1. Governance, Risk, and Compliance (GRC)− Proficient in COSO framework, encompassing internal controls, enterprise risk management (ERM), and corporate governance.− Implemented COSO framework principles to strengthen internal controls, minimise risks, and ensure regulatory compliance.− Led the establishment of a comprehensive Governance, Risk Management, and Compliance (GRC) framework for a leading financial institution in Pakistan.− Analysed the client's operational policies, procedural manuals, and process workflows, aimed at evaluating the efficacy of control design and operational effectiveness.− Performed inherent and residual risk assessment for regulatory requirements and different risks (operational, financial reporting, and compliance risks) leading to decrease in an enterprise risk.− Developed of a comprehensive Risk and Control Self-Assessment (RCSA), aligning with SBP regulations, AML/CFT and KYC guidelines, and other pertinent regulatory requirements.− Developed Key Risk Indicators (KRIs).2. Establishment & Incorporation of an Exchange Company− Developed a detailed business plan that outlined the Company’s Objectives, Mission and Vision statements, HR & Organisation Structure Management, Market Analysis, Network Expansion Plan, Information Technology, Internal Controls, and Financial Feasibility.− Assisted in the submission of the NOC application to SBP.3. Internal Controls over Financial Reporting (ICFR)− Developed, implemented, and monitored Internal Control systems in alignment with regulatory requirements, SOX 404, and industry best practices.− Conducted thorough risk assessments, identified control gaps, and proposed effective solutions to mitigate risks.− Maintained meticulous documentation of internal controls, including control matrices and process narratives.− Conducted rigorous testing of controls, identifying, and resolving weaknesses, and recommended corrective actions.

− Asad Ullah is engaged in compliance risk of a leading Financial Institution in Pakistan. His responsibilities encompass a comprehensive analysis of the client's operational policies, procedural manuals, and process workflows, aimed at evaluating the efficacy of control design and operational effectiveness. He is also currently performing inherent and residual risk assessment for regulatory requirements and different risks (operational, financial reporting, and compliance risks) leading to decrease in an enterprise risk.− In addition to this, he is actively developing testing checklists to evaluate the implementation of controls as outlined in client policies, procedural documents, and risk registers. Furthermore, he is responsible for conducting rigorous test of controls to evaluate and fortify operational processes, bolstering compliance and risk management strategies.− As an integral part of this engagement, he delivered valuable insights and recommendations to clients, aimed at enhancing internal controls and corporate assurance frameworks, thereby mitigating organisational risks, and enhancing the efficiency of risk detection processes. He also conducting Gap and Root Cause Analysis to identify and implement missing controls leading to improved operational efficiency.− At present, he is actively involved in the development of a comprehensive Risk and Control Self-Assessment (RCSA) framework, aligning with SBP regulations, AML/CFT guidelines, and other pertinent regulatory requirements. This initiative is designed to thoroughly evaluate the inherent risks and vulnerabilities associated with the company's operational activities.− He is also engaged in expertly designing personalised Governance, Risk, and Compliance (GRC) frameworks, policies, and procedures, meticulously tailored to individual client operational landscapes, with a relentless focus on optimising efficiency and bolstering overall effectiveness.