Plan and execute comprehensive IT audits, risk assessments, ensuring alignment with industry standards, regulatory requirements, and organizational policies.• Evaluate the organization's cybersecurity measures, including vulnerability assessments, penetration testing, and incident response capabilities.• Review data privacy and protection controls, ensuring compliance with privacy laws and regulations, such as ETGRM, PCI-DSS, and ISO 27001.• Identify potential vulnerabilities, risks, and weaknesses in IT systems by reviewing their design and implementation, as well as their ongoing operations and maintenance.• Maintain accurate and detailed documentation of audit procedures, results, and evidence to support findings. Prepare detailed audit reports outlining findings, recommendations, and remediation plans. Communicate results to management and stakeholders, making detailed audit reports. Accomplishments: Successfully executed external IT systems audit with third party. Found and reported numerous loopholes in networks and security operations that secured the organization from cybersecurity incidents.Helped IT team in implementing IT controls as prescribed in international standards CISA manual that deliberately helped the organization to acquire ISO 27001 and PCI-DSS certifications.

Making, updating, approving and compliance of IT and IS policies according to the business requirements, Conducting IT audit, Maintaining risk registers, mitigating IT risk, business continuity planning with operational risk committee, overseeing database security and development procedure, managing firewall and anti-virus controls, Penetration testing and providing risk mitigation methods, monitoring database & email logs, monitoring of servers health, asset management, monitoring firewall & end-point security controls, making cyber security action plan against cyber-attacks, security incident monitoring, network port scanning, network packet analyzing for network vulnerabilities, maintaining backups of device configurations, website vulnerability testing, implementing IT policies, application security testing.Additional: software development (.NET & Oracle APEX)

Wholly owned sub-subsidiary of Pak Brunei investment company.Implementation of IT policies governing ETGRM-SBP, daily maintenance of servers, implementing GPOs on DNS server, providing daily IT support, secure network implementation with firewall and TMG server, physical IT asset management, making & implementing DRP policies, implementing & overseeing database backup policies, in-house software development and management.

Software development.

Database administration

Graphic designer