Muzzamil Hussain Email & Phone Number

Karachi, Pk

>Digital Assurance (Road Map & Implementation) – Devise Security assurance standard operating procedure and implementation guide.>Secure SDLC- Develop a Framework on Secure SDLC for in house application development, catering the Security aspects and developing Security stage gates. >Incident Response Plan: Develop Blueprint incident response plan and its detailed implementation guide. >Liaison between security and software development teams and assist in implementation of SAST, DAST, PT and other secure software assurance practices. >Identify, define, build, deploy and track security controls & measures for applications, systems and databases in contrast with OWASP, CWE, CIS benchmark and SAMM. >Design application security architecture via threat modeling, develop detailed cyber security design and analyze cyber security in the domains of security vulnerabilities, Threat actor TTP’s, common malware types and networking protocols. >Responsible for reviewing and assisting in operation of security management and monitoring solution are in place. >Assist in secure coding practices, perform manual as well as tool based review of application security, lay guidelines in mitigating potential threats and minimizing attack surface. >Manage the development, implementation, and continuous refinement of security policies, standards, and procedures to ensure ongoing strengthening and maintenance of security practices. >Ensure that security models, technologies and protocols are established, enforced, and maintained by system architects and designers. >Identify emerging vulnerabilities, evaluate associated risks and threats and provide counter measures >Design technical solutions with tools for applications, databases, mobile, containers, API’s, micro services and other digital solution security testing, as well as identify new security tools to improve the security posture >Determining the sensitivity of Data in order to recommend the appropriate Data classification

Head Office State Bank Of Pakistan

-----Digital Innovation and Settlement Department IT.-Governance Risk Compliance - IT-GRC Framework & Road Map.* SOC- Security Operation Center (IBM Q-Radar), Highlighted and monitoring of Offenses, events, assigning and closing on security controls like SMG, Firewall, EDR etc. * Security Monitoring of Pakistan’s First IPS (Instant Payment System) RAAST: Monitoring and closure of Offenses populated on SIEM through RAAST Infrastructure, Tickets generation on JIRA and Closure. * Lead Cyber Security Assessment for RDA Participating Banks: Cyber Security Assessment of Roshan Digital Account (RDA) participating Banks before Go Live Operations. * O-CISO (Office of the Chief Information Security Office): Phishing email Broadcast and management of Information Security Awareness campaigns. * Digital Innovation/Transformation-Digital Financial Service: Handholding of Banks in conducting their Pilot operations and ensuring smooth transitioning to the commercial launch. * RSA - Administration for Financial Industry.* Digital Assurance : OWASP TOP 10, W3AF, NIKTO * Email Forensic Analysis: Conduct forensics of emails reported on Phishing Group on various Sand Boxing tools like Virus Total, Any Run, etc. and closure at relevant Security Perimeters. Playbooks: Creation of various playbooks for Phishing emails, Security Perimeter Blockage etc. * Data Governance, Data Management & Data Strategy -Industry Wide Approach(Holistic View)* NOC-ZABBIX for Infrastructure Monitoring* Fintech & Open Banking, Regulatory Sand Boxes * Real time monitoring and maintenance of security monitoring controls and logging solutions i.e. SIEM.* Monitor real-time interfaces of critical security controls like Firewalls, IPS & Antivirus.* ISO 27001- RTM- Audit & Implementation for Critical Assets* WAP Security, API Security * Creates, modifies, and updates Security Information Event Management (SIEM) rules

Head Office

🔹Advocating on Governance, Strategy & Framework. Governance Framework & Committees, 3LOD Structure. Enterprise / Data Architecture, Data Quality, Data Protection.🔹Digital Data Governance: Structure, Strategy Roadmap.🔹Governance Risk & Compliance (GRC) -IT GRC Framework, RSA GRC Archer Architecture, OCEG GRC etc 🔹Develop Framework on Data Governance Enterprise Wide . Develop Governance Architecture, GDPR- General Data Protection Regulation review. 🔹Project Management: Overall project management,development and implementation of software development projects. While working in at Electronic Credit Bureau Department we established the department based on the guideline provided by PMI’s Project Management Body of Knowledge (PMBOK).🔹Python for Data Science and AI. Data driven analysis. Developing decision trees and models for predictive and modeling presentation to different committees.🔹IT-Risk Management- Information Security Risk Management Framework. West-man & Hunter 4A Approaches, Develop & Review Information/Cyber security policy and assessment program like BIA, Risk metrics, Internal, External.🔹Data Stewardship Strategy🔹Internal Control and Business Process Review: Business Process Review & Internal Control Implementation COSO ERM Framework: As part of BPR studied various processes and re-engineering them, and Internal Control Implementation, currently in an implementation Phase of Enterprise risk- COSO Framework🔹Business Impact Analysis, Business Continuity & Disaster Recovery Document: In a development phase of constructing and monitoring BCP & DRD, Conduct comprehensive Business Impact analysis

