Mohammad Rafea Email & Phone Number

London, England, Gb

Worked with Risk and Governance Department of ISC, redesigning organizational structures, functions and processes based on a Risk-based approach while trying to embed Internal Control and management throughout the whole organization.Responsibilities:- Designed and defined Governance, Risk and Compliance structures and functions needed- Embedded Internal Control activities and relations among departments and different GRC committees- Performed Risk assessment and management activities- Provided on the job training for internal staff- Planning, performing, and reporting the results of application, infrastructure, product-line, and functional audits using the Audit Department's risk-based audit approach- Performing audit procedures, including identifying and defining issues, developing criteria, reviewing and analyzing evidences, processes, procedures and recommendations- Performed Audits and Internal Self-assessment towards PCI DSS compliance

- Performing Risk assessment and management activities - Designing and defining Governance, Risk and Compliance structures and functions needed- Planning, performing, and reporting the results of application, infrastructure, product-line, and functional audits using the Audit Department's risk-based audit approach- Performing audit procedures, including identifying and defining issues, developing criteria, reviewing and analyzing evidences, processes, procedures and recommendations

Worked with Risk and Governance Department of ISC, redesigning organizational structures, functions and processes based on a Risk-based approach while trying to embed Internal Control and management throughout the whole organization. Responsibilities:- Designed and defined Governance, Risk and Compliance structures and functions needed- Embedded Internal Control activities and relations among departments and different GRC committees - Performed Risk assessment and management activities - Provided on the job training for internal staff- Planning, performing, and reporting the results of application, infrastructure, product-line, and functional audits using the Audit Department's risk-based audit approach- Performing audit procedures, including identifying and defining issues, developing criteria, reviewing and analyzing evidences, processes, procedures and recommendations- Performed Audits and Internal Self-assessment towards PCI DSS compliance

Tehran, Iran

- planning, performing, and reporting the results of application, infrastructure, product-line, and functional audits using the Audit Department's risk-based audit approach- Executed audit work, work papers, planning memorandum and audit program- Performed audit procedures, including identifying and defining issues, developing criteria, reviewing and analyzing evidence, processes, procedures and recommendations- Performed certain IT infrastructure audits, written reports and management presentation- Developing, presenting and finalizing audit report-Performed mobile Core network technical audits. i.e. HLR, BSC, MSC, OMC, DC and etc.-Performed IT services audits through MTNI charging, billing systems and IN platform.-Performed security audits across MTNI applications and systems by penetration testing-Performed IT Systems and processes audits based on best practices and standards i.e.

Tehran, Iran

- Reporting to the Business Risk Management Division of South Africa MTN.- Conduct and document IT audit projects as part of the Internal Audit Plan including:Service Level Management, Asset and Configuration Management, Change Management, Problem Management, Information Technology Capacity Management, Billing System, Web Site Penetration Testing and Business Continuity Management System.- Carry out IS and processes audits based on best practices and standards i.e. ITIL v3, ISO27001 and BCMS.- Identify the significant IS risks associated with the company’s strategic objectives.- Assess the risks inherent in the company’s Information Systems and recommend measures to mitigate them.- Ensure compliance to systems audit methodology and laid down standards and make recommendations where changes are required.- Interact with management and understanding the critical business objectives and related vision impacting the process.- ITIL V3 Foundation training based on OGC course

Damavand, Tehran, Iran

- Delivered lectures, seminars and tutorials; (Modules: Computer Network Security, Internet engineering, Programming in C, Computer usage in Accounting)- Designing, preparing and developing teaching materials;- Assessing students' coursework;- Setting and marking examinations- Supervising students' research activities;

Parand, Tehran, Iran

- Delivered lectures, seminars and tutorials; (Modules: Computer Network Security, Internet engineering, Programming in C, Computer usage in Accounting)- Designing, preparing and developing teaching materials;- Assessing students' coursework;- Setting and marking examinations- Supervising students' research activities;

Tehran, Iran

- installed and implemented networks in branches and maintaining and monitoring network activities individually for each branch- dealt with network problems inside branches and between each branch and headquarter - resolved problems in data center and servers - configured routers and switches for use inside each branch and headquarters in each continent

Tehran, Iran

- Installed and implemented networks in branches- Maintained and resolved problems on site, on phone, remotely.- Resolved problems in main building network- Managed servers and installed applications for servers and clients.- Investigated new technologies and applied them in different sections of the bank.- Installed and managed wired or wireless networks inside headquarters and branches.- Installed ATMs in branches and stand alone ATMs in public places.- Translated foreign letters (written in English) into Farsi (Persian).- Spoke with foreign language guests and contractors in English and helped them in related cases. - Received tasks and problems through email and responded in short time frames.

Tehran, Iran

- Managed servers and Datacenter- Maintained network and switches and routers and configuring them in different situations.- Installed applications and software on clients and resolving problems

Tehran, Iran

- Taught ICDL courses in Saderat Bank (governmental bank). - Taught computer hardware, software and network courses.- Managed network and Teaching Computer Courses. - Installed and managed wired or wireless networks.- Installed and managed wired or wireless closed circuit camera.

Master'S Degree, Secure Computing Systems, Distinction

Bachelor'S Degree, Computer Hardware Engineering