Amama Rashid (Cisa, Isms La) Email & Phone Number

Riyadh, Saudi Arabia

Riyadh, Saudi Arabia

Lahore

-Perform internal audit for ISO 27001 ISMS, EHNAC, HIPAA and ISO 9001 QMS standard.-Co-ordinate with External Audit team during Re-certification and Surveillance audit for ISMS, EHNAC and QMS.-Performed Gap Analysis between defined and implemented Practices.-Revamp Policy, Procedures and Guidelines for the organization.-Review and Revise Business Impact Analysis.-Oversee and perform Risk Assessment for Cyber Security and Privacy Risk.-Designed and maintained Information Security Awareness Program -Documented BCP & Disaster Recovery plan for the organization.-Deliver ISMS and QMS Trainings-Conducted Vulnerability Assessment for Application’s Modules.-Trained new team members on ISO9001 and ISO27001 requirements-Conducted Penetration Testing for Application’s Module.-Transitioned Information Security Department on SCRUM model for better visibility and transparency-Incident Management/ Analysis.

Lahore

Lahore, Punjab, Pakistan

Lahore

Execute IS audits of business units in accordance with instructions of Department Head for timely evaluation and improvement of risk management, controls and governance processes.To ensure quality of IS audit reports and to provide reasonable assurance regarding compliance of applicable SBP regulations / IT standards / Bank’s policies & instructions.To prepare and submit executive summary of audited units to Department head for perusal and onward submission to GH-AIG and Board Audit Committee.To groom and train the team members allocated on assignment through on the job training and to ensure that they are aligned with the AIG strategy and vision and work for accomplishment of departmental goals.To carry out special assignment / investigation within allocated time for assisting the Group in effective discharge of its responsibilities.Contribute and assist significantly towards the group initiatives to make the audit setup effective and vibrant through continuous improvement & innovation.Adherence & implementation of AIG Management directions, disseminating it down to team members to ensure that prescribed vision / direction has been implemented at all level.

Lahore Pakistan

Conducts internal audits of Warid's IT domains (Operations, Development & Governance) covering extensive scope of technical, physical and administrative controls.Finalization and maintenance of IT audit scope, final audit reports, checklists and relevant audit documentation.Assistance in conducting external audits with E&Y in IT Division covering all major applications (Oracle Financial, TABS 7, IN) Follow up and implementation of pending audit recommendations with management and reporting updated status to higher management on monthly basis.Reporting to higher management about audit activity and high risk action points.Conducts audit & Gap analysis of specific projects (Team Foundation Server, Bio metric verification System)on request of inter departments / Management.Assisting in on-going Enterprise wide risk assessment exercise.Investigations of incident / special audit assignments and recommendations based on ISO 27001 and ISACA.

Responsibilities included:Fixed assets verification and evaluation based on on-air report, through pinging / beaming of equipment via Network Management System for configured cards / equipment.Follow-up (Implementation Status) on action items recommended in IT security assessment done by M/s Instec Digital Systems with IT Division.Follow-up (Implementation Status) on action items recommended by SingTel on various technical audits (EVC, EVSS, TABS 6, etc.) with IT Division.Whistleblower complaints and fraud investigations.Development of Audit plan and Resource plan for the year 2013-2014.Consolidation and evaluation of responses received (on monthly basis) from all the Divisions (IT, Engineering, Commercial, Finance, HR & Admin & Legal) on Implementation Status.

Responsibilities included: Configuring new DSL connections via iManager 2000 (Huawei NMS). Fixing already existing DSL connections via iManager 2000 upon received complaints. Monitoring Exchange alarms via NMS. Maintaining monthly DSL equipment reports.

Cisa, It Governance, Information Security, It Auditing

606 Score (Amongst Top five percent globally)

Isms - Lead Auditor Iso 27001:2013, Information Systems Audit, 79 %

B.S, Electrical (Telecommunication) Engineering, 3.26

F.Sc, Pre Engineering, A