Pervez Khan - Cisa Email and Phone Number
Pervez Khan - Cisa work email
- Valid
- Valid
Pervez Khan - Cisa personal email
- Valid
Pervez Khan, an Audit, Risk & Compliance Leader and accomplished People Manager with over 14 years of experience, including tenure at Big Four firm PwC, specializing in IT & Cyber Internal Audits, Application Audit, Risk and Compliance, control testing, and comprehensive risk management. Expertise spans IT Applications, IT Infrastructure, Cloud and Cyber Security, Security Operations, Vulnerability Management, Data Privacy, Cloud Security, Data Governance, AI/ML, ITGCs for SOX reporting, IT SOX Compliance, IT Application Controls, ISO 27001 Implementation and Audit, and NIST 800-34 BCP-DR audits. Experienced in formulating Annual Audit Plans based on Continuous Risk Assessments and aligning IT controls to NIST and COBIT frameworks.• Progressive expertise in audit planning, scoping, execution, and reporting, delivering comprehensive evaluations of control designs and operational effectiveness within Internal Audit functions, particularly within the Banking & Insurance sectors.• Proven leader in managing technology audits, project assessments, and application audit engagements, adept at identifying and mitigating key operational risks across critical business processes.• Strategic in IT & Cyber Audit planning, with a refined ability to perform risk assessments and develop robust, risk-based audit plans.• Strong GRC and Risk Management oversight, ensuring thorough assessments of the organization's control environment across IT and Cyber (InfoSec) domains.• Subject-matter expertise in SOX compliance, implementing risk-based testing through integration of SOX control risk ratings into annual scoping, reinforcing robust internal controls.• Knowledge of industry standards such as COSO, COBIT, NIST, and ISO27001, as well as regulatory frameworks like SOX, GDPR, and PCI-DSS.• Exceptional analytical and problem-solving acumen, committed to achieving high performance standards and exceeding expectations.• Dynamic leadership and communication including listening skills, fostering a motivating environment and providing impactful coaching, mentorship, and guidance to team members.• Trusted partner to top management and stakeholders, consistently building collaborative relationships to drive successful outcomes and strategic alignment.
Haleon
View- Website:
- haleon.com
- Employees:
- 17103
-
Senior Manager Cybersecurity, Sox, Risk And ComplianceHaleonKarnataka, India -
Senior Manager - Cyber & It RiskOsb Group Jun 2023 - Nov 2024Bengaluru, Karnataka, IndiaLead the Risk & Compliance Team with a Governance, Risk, and Compliance (GRC) focus, delivering rigorous assessments to ensure the resilience of the organization's IT and Cyber (InfoSec) control environment. Oversee periodic validation and reporting of ITGCs to senior management, maintaining alignment with organizational risk appetite through monthly monitoring. Provide specialized operational risk guidance across IT domains, including Information and Cyber Security, leveraging deep expertise in Operational Risk Management (ORM) processes and regulatory standards. Knowledge of network and information security, Cyber risk mitigation, and third-party IT and information security requirements. Others BAU tasks include (not limited to):• Strengthen IT and Cyber 2nd Line of Defense (2LOD) oversight through robust development and enhancement of Risk Control Self-Assessments (RCSA).• Author and own the IT & Cyber Risk Management Framework, defining and continuously refining the organization’s approach to risk.• Ensure Key Risk Indicators (KRIs) accurately reflect IT and Cyber risk exposure, providing meaningful insights into risk levels.• Validate IT and Cyber policies, ensuring they are effectively implemented, enforced, and optimized for purpose.• Design and maintain IT and Cyber 2LOD risk dashboards, offering clear, data-driven insights into risk landscapes and trends.• Review and approve risk waivers, managing exceptions relating to policy or standard compliance.• Investigate and assess risk events on behalf of the 2LOD, identifying causes and proposing preventative measures.• Represent 2LOD in relevant committees, advocating for and aligning IT and Cyber risk considerations across the organization.• Exercise 2LOD oversight of critical IT & Cyber security initiatives, ensuring alignment with the organization’s risk and compliance objectives. -
Lead Audit ManagerAccenture Jun 2021 - Jun 2023Bengaluru, Karnataka, IndiaLead a team of seasoned audit professionals, overseeing comprehensive audit planning, scoping, execution, and reporting to evaluate the design and operational effectiveness of controls. This role spans Thematic process audits (IT & Cyber), Application audits ITGC audits, and SOX Compliance audits from initial scoping through remediation monitoring.• Support the Head of IT Audit by contributing to IT and Cyber Audit planning and execution, including meticulous risk assessments to guide audit strategies.• Conduct IT Audits with focus on assessment of Cybersecurity posture, Compliance audits (GDPR, SOX etc.), ITGC audits, Operational audits to examine efficiency of IT processes, Risk assessment audit to identify & prioritize IT related risks, and Data security audit to ensure data integrity & protection. •Conduct Application Audits for critical applications from the business impact analysis (BIA) incorporated in the annual audit calendar.•Auditing product development including SDLC data migration, testing, release management and testing•Drive IT General Controls (ITGC) Audit focusing on the review of program and data access controls (e.g., access provisioning/de-provisioning, user access reviews, and password parameter testing), computer operations, SDLC and program change management across multiple applications.•Conduct Group wide Thematic process audits (IT & Cyber) including infrastructure security audits, Vulnerability Assessment and Penetration Testing audits, Security Policy and Procedure Compliance audit, Access Control audit, Network Security audit, Incident Response Plan audit, Business Continuity and Disaster Recovery (BCDR) Plan audit, Cloud Security audit with in-depth reviews. Some of Audits performed (not limited to): o Vulnerability Assessment and Penetration Testing, Access Control, Network Security audit, Incident Response Plan, BCM/DR, Cloud Security, Cybersecurity Risk Assessment, Phishing and Social Engineering Awareness, Email Security. -
