy and effectiveness.
  • Conducted entrance conferences, as needed field work and exit conferences at client site visits. Interviewed Senior Management, Audit Committee members and financial office personnel for issues regarding solvency, related parties and fraud.
  • Prepared the audit report communicating the opinion, findings and observations of the audits.

Staff Accountant

RAFFA P.C
05.2017 - 11.2017
  • Provided managed accounting and audit services for nonprofit organizations by performing monthly-end procedures for our clients, while always maintaining audit readiness, including procedures reconciliations, payroll, fixed assets, and accounts receivable and accounts payable processes and financial statement preparation.
  • Assisted the engagement team in compiling and preparation of client's budgets and forecast, as well as performed corrective actions based on audit findings.
  • Improved accuracy of financial information by performing detailed audits and increased client satisfaction by quickly resolving discrepancies in the accounts payable.

Federal Audit Intern

KPMG, LLC
01.2017 - 05.2017
  • Assisted the Senior Auditor in providing professional audit services to Federal Agencies in accordance with the Chief Financial Officer Act. Developed understanding of company audit methodology, approach and tools while working under supervision of licensed auditors.
  • Worked on the large federal civil agencies integrated audit, actively assisting the Senior Auditors in the process areas of Fund Balance with Treasury (FBWT) and Investments.
  • Aided in the planning and testing phases of the audit by performing risk assessments and testing activities such as financial statement reconciliations, federal investment verifications and testing entity level controls across the respective process areas within the agency.

Audit Intern

Myers & Stauffer LC
11.2015 - 01.2017
  • Performed audit services for the State of Maryland engagement, verifying the cost reports for Medicaid reimbursements for all 225 participating nursing homes in the state.
  • Performed all phases of the audit including planning, research, risk assessment, fieldwork, and reporting of findings.
  • Applied Medicare and Medicaid regulations to verify the accuracy of claims submitted by health care providers and suppliers.
  • Reviewed and summarized documentations to prepare working papers that met Medicaid and other government program regulations as well as AICPA standards.

Non-Commissioned Officer

United States Navy, USN
12.2009 - 09.2014
  • Performed as an IT security manager and lead the Implementation of health care computer systems on on US forward operating bases in East Africa, ensuring health care system compatibilities were efficiently working under military base information systems requirements. This led to efficiency in medevac procedures for the receiving and sending medical facilities, and a reduction of 7 days in the average medevac time.
  • Led the enlisted Hospital Corpsmen of the 2nd Marine Division Headquarters battalion in ensuring and maintaining over 90% medical readiness of over 400 Marines.
  • Appointed as the enlisted Team Leader of the largest outpatient clinic in the Department of Defense, providing care for over 84,000 patient encounters of a population of 30,000 beneficiaries.

Education

Master of Science - Cybersecurity Risk & Strategy

New York University
New York, NY
05.2023 - 05.2024

Bachelor of Science - Accounting

Towson University
Towson, MD
08.2014 - 12.2017

Skills

Cybersecurity Strategy & Governance

Identity & Access Management

Cloud Security

Quantum Safe

Vulnerability Management

Cybersecurity GRC

Cybersecurity Risk Management

Third Party Risk Management

Cybersecurity Resilience

Enterprise Security Architecture

Security Controls Testing & Auditing

CISO Reporting

Business Continuity & Resilience

Business Process Improvement

Management Consulting

Project Management

Affiliations

ISACA - Member

Certification

CISA - Certified Information Systems Auditor

Timeline

Cybbersecurity Advisory Manager

KPMG Professional Services
08.2024 - Current

Master of Science - Cybersecurity Risk & Strategy

New York University
05.2023 - 05.2024

Business Consulting Manager - Technology Risk

EY
07.2020 - 07.2023

Principal Auditor - Technology/Cyber

Capital One
07.2019 - 06.2020

Advisory Consultant

Deloitte & Touche, LLP
06.2018 - 07.2019

Audit Associate

Kearney and Company
11.2017 - 06.2018

Staff Accountant

RAFFA P.C
05.2017 - 11.2017

Federal Audit Intern

KPMG, LLC
01.2017 - 05.2017

Audit Intern

Myers & Stauffer LC
11.2015 - 01.2017

Bachelor of Science - Accounting

Towson University
08.2014 - 12.2017

Non-Commissioned Officer

United States Navy, USN
12.2009 - 09.2014

CISA - Certified Information Systems Auditor

Oct 2018

CRISC - Certified in Risk and Information System Controls

Mar 2022

CISSP - Certified Information System Security Professional

May 2023

CISM - Certified Information Security Manager

Jun 2023

A CCISO - Associate Certified Chief Information Security Officer

Apr 2024
Martheed DagharTechnology Risk Consulting Manager