-Enterprise Architecture I Risk Management ERMI IT-GRC I Data GovernanceI OFSAA FCCM🔹Development of Road Map for Enterprise IT GRC (Governance, Risk Management & Compliance) Frame Work🔹Project Management: Overall project management, development and implementation of software development projects. While working in at Electronic Credit Bureau Department we established the department based on the guideline provided by PMI’s Project Management Body of Knowledge (PMBOK).🔹Data Science: Big Data Processing, analysis and processing for strategic Risk Decisions.🔹Data Modeling : Semantic Web, Bayesian Theory, Apache Tomcat , Modern Portfolio Theory 🔹Development of Data Governance Model having different focused ares like Data Quality, Security, Management Portfolio, Cleansing and Mapping etc.🔹Credit Bureau ERP Implementation: Net Sol Pvt LTD, Lahore (Pakistan): 02 Full Cycle implementation of eCIB application at Bank Level all across Pakistan.🔹SAP University Alliance Program: Specialized elective in FI-CO and its integration with other Modules at I.B.A (Institute of Business Administration) 🔹SAP-Banking & GRC: As part of Implementation of SAP Banking and Governance Risk and Compliance covering different models like OCEG GRC, GRC10.1 etc.🔹Business Process Review & Internal Control Implementation: As part of BPR and Internal Control Implementation, we are implementing COSO Framework along with PWC consultants and currently we are signing off at Phase VI of Development of Risk Control Metrics after Bench Marking with Industry Best Practices. 🔹Member of the team that involve in defining and Implementing Risk Policy of Risk Management Group.🔹Internal Controls Review, Audit and enhancing /Optimizing FR Controls.🔹Development of Blue print of E.A (Enterprise Architecture), SOA, and ESB, creating common point of Interaction of all information sources.🔹IT Security, Business Continuity and Disaster Recovery Planning.

Nbp Head Office

GRC- Governance Risk & Compliance Data Security at Transit and At-RestRSA / VPN

🔹Implementation of DataWare Housing solution.🔹Business Analyst Methodologies like Agile in which RAD, SCRUM creating Sprints among different members . 🔹Creation of Data cubes, Olaps and Metadata structure.🔹Usage of ETL tools to extract data from central repository and reconciling against Ledger Balances and data formats.🔹Financial Analysis of Data and trend analysis.🔹Formats of different data structure.🔹Crystal reporting and online report generation.🔹Risk System Development for ALCO/ BRC & ERMC Reports Generation.📌Other Assignments performed covers the following:-🔹Enterprise Architecture🔹Core Banking Implementation-FLEXCUBE Core Banking Application Serve 🔹Implementation of ERP which includes Business Process Analysis and Redundancy management🔹Monitoring of user roles and timely updating of system patches. 🔹ERP Disaster recovery and Business continuity planning.🔹Creating common point of interaction of all Data Bases within an organization.🔹SDLC analysis and Risk identification.🔹Bringing operation efficiency by implementing COSO stages and Business Process Reviews analysis.🔹Information Architecture Design and Implementation. 🔹Performing Business Data Analysis including Peer Group Analysis.🔹Information system auditing and defining security policies🔹Implementation of Data ware housing solutions (proposal monitoring)🔹Provide online training and support to regional staffs🔹Submission of Electronic Credit Information Reports to SBP.🔹Supporting a team of more than 100 online and off line user of eCIB Terminal.🔹MIS reporting of data of NBP all branches on national level.

Pgd-Navttc-Cyber Security

Master Of Business Administration - Mba, Management Information Systems, General

Activities and Societies: 1)Member OF BITS Society at IBA, 2)GARP(Global Association of risk Professionals)

Jaibp, Banking & Finance

B.S (C.S), Computer Sciences

B.Com, Finance

Certification., Rsa Security And Data Capturing System- By Emc

Comminication With Impact

Certification In Core Banking, Banking & Technology

Core Banking Implementation and Active Profile Users

Information Security Foundation, Information Technology

Certificate, Cyber/Computer Forensics And Counterterrorism

Studied different domains of Cyber Security, SOC, Data Security, etc

Associate Chartered, Banking, Stage I, Ii, Iii

JAIBP Junior Associate of Banking