Development and review of Frameworks, i.e. IT governance, Information Security and IT Risk Management frameworks in collaboration of COBIT, NIST, COSO, ITIL and ISO 9001 & 27K standards. To ensure dependent IT areas are effectively managed through these frameworks.
Coordinating with other relevant Stakeholders to Implement/Improve IT Governance Processes.
Forging and maintaining collaborative relationships within technology sections.
Managing IT risks in collaboration with ERM and enduring compliance of IT risk management framework along with ISO 31000. Conducting periodic risks assessment, risk calculations, maintaining IT risk register and reporting risks to the management on monthly basis.
Successfully completed business impact analysis (BIA) for technology systems/applications, with 3rd party vendor Crowe Horwath. Compiled BIA report and submitted to the management.
Leading IS audits within technology for certification of ISO 9001:2015, as per approved audit plan and resource management.
Strong follow-up with management action plans with technology stakeholders and ensuring closures of internal/external audit findings as per their timelines.
Actively monitoring external trends in the areas of IT, remote access features, authentication mechanisms, threat/risk and vulnerability evaluations while acquiring knowledge on these topics.
Managing end to end yearly external audits with PWC for YE-2019 & 2020.
Managing ICOFR revenue IT controls and D&I testing with BDO for YE-2019 & 2020.
Working as business continuity champion for technology domain and ensuring development and compliance of IT business continuity & DR.
Governing IT projects, delivery methodologies, effort estimations, budgeting and development and delivery through waterfall model with 3rd party vendors.
Managing all non-production IT environments to be in-sync with production environment, and following up with all requirements and approvals form ISM, etc.
Ensuring IT deliverables are

IT Governance Specialist within the Department with Highly Motivations.
Plan, lead and perform IT and operational audits. Evaluate controls and systems under development.
Provide advice on internal controls. Follow up on previous audit concerns and issues. Prepare formal reports of audit results for distribution to the higher management and the Audit Committee.
Develop Audit Programs based upon assessed Risks, Internal Controls, Policies/Procedures.
Identifying Risks, designing and Implementing Risk Dashboard & Report in Board Meetings.
Investigations of Information Security Incidents.
Maintain liaison as key point of contact with Central QMS Team, Internal and External Auditors.
Coordinated as a POC at PTCL with Deloitte for Yearly Audit (2015-2018).
Coordinated as a POC at PTCL with PWC for Yearly External Audit (2013-2015).
Assistance for developing the IT Security Policies compliance with ISO 27001.
Designing & Planning of BCP and DRP.
Formalization & Improvement of Processes through ISO 9001:2015, 27002, ITIL & COBIT5 Controls.
Review and fine-tune the existing Processes in line with the industry’s best practices.
Ensuring best practices for SLAs & OLAs Management Processes. - IT Strategy Formulation, Gap Analysis, Planning and Business Case Development.
Involved in Vendor interactions for scoping, Effort Estimates and Status Reporting.
Deep understanding of Technology with Focus on Delivering Business Solutions.
Expertise in full Project Life Cycle Development including Implementation and Integration.
Receiving Continuous Soft Skills & Professional Training.

- IT Governance, IT Risk Analysis, Communication, Presentation & Facilitation
- Project governance, delivery methodology, estimation, Budgeting and costing
- Member of Technical Evaluation team & participating in the evaluations
- Business Requirements Gathering, Business Process Analysis
- Business Process Modeling, Business Logic, and Case Tools
- Project Management, Process Analysis & Redesign
- Program Management, Process Integration, Business and IT Alignment
- Conducting Monthly IT Internal Audit as per ISO 9001:2008
- Processes Improvement through ISO 9001:2008, 27001, ITIL & COBIT 4 & 5
- Extensive experience in design and development of multi-tier applications
- Experienced in Java-EE, Struts, Spring, Hibernate, iBATIS, HTML, JavaScript
- Involved in client interactions for scoping, effort estimates and status reporting
- Analyze software & configuration requirements & articulate specifications.
- Producing technical feasibility studies. Conducting product overviews
- Software Development Methodologies, Resource Management & QA

- Worked on PTCL Transfer of Technology Project (B&CC- Customer Care System).
- The system was developed by using J2EE Technologies.
- Worked on the development of new functionalities in CCS against various change requests submitted by PTCL.
- Prepared test cases and participated in testing activities.
- Participated in patching activities on live systems.

- Worked on web based portals eHRMS, TMS (Time Management System) & eWorks, developed by using J2EE Technologies i.e. Spring, Hibernate, GWT, Jasper Reports and Oracle 9g as backend database.
- Worked on analysis & designs of portals, tested and deployed remotely on live servers. Also worked as support engineer for portals, implemented change requests and deployed patches remotely.

- Worked on Vopium Portal’s Admin & Reporting Module, developed by using J2EE Technologies i.e. Spring, Hibernate, Jasper Reports and MySQL as back-end database.