In this role, I lead comprehensive audits aimed at ensuring the integrity, security, and efficiency of our IT systems, which are vital for maintaining safe and reliable rail operations. I am responsible for planning, supervising, and executing audits that cover key areas such as IT governance, risk management, compliance, and cybersecurity. My focus is on aligning IT controls with both industry standards and regulatory requirements, collaborating closely with stakeholders, including IT departments, engineering teams, and senior management, to assess and mitigate risks related to information systems, data management, and operational technologies that support essential functions.With a strong understanding of IT infrastructure, I work proactively to protect systems from potential threats, ensure data integrity, and strengthen business continuity. I apply risk-based audit methodologies, continuous monitoring, and key compliance frameworks such as ISO 27001, NIST, and COBIT. In addition to identifying areas for improvement, I provide actionable recommendations that optimize processes and bolster our overall cybersecurity posture.My primary areas of focus include IT asset management, network security, disaster recovery, vendor risk management, cloud security, and IT governance. By leveraging data analytics and audit tools, I deliver valuable insights that help enhance the organization's IT resilience while ensuring compliance with safety-critical standards.

Planning and executing the annual IT audit and risk assessment, where I conducted comprehensive analyses and forecasting in alignment with established guidelines. My duties included meticulously preparing audit programs specifically tailored to each IT audit assignment to ensure the precision and effectiveness of our assessments.Conducting audit fieldwork, meticulously collecting evidence necessary to formulate detailed audit reports. These reports encompassed findings and recommendations, essential for informed decision-making. in addition to the supervision of other team members to ensure that all audit activities were carried out according to the established guidelines and standards.Actively engaged with key stakeholders and related parties to discuss our audit findings. I organized closing meetings to facilitate productive discussions and provide clear insights into our discoveries, fostering effective communication and understanding among all parties involved.Also took the lead on special audit assignments, contributing to strategic decision-making processes and providing valuable consultation services as requested by executive management. This role allowed me to apply my expertise to various areas of the organization.I played a pivotal role in ensuring the resolution of IT audit observations by actively leading follow-up efforts and supporting auditees in closing any identified gaps. Collaboration with team members was integral to achieving our shared goals and enhancing overall audit outcomes.

In this role, I direct audit fieldwork and collect evidence to formulate audit reports including, findings and recommendations.By utilizing robust analytical skills, plan and conduct annual IT audit and risk assessment/forecasting/analysis, and prepare reports as per set guidelines. Moreover, I administer TeamMate suite and prepare audit programs for IT audit assignments. To keep operations streamline, discuss findings with key stakeholders and related parties by organising exit meetings. By deploying stellar strategies, I spearhead special audit assignments and provide consultation services as requested by executive management. Apart from this, I also facilitate auditees in closing IT audit observations by leading regular follow-ups and uploading findings along with findings on TeamMate. Furthermore I coordinate with team members in supporting tasks to achieve shared goals and coach and train all team members and auditees through regular training sessions.Some of my achievements related to this role are as follows; • I facilitated the financial sustainability of organization by locating uncollected fines from customer's end and uncovered the areas of improvement by detecting hypercritical issues blocking technological resilience of organisation including escalation vulnerability and several other bottlenecks.• Furthermore, I optimsed audit system utilisation by demonstrating industry-best practices.• Moreover, I successfully achieved audit assignment requirements by following standard operating procedures.• Additionally, I contributed in developing executive recommendations progress reports for key stakeholders.• I provided support to other Team Members in IT and non-IT audits (such as operations and projects audit) in execution and reporting audit findings.

In this position, I examined internal IT controls, evaluated design and operational effectiveness, determined risk exposure, and developed remediation strategies.By deploying updated approaches, I oversaw preparation of audit programs for Arab Bank IT audit assignments and managed the Teammate suite. Moreover, I administered IT audit fieldwork and collected evidence for generating audit reports. Furthermore, I headed exit meetings to update partners regarding findings. Transferred evidence and findings on TeamMate. Some key contribution related to this specific role are as follows; • I lead IT audit engagements for Arab bank PLC countries including, Jordan, Palestine, Egypt, Lebanon, UAE, Bahrain, Qatar, Yemen, Algeria, and Morocco.• It was me, who planned, implemented, monitored, and upgraded security measures for the protection of organisation's data, systems, and networks.

In this role, I Administered and Managed Active Directory: User Accounts, Computer Accounts, Group Policies, and Security Delegations along with Active Directory Sites distributed along 3 main sites inside Jordan.Moreover, I Administered and Managed Microsoft Exchange Server 2007 Environment; Clustered mailbox, load balanced HUB, CAS and Edge servers along with Antispam, Risk and Thread Violation using Symantec Mail Security for Microsoft Exchange Version 6. I oversaw, troubleshoot, and managed client’s access through LAN or WAN (MAPI Clients, POP3 Clients, Exchange ActiveSync, and Outlook Anywhere) along with HP EVA 4100 Storage and VPN Access using Microsoft TMG servers for accessing internal network resources.Furthermore, I monitored Internet Access and traffic through Load Balanced Microsoft TMG Servers 2010 Array and Implemented, Configured and monitored HP ProLiant DL 380, Dell Power Edge 2900 servers.Apart from that, I also managed and Implemented Security Updates for Servers and Clients using WSUS 3.0 Server along with Symantec Endpoint Protection for Servers and Clients and Backup Schedules for Servers Using Symantec Backup Exec 2010 for Windows Servers.Additionally, I administered and Managed Microsoft Infrastructure in Hikma Remote Sites: KSA, Egypt, Algeria, Germany and USA.

In this designation, I Administered and Managed Active Directory: User Accounts, Computer Accounts, Group Policies, and Security Delegations, along with Microsoft Exchange Server 2003 Environment including Administrating and Troubleshooting Server and Managing client access through LAN or WAN.Furthermore, I Administered and Managed Microsoft Exchange Server 2007 Environment; Clustered mailbox, load balanced HUB and CAS servers along with troubleshooting and managing clients access through LAN or WAN (Outlook Anywhere).Moreover, I managed Microsoft Exchange (2003/2007) Mailboxes Archiving using Symantec Enterprise Vault & monitored internet Access through Microsoft ISA Server 2006 Enterprise Edition, including File Server and Shared Folders Permissions.I also implemented and Configured HP Blade Servers (P-class and C- Class) and monitoring using HP Insight management.Apart from this, I Administered & Managed Application Publishing using MetaFrame Citrix Presentation Server 4.0.Additionally, I Installed and configured Citrix Clients and managing Citrix remote Access from outside Jordan along with managing Security Updates and Virus Definitions Updates on Servers and Backup Schedules for Servers.