Rayan Al‑Zhrani
A static portfolio preview of Harbah, my GRC-focused cybersecurity assistant for NCA controls, audit evidence, vulnerability tracking, and corrective action readiness.
Harbah Overview
Harbah is a cybersecurity compliance assistant concept built to support NCA control explanation, situation-to-control mapping, and evidence readiness review for GRC activities.
GRC • NCA Controls • Evidence Review
I’m Rayan Al-Zhrani, a cybersecurity professional specializing in Governance, Risk, and Compliance across AI, IT, cloud, and OT environments. My work focuses on NCA cybersecurity frameworks and controls, ISO 27001, IEC 62443, audit support, evidence review, risk evaluation, and compliance automation. I have supported NCA, internal auditor, and corporate compliance audits by preparing evidence, validating controls, tracking gaps, and improving corrective action visibility across IT/OT systems and sites. I also build practical automation and AI-driven tools for cybersecurity, including GRC model development, vulnerability management, and compliance analysis. My goal is to improve compliance maturity, operational resilience, and control visibility through governance, automation, and risk management.
Automated tracking and reporting for 40,000+ vulnerabilities, streamlining remediation visibility for teams and leadership.
An AI-powered power plant automation concept designed to support operators by monitoring operational conditions, analyzing plant data, and helping improve decision-making, efficiency, and situational awareness in energy environments.
Preview ProjectA campus assistant that answers common questions with concise responses and structured handoffs when needed.
Classifies articles by credibility signals and highlights the features driving each decision.
Password strength analyzer with clear visual feedback and actionable guidance.
View ProjectA recommendation tool that turns user preferences into practical, ranked options with simple explanations.
View ProjectAn OT anomaly detection model that monitors industrial network or process data to identify deviations from normal operational behavior and flag potential cybersecurity threats in real time.
View ProjectSport-Connect is a software that uses matchmaking to connect people for sport activities. It focuses on finding a suitable person by tracking one's behavior. It utilizes technologies to further increase the accuracy of matchmaking.
08/2020 – 08/2025
Built a foundation in data science, information systems, programming, cybersecurity, networks, and machine learning. Created ML and cybersecurity projects including KSUChatbot, AutoOracle, Fake News Detector, and PassCheck. Graduation project ranked 4th in the College of Computer and Information Sciences.
01/2025 – 07/2025
Developed a vulnerability management tool for more than 40,000 open and closed vulnerabilities, supported cybersecurity governance, risk, and compliance documentation, implemented approximately 900 controls, and participated in multiple risk assessments and compliance activities aligned with NCA, SABIC, NIST, and ISO requirements.
12/2025 – Present
Created and researched cybersecurity controls, led compliance audits on critical servers, extracted expected results from NCA regulatory documents using OCR, represented cybersecurity compliance during NCA, internal auditor, and corporate compliance audits, developed data for an internal GRC AI model, and automated corrective action tracking across more than 10 IT/OT systems and sites.
AI & ML
ViewCybersecurity Incident Response
ViewIndustrial OT Cybersecurity Foundation
ViewMachine Learning for Heart Diseases Detection — Issues & Challenges
ViewEnergy Data and Big Data Analytics in Energy Sector — training focused on the role of energy data and big data analytics in the energy sector, including analysis, optimization, operational insight, and decision-making across modern energy environments.
ViewOpen to collaboration and new opportunities, I welcome challenges, ideas, and conversations.