Michael Maher Email & Phone Number

Cairo, Cairo Governorate, Eg

Cairo - Egypt

Responsibilities:Develop an IT risk scorecard and report on the progress made against defined KPIs.In charge of the development, communication and annual review of the bank IT risk policies, procedures & standards and ensure its effective application & enforcement.Ensure risk assessments are updated periodically, based on the systems technical assessment review. Report IT to risk compliance status to the IT senior management, CIO and IT Governance Head.Ensure cooperation with external auditors and consultants during independent security and risk audits and ensure rectification of observed non-conformities through coordination and follow up with different departments.Raise and approve IT risk requirements in IT acquisition and development projects and systems security testing and pre-implementation approval.Maintain relationships with law enforcement agencies and other government authorities such as CERT as necessary to ensure cooperation with respect to incident response and handling.Participate in the investigation of security breaches, prepare breach reports & make recommendations to management for corrective & preventive action.Perform other related tasks as requested by management.A consistent approach for IT risk management and Effective management of IT risks.Continuous evaluation of current IT risks and threats to the bank.Broadened IT risk management approach in addition to Effective and efficient use of resources for the management of IT risks.Alignment of risk management priorities to business needsA focus on relevant and significant risks and Prioritization of risksA consistent approach to risk event identification and Focus on significant risk events.Cost-effective risk response and Continuous evaluation of current risks and threats for the organization.Assess the IT Processes to be alignment with COBIT Governance Framework.Define and Implement IT KPI’s, RACI Model with Process Assessment Model (PAM)

Cairo Governorate, Egypt

Deloitte (Egypt Office “Cairo and Alex”)December 2017 – presentInformation Security Officer - Head of Information SecurityInformation Security DepartmentDevelop Deloitte’s information security mission and program. Ensure commitment of appropriate resources to the program.Identify protection goals, objectives and metrics & develop an information security strategy to achieve these goals & objectives.Develop an information security scorecard and report on the progress made against defined KPIs.In charge of the development, communication & annual review of Deloitte’s information security policies, procedures & standards and ensure its effective application & enforcement.Implement & sustain an information security risk management program aligned with Deloitte’s Operation Risk management framework. Ensure risk assessments are updated on annual basis.Ensure proper operation & sustainability of the ISMS (Information Security Management System) and own information security controls within the ISMS framework.Maintain a compliance program to plan for and monitor ongoing compliance with local laws, regulations and international standards relating to information security as well as Deloitte’s security policies through regular vulnerability scans, penetration testing and technical compliance reviews. Report compliance status to senior management (PDP) Principles, Directors and Partners and Managing Partner’s, Information Security Officer (Global), internal audit, HR and IT teams.Ensure cooperation with external auditors and consultants during independent security audits, ensure rectification of observed non-conformities through coordination, and follow up with different departments.Participate in the investigation of security breaches, prepare breach reports & make recommendations to management for corrective & preventive action.Maintain wide information security awareness program addressed to employees and customers.

Egypt

Egypt

Cairo Governorate, Egypt

National Bank of Egypt (NBE), (Head Office, Cairo)Senior IT AuditorMay 2013 – December 2017Business Technology Operations Audit SectorIT Audit SectorInspection & Internal Audit GroupReporting to Head of IT Audit.Participate in planning for audit assignments.Carry out assigned audit tasks and testing.Perform special assignments as requested by (CAE) Chief Audit Executive.Communicate and report audit findings to division head and auditors.Managing auditing projects, assigning staff to clients and overseeing projects to completion, complying with policies, procedures and standards at all times.Writing and presenting reports (Arabic – English).Assisting in the assessment and management of business and risk.Introducing internal control mechanisms for various investments.Suggesting improvement of audits, including but not limited to automated auditing and control self-assessments.Assisting Audit Managers in the performance of complex audit assignments and investigations, often undertaking specific elements of the assignment with minimal supervision. Completing allocated work within required time and budgets and to required quality standard.Planning and conducting professional management system audits. Generating ideas to maximize assignment profitability. Identifying areas of potential efficiency improvements. Involved in risk management, compliance & integrations. Compiling reports of audit results to senior managers. Assists in the training and coaching of junior members of staff. Promote controls and sound risk management. Identify any gaps in controls and make practical recommendations.Performing audit assignments in compliance with the Government Internal Audit Standards.Reviewed internal control structures, performed special reviews, conducted internal audits, made recommendations for corrective actions of unsatisfactory conditions, reported findings to the Board of Directors and senior management.

Cairo Governorate, Egypt

National Bank of Egypt (NBE), (Head Office, Cairo)September 2011 – May 2013Retail Credit Risk Sector Acquiring Fraud Prevention Fraud officer – E-commerce A Fraud officer with 2+ years of solid experience in credit card fraud preventionReview from risk perspective E-commerce new merchants contracts for approval. Cancel and refund any fraudulent airline E-tickets detected. Analyze, review and asses the fraud tool rejected transactions on weekly basis.  Carry out follow-up of merchants of our bank (E-commerce) and foreign correspondent banks to monitor and reduce risk.All work on the follow-up our Merchants with respect to the work of the Fraud (Web booking / IVR).To review the (Refund) and follow-up process of the (Credit) with representatives of the risks we have on (our Merchants). Preparation of all reports on our Merchants and all the merchants - E-commerce - (payment gateway report).Add or remove (BINS) - (Bank Identification Number) on the system (MIGS) – (MasterCard Internet Getaway Service).Monitor refund transactions on daily basis. Prepare analysis of the E-commerce transactions. Handle merchant’s issues and complaints regarding cancelling authorization of on-hold transactions. Verify the validity of (bank statements, certificate of deposit, HR letter, clearance letter and others-issued by NBE bank) for the sake of other banks. Report any fraudulent application detected (bank statements, certificate of deposit, HR letter, clearance letter and others – alleged to be issued by NBE bank) to regulatory compliance sector. Share with fraud heads in other banks in Egypt any fraudulent application detected within a week.Whether it belongs to individual or company via email in a process called Weekly Negative List. Participated in arresting two different African gangs and one Egyptian gang specialized in using counterfeit credit card,

