Available for new engagements

Freelance cybersecurity, GRC & data-protection consultant in Kuwait.

I help organisations harden their systems, pass their audits and train their people — turning regulation and risk into controls that actually work. Senior financial-crime technologist by background; MSc Cyber Security & Networks (Best Paper); CompTIA Security+.

Kuwait City · Remote · Onsite · Hybrid

6+ yrs

across cybersecurity, GRC & AML

MSc Cyber

QUT — Best Paper Award

Security+

& Google Cloud certified

15% → 11%

phishing click-through reduced

About

Where compliance, data and security meet

My edge is the blend. Most AML staff can’t speak security; most security staff don’t know AML. I do both — so I don’t just operate the tools, I understand the data pipelines, cloud, threat models and controls beneath them.

I started in computer science, moved deliberately into cyber security and IT GRC in Australia, founded a cyber-awareness venture, and converged both strengths into financial-crime technology at one of the region’s most innovative Islamic banks. See the full career timeline →

What I do

Core competencies

These strengths translate into hands-on freelance engagements — explore the full range of consulting services I offer, or read practical guides over in my insights.

01 — Financial Crime

AML & Sanctions Background

A practitioner’s grounding in how AML, sanctions and KYC controls actually work inside banks — the domain context that sharpens the cybersecurity, GRC and data-protection work I deliver.

02 — Security & GRC

Governance, Risk & Compliance

Risk assessment, ISMS (ISO 27000), security & AI governance, SIEM (Splunk), penetration-testing concepts and incident response.

03 — Cloud & Data

Cloud, ML & Analytics

AWS, Azure and Google Cloud (Digital Leader), machine-learning fraud detection, API testing (SoapUI) and BI with Power BI and SQL.

04 — People

Security Awareness & Training

Tailored awareness programs and phishing simulations that measurably change behaviour — turning staff into a first line of defence.

Have a security, compliance or data-protection challenge?

Whether it’s tuning a monitoring system, hardening a process, or training a team — let’s talk.

Bader AlkanderyCybersecurity · GRC · Data ProtectionConnect on LinkedIn →