Abubakar Siddique, Cisa, Cism (Q) Email & Phone Number

Pakistan

Islamabad

My Job responsibilities include:• Identify, test the design and operating effectiveness of SOX 404/ISO 27001 controls• Performs periodic Internal Controls assessment on Technology Assets including Information Technology and Network Assets• Interact with control owners to prepare remediation plans and follow up for implementation• Involve in on-going projects related to process design, coordination with relevant teams and on-going monitoring and reporting initiatives in the… Show more My Job responsibilities include:• Identify, test the design and operating effectiveness of SOX 404/ISO 27001 controls• Performs periodic Internal Controls assessment on Technology Assets including Information Technology and Network Assets• Interact with control owners to prepare remediation plans and follow up for implementation• Involve in on-going projects related to process design, coordination with relevant teams and on-going monitoring and reporting initiatives in the following security domains as Access Control, Change management, Incident Management, Disaster Recovery Management, Periodic Compliance Reviews, System Backup and recovery, Business Continuity • Interact with relevant teams for coordinating Annual External Audits/SOX Compliance/Internal Audits/Regulatory Audits• Oversight of the tracking, analysis and reporting on internal control testing• Manage reporting on key compliance issues reported in different audits• Liaise with counterparts to establish and recommend the actions to be taken to promptly resolve SOX/ISO 270001 deficiencies and inefficiencies.• Liaise with counterpart for Cyber Security risk management activities Show less

Islamabad, Pakistan

• Preparation of IT General Control Risk and Control Matrix (RCM), Gap Reports, Testing Plans and Updated Process Flows.• Coordination with the client management and conducting meetings.• Preparation of ITGC RCMs and Diagnostic Reports• Development of Remediation Plans and management test plans• Validation of management testing and reporting of results• identifying, evaluating and quantification of deficienciesIT/IS Audits (using EY Global Methodology) at various… Show more • Preparation of IT General Control Risk and Control Matrix (RCM), Gap Reports, Testing Plans and Updated Process Flows.• Coordination with the client management and conducting meetings.• Preparation of ITGC RCMs and Diagnostic Reports• Development of Remediation Plans and management test plans• Validation of management testing and reporting of results• identifying, evaluating and quantification of deficienciesIT/IS Audits (using EY Global Methodology) at various clients involves the following:• Preparation of Audit Plans.• Control Design and Operational evaluation over Information Technology operations.• Review of IT governance controls like Policy & Procedures, IT Strategy Plan and Organization Structure.• Review of change management control like authorization, approvals, testing, monitoring and segregation of incompatible duties.• Review of controls over logical access like general system settings, privileged access management, user access management, Password security settings, logical access management, physical access, segregation of duties and physical and environmental security.• Review of Database and Operation System security settings for the core business application having financial impact on the Organization Business.• Review of other Information Technology General Controls like backup and recovery of financial data, problem & incident management and scheduling.• Testing of Application Controls (which includes Automated and IT Dependent Manual Controls) to provide the reasonable assurance over input, processing and output controls of the business applications.• Preparation of internal and client documentation (e.g. Work Papers and Audit reports). Show less

Riyadh, Saudi Arabia

Information Systems Auditing

IT Security

Certified Information Security Auditor, Cisa

CISA

Mcs, Computer Science

Activities and Societies: MCS MCS

Metriculation, Computer Science

Matriculations