Cairo Governorate, Egypt

National Bank of Egypt (NBE), (Head Office, Cairo) September 2010 – to - September 2011Retail Credit Risk Sector Acquiring Fraud Prevention Fraud officer – POS Monitor all POS credit card transactions on daily basis. Monitor refund transactions on daily basis. Monitor ATM off-us transactions on daily basis. (Credit cards not issued by NBE bank).Prepare analysis of the ATM off-us transactions. Handle merchant issues and complaints regarding cancelling authorization of on-hold transactions. Handle Visa and MasterCard emergency replacement card requests and emergency cash requests. Share with fraud heads in other banks in Egypt any fraudulent application detected within a week. Whether it belongs to individual or company via email in a process called Weekly Negative List. Review from risk perspective POS new merchants contracts for approval.Monitor all POS credit card transactions on daily basis.Prepare POS MIS on monthly basis.Verify the validity of (bank statements, certificate of deposit, HR letter, clearance letter and others – issued by NBE bank) for the sake of other banks.Report any fraudulent application detected (bank statements, certificate of deposit, HR letter, clearance letter and others – alleged to be issued by NBE bank) to regulatory compliance sector.

Cairo Governorate, Egypt

National Bank of Egypt (NBE), (Head Office, Cairo) From January 2010 – September 2010Distribution delivery channel Acquiring internet Prevention Internet departmentE-banking – E-commerce senior specialistSolve Customers problem concerning the project.Marketing Agent for the Payment gateway project (E-commerce), (Mobile Banking & Online Banking), Electronic Banking Department.Plan initiatives to increase Mobile, Online Banking & website penetration and usage rates that can translate to higher revenue and cost savings.Plan Mobile & Online banking products and services initiative based on transactional and payment capabilities of E-Channels to increase transactional revenue and cost savings.Review / Analyze Website, Mobile and Online Banking related information (Email log, Monthly analysis) to develop solutions to enhance efficiencies.

Cairo Governorate, Egypt

National Bank of Egypt (NBE), (Head Office, Cairo) From December 2008 – January 2010Distribution delivery channel Acquiring POS Prevention POS departmentPOS – operation specialistMember for the whole POS installation team.Prepare the installation plan on periodic basis.Configuring P.O.S.Installing P.O.S at merchant’s sites.Working with Company’s concerning P.O.S Applications.Solving Branches problems.Solving Merchants problems.Working with international organizations (Visa, MasterCard, Amex, etc.) for new requirements.Follow up the merchants through field visits.Followed up the after sales service on (payment gate way).Achieve my target and over target on (payment gate way).Retain the old merchant on (payment gate way).Attract new customers on (payment gate way).

Cairo Governorate, Egypt

Credit Agricol Bank (CAB), (Head Office, Cairo) From February 2008 – December 2008Marketing departmentTeam leader of loan and durable goodsManage in team 4 direct sales executive.Reported to the area sales manager.Was in charge of setting up a new database. Conducted technical presentation at the client, residence Approached new companies and banksFollowed up the after sales service.Assuring the clients' satisfaction and that get the service required.Communication and professional selling Credit Agricola bank Credit policy training– Credit Agricola Bank.Loans policy training – Credit Agricola Bank.Selling skills training – Credit Agricola Bank.

Cairo Governorate, Egypt

Credit Agricol Bank (CAB), (Head Office, Cairo) From August 2007 – February 2008 Marketing departmentSenior sales of loan and durable goodsPersonal loans direct sales. Reported the team's achievement to the team leader.In charge of setting up a database system of clients (Companies, bank, factories and governmental structures).Review any difference between planned and actual.Evaluating performance and achievement for each other.Conducting technical presentation in the field.Negotiating with the clients to close the deal.Implementing training course for new recruits.Improved quality (approval rate) by 36% to reach 75%.

Cairo Governorate, Egypt

Commercial International Bank (CIB), (Head Office, Cairo) From August 2006 - August 2007Marketing departmentDirect sales of loan and credit cardPersonal loans direct sales. Reported the team's achievement to the team leader.Negotiating with the clients to close the deal.Implementing training course for new recruits.Review any difference between planned and actual.Evaluating performance and achievement for each other.Conducting technical presentation in the field.

Iso 27005 Lead Risk Manager, It Risk

Iso 27001 Lead Implementer, Computer And Information Systems Security/Information Assurance

Iso Isms Master, Master In Isms

Iso 27032 Lead Cybersecurity Manager, Cybersecurity

Cobit - Control Objectives For Information And Related Technology - It Governance Framework, It Governance

Foundation Degree, Cobit 5

IT Governance Framework

Secondary Degree, Business Administration And Management, General

Iso 27001:2013 Lead Auditor, Computer And Information Systems Security/Information Assurance

Associate'S Degree - Ccna, Computer Systems Networking And Telecommunications