Audit Manager - Internal Audit Group (Sox Compliance)Aig Jan 2015 - Jun 2021Bengaluru Area, IndiaLead a team of seasoned audit professionals, overseeing comprehensive audit planning, scoping, execution, and reporting to evaluate the design and operational effectiveness of controls. This role spans Internal Audits (IT & Cyber), ITGC Audits, Application Audits, and full-cycle SOX Compliance from initial scoping through remediation monitoring.• Oversee SOX ITGC compliance audits, encompassing all phases from scoping and planning to execution, documentation, and review of work papers.• Direct IT General Controls (ITGC) assessments, reviewing critical applications, databases, and infrastructure for GITC/ITGC adherence.• Collaborate with SOX business teams to identify and test completeness and accuracy for ITDCs, including key reports, automated controls, and interface controls.• Review Process Flows and Narratives, conducting both Design and Operating Effectiveness testing including review of IT processes, document audit results, communicate findings to management, & oversee follow-up on action plans.• Partner with process owners to finalize observations, develop robust remediation plans, & assist in defining Management Action Plans (MAP) for addressing control findings.Developed and maintained comprehensive SOX control documentation, including risk assessments, process flowcharts, control narratives and control testing. Executed end-to-end walkthroughs of critical processes with reliance on Technology & security. Collaborated with external auditors to ensure compliance with SOX regulations and industry best practices. Identified and implemented process improvements to enhance efficiency and reduce risk.Control Testing: • Performed detailed testing of IT General Controls (ITGCs) and application controls.• Designed and implemented effective testing strategies, including test plans and scripts, to assess the design and operating effectiveness of controls.• Analyzed test results and identified control gaps and weaknesses. -
Senior AnalystPricewaterhousecoopers - Service Delivery Center (Pwc Sdc) Jul 2010 - Jan 2015Kolkata Area, IndiaProvide critical support to engagement teams in the execution of diverse audit assignments, leading a team of 10 Associates and Experienced Associates by reviewing their work, delivering targeted training, and guiding them in their daily BAU activities.• Conduct comprehensive Business Process Reviews that include IT General Controls (ITGCs) and IT Application Controls (ITACs) as part of SOX engagements.• Review and test ITGC domains, focusing on program and data access controls (e.g., access provisioning/de-provisioning, user access reviews, and password parameter testing), computer operations, and program change management across multiple applications.• Engage regularly in client walkthroughs and conduct Tests of Design (TOD) and Tests of Operating Effectiveness (TOE), fostering strong client relationships.• Analyze segregation of duties (SOD), identifying and addressing potential control risks.• Execute audit procedures to evaluate control and application deficiencies, ensuring that audit insights are thorough and actionable.• Perform detailed tests, including revenue, cost of sales, lease, accounts receivable aging, unrecorded liabilities, and operating expense testing to verify transaction accuracy and completeness.• Conduct SEC Reporting reviews, performing internal consistency checks of financial statements and ensuring mathematical accuracy and compliance with reporting standards.• Lead external confirmation processes for cash, debt, contracts, derivatives, and other critical contractual information to verify and validate audit findings. -
Customer Service OfficeIcici Bank Jan 2008 - Jun 2010Worked as an Officer on various types of banking departments starting from Teller, Demat, RTGS, KYC, General query etc.Worked as part of Internal Audit upskill programme• Worked on guidelines covering AML, KYC, Process Audits, Branch Audit, Centre Processing Centre audit.• 6 Months of Internal Audit upskill programme• Reviewing the GL balances & other financial transactions of Branches• Corporate Client relationship Manager, Trade, Forex & Demat (2nd Year)• Customer Service Branch Banking (1st Year)
Pervez Khan - Cisa Skills
Pervez Khan - Cisa Education Details
-
Information Systems Audit And Control Association (Isaca)Auditing -
Information Technology -
Honours -
Institute Of Finance, Banking & Insurance (Ifbi)Diploma -
The Doon SchoolClass Xii
Frequently Asked Questions about Pervez Khan - Cisa
What company does Pervez Khan - Cisa work for?
Pervez Khan - Cisa works for Haleon
What is Pervez Khan - Cisa's role at the current company?
Pervez Khan - Cisa's current role is Senior Manager Cybersecurity, SOX, Risk and Compliance.
What is Pervez Khan - Cisa's email address?
Pervez Khan - Cisa's email address is pe****@****aig.com
What schools did Pervez Khan - Cisa attend?
Pervez Khan - Cisa attended Information Systems Audit And Control Association (Isaca), Sikkim Manipal University - Distance Education, Shri Ram College Of Commerce, Institute Of Finance, Banking & Insurance (Ifbi), The Doon School.
What are some of Pervez Khan - Cisa's interests?
Pervez Khan - Cisa has interest in Children, Environment, Education, Animal Welfare, Health.
What skills is Pervez Khan - Cisa known for?
Pervez Khan - Cisa has skills like Financial Modeling, Valuation, Business Valuation, Investment Banking, Financial Analysis, Corporate Finance, Due Diligence, Financial Reporting, Accounting, Auditing, Equity Valuation, Financial Accounting.
Not the Pervez Khan - Cisa you were looking for?
-
-
-
Ahmer Pervez Khan
Senior Manager-Projects @ Godrej Properties | B.Tech, Mba || Construction || Ex L&TNew Delhi -
Pervez Ahmed Khan
Sustainable Aqua Culture Will Drive The Fishery Industry And Keep It Moving.Kolkata -
2gmail.com, bajajallianz.co.in
Free Chrome Extension
Find emails, phones & company data instantly
Download 750 million emails and 100 million phone numbers
Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.
Start your free trial