In my role as the new NITSO/CISO for Pakistan, I aim to enhance Security Risk Rating,Vulnerability Dashboard rating, and Annual Information Protection Control Audit/Review(IPCA/IPCR), alongside internal SoQM testing. Through ongoing efforts, there has beensteady improvement in scores across these four areas. I'm pleased to share thatwe attained ISO 27001 certification in July 2023, meeting the assigned timeframe, asignificant accomplishment as my initial key task. In my role as IT Strategic Director, I am tasked with planning and overseeing new projects,as well as managing all IT procurements. In my role, as a CISO/NITSO my duties include • Information Security Oversight• Security Strategy• End User Awareness Training• Disaster Recovery & Business Continuity caused by a Cyber related incident• Policy Updates• Client Queries• ISO 27001 Process Management• Incident Management & Response• Identification & Triage• GSOC Incident Management• Incident Escalation• Baseline Security Accountability• Firewall Management• Encryption Management• Vulnerability Management• Asset Management • Change Management• Information Security Risk Assessment• Third Party Risk Assessments• New Technologies onboarding• Risk Management & Compliance• Cyber Insurance• Risk Profiles• IFDT Agreements & Contract Reviews• Software security& Compliance Reviews• Information Protection Controls Review• Internal Project Support

Promoted to Director ITS / CIO Delegate, leading IT system implementation, planning, and budgeting. Notable achievements in Information Security, Subject Matter Expertise, IT infrastructure revamp, and Azure/Office 365 migration. Recognized for cost control, disaster recovery planning, and enhancing IT security. Expert in risk assessment, policy development, and continuous improvement aligned with global standards.

• Promotion to Senior Manager• Managed IT infrastructure across four locations, including Kabul head office,following global ITS standards.• Oversaw communication alignment between Technical Support and thecorporation within budget and schedule.• Key Accomplishments• Established a supportive and professional IT culture.• Introduced a team development program, individual mentoring, and teamcounseling.• Resulted in a highly productive and cohesive team.

• Worked with multiple KPMG proprietary eAudit Software, supporting ongoingmember firms and managing deployment tracking.• Presented a Proof of Concept for migrating the testing environment intovirtualization, enhancing efficiency and reducing physical inventory.Key Accomplishments:• Implemented a virtualized training environment for eAudit WG+ Server & eDatamining, to be utilized in all future KPMG eAudit regional workshops.• Received an "Exceptional" performance rating from the manager

• Managed internal IT infrastructure, emphasizing information security, andprovided IT Advisory for external clients, including nonprofit organizations (NPOs).• Played a key role in rolling out various ITS-G projects in the MESA region, such asOCS, Live Meeting, KPMG Central, and Postini Replacement.Key Accomplishments:• Successfully executed a comprehensive internal project in four locations,encompassing fiber optic deployment, datacenter infrastructure upgrade, 100%virtualization migration, network infrastructure upgrade, eAudit rollout, eAuditTeam Server deployment, GDv5 and related technologies deployment, KPMG.commigration, and intra-city disaster site deployment.Clients engagement:• BAITUL SUKOON CANCER HOSPITAL• Developed the entire IT infrastructure project cycle, covering budgeting,hardware/software procurement, server/client deployment, backupstrategies, network security, data protection, and hospital managementsystem implementation.• GREENSTAR SOCIAL MARKETING• Assisted in developing Disaster Recovery and Business Continuity plans, ITend-user policy, and security awareness training.• Managed the project to implement IT end-user policy and IT DR plan,successfully testing the proposed DR solution within the three-monthschedule and budget.

Delivered managed services to diverse local and US clients, encompassing:• Network design and implementation for small and medium-sized businesses.• Pre & Post deployment of Microsoft Small Business Server, covering clientconfiguration, SharePoint services, ISA Server, Intranet Portal, Exchange services,etc.• Remote administration & monitoring of data centers with Clusters, High AvailabilityServers, Layer 2/3 switches, Firewalls, routers, etc.• Implemented PABX VOIP solutions, IT Cloud Services (AWS & Azure), emailservices, Disaster Recovery Planning consulting, website, database, and SharePointsolutions, backup solutions, and ERP solutions.Completed various projects for clients like Biz-Tech Helpers (PA, USA), 2M BusinessProducts (TX, USA), Islamic Humanitarian Services (ON, Canada), and The WorkingCenter (ON, Canada).

• Certified Auditor, Tester, and Builder• Specialized in NCR ATM models 5870 & 6676, holding certifications forauditing, testing, and building these systems.• Achievements• Awarded Employee of the Year for outstanding performance in 2006-2007

• Projects involved MS Small Business Server 2003 installations, remoteadministration of Windows 2000 Servers, e-mail server management, routerconfiguration, e-commerce website support, computer network design, quarterlyassurance auditing, system, and network administration for Astell Infotech Inc. (NJ,USA-2001-2002), • Network administration for KPMG Taseer Hadi Khalid & Co. (Pakistan- 1998-2001).