Suleman Hasan Email & Phone Number

Rawalpindi, Punjab, Pakistan

Karāchi, Sindh, Pakistan

Karāchi, Sindh, Pakistan

Responsible for:- Corporate Governance- Enterprise Risk Management - Information Security- 24 x 7 Security Operations Centre (SOC)- 24 x 7 Customer Support - Data Analytics

Karachi

As Company Secretary, I'm also responsible for the following domains:- Corporare Affairs- Data Analytics- Risk Management • Enterprise Risk Management • Fraud Risk Management Service • Information Security and Security Operations Center (SOC)

Pakistan

As Head of Internal Audit and Secretary of Board Audit Committee, following are the key responsibilities undertaken:- Evaluate and provide reasonable assurance that risk management, control and governance systems are functioning as intended and will enable the 1LINK's objectives and goals to be met.- Report risk management issues and internal controls deficiencies identified directly to the Board Audit Committee.- Make recommendations for improving the organisation's operations and performance in terms of efficiency and effectiveness.- Evaluate the 1LINK's readiness in case of interruptions which is a paramount critical nature item for the national switch and payment scheme.- Evaluate Information Systems and Technology architecture, security and associated risk exposures of 1LINK.- Evaluate regulatory compliance program.- Coordinate with internal and external resources as appropriate.

Islamabad, Karachi & Kabul Offices

• Supervised the teams and projects of IT risk and audits in Pakistan and Kabul. Responsible for the revenue targets and the ovevrall quality. • Handled Sarbanes Oxley (SOX) implementation for a pioneer cellular network company in Pakistan• Led the post-implementation review of the Core Banking System at the leading commercial bank of Pakistan• Led comprehensive IT effectiveness review and IT audit covering security, operational, financial & human resources at a national corporate affairs regulatory body of Pakistan• Managed IT statutory audits of EY clients in Karachi, Kabul and Islamabad• Key clients served: - Securities and Exchange Commission of Pakistan (SECP) - Mobilink Pakistan (PMCL), a VimpelCom Company - New Kabul Bank - National Bank of Pakistan - Habib Bank Limited - CitiBank - Pakistan Petroleum Limited- United Bank Limited- Maiwand Bank - Afghanistan- Da Afghanistan Bank- Spitamen Bank - Tajikistan- Thal Engineering Limited- Hum TV Networks- State Bank of Pakistan- First Micro Finance Bank Pakistan- Burj Bank Limited- Al Baraka Bank Limited- Summit Bank- Getz Pharma- Hub Power (HUBCO)- Lucky Cement- Cherat Group

Riyadh, Ksa

Managed all the Riyadh based PwC clients in assurance line of service during the year-end audits; clients' sectors ranging from banks, insurance companies, telecom service providers, telecom vendors, retail, manufacturing and technology firms. Key clients covered:- Etihad Etisalat Mobily - Saudi Arabian Monetary Agency (SAMA)- Banque Saudi Fransi- SABB Takaful- AlRajhi Bank- Saudi Arabian Cooperative Insurance Company- Bank Alinma- Saudi Investment Bank - Herfy Foods- Kudu- Kingdom Holding Group

Riyadh, Ksa

Assisted the Olympic Committee in:o Set up Project Management Office for Swimming Federationo Identified & designed Organizational Processes, Policies & Procedureso Developed framework for IT Strategy & Road-map

Riyadh

• Prepared annual IT audit plan & its execution in highly automated SAP environment• Assisted CEO in special reviews to improve MIS for budgeting, HR & Finance areas• Performed comprehensive process & controls review of SAP HR module, FICO module, SAP BASIS security, MM module, SD module and IT operations & security • Reviewed the process of (i) preparation of authority matrix; (ii) controls over content of authority matrix; (iii) process of uploading the authority matrix across the organization; (iv) verification of the matrix in SAP; & (v) process of incorporating changes in authority matrix• Introduced the concepts of broadly defining the Service Level Agreements and Key Performance Indicators to better coordinate the cross-functional activities fundamental to the success of this relatively new organization •Identified gaps in existing policies and procedures; assisted management in recognizing the need of the life-cycle for improving the policies and procedures

Riyadh, Ksa

Worked in the Business Consultancy line of service in IT Operations & Advisory engagements. Significant work included:- Etihad Etisalat Mobily • Managed a project of Information Security Assessment of the IT systems, services, and associated technology security components. • Review of Company-wide policies and procedures for Mobily in order to assess the existence, availability, completeness, adequacy, compliance and monitoring using the PwC knowledge-base and eTOM as reference models. • Post-implementation review of Oracle HRMS • Systems performance review for Customer Care process in terms of functionality, user-friendliness and efficiency - Abdulrehman Algosaibi Group: Managed a project of developing IT Policies and Procedures, reviewing user and technical manuals for a large Saudi Group in a newly installed ERP environment.- Juman (real-estate venture of Hoshanco): Devised IT strategy, assisted in system selection, prepared 3-years IT budget, developed IT policies and procedures, and formulate ERP implementation plan- Saudi Research and Marketing Group: Led the project of enterprise risk assessment.- NUPCO (National Unified Procurement Company for Medical Supplies): Managed a project of SAP post-implementation review for FICO, HR, SD, MM, SRM, WM modules at NUPCO, my role involved preparing the project plan, conducting status meetings, monitoring the progress of the project, tracking the project with the contract (giving significance to time-lines, project financials, logistics, etc.) performing the quality review of deliverables, presenting the deliverable to client management, finalizing the different phases of the project and the entire engagement.

Riyadh, Ksa

Set up and headed the risk management department. In addition to execution of this task, was responsible for franchise contract reviews, performed cost-benefit analysis of group wide insurance coverage and assisted the BOD in selecting the insurance packages for different business needs of the Group. Devised business and IT requirements for disaster recovery plan and developed IT policies and procedure manual.

Riyadh & Dhahran, Ksa

Worked as Manager in X-LOS for the firm (Systems & Process Assurance / Performance Improvement) for the time mentioned. Gained valuable experience in diversified industrial sectors, worked as the team leader through-out my stay. Key client experience include:- Saudi Aramco o Post implementation review of SAP HSCM and HR modules. o Led IT audit and business process assurance reviews supporting the financial audit. Significant areas included complete process review of SAP modules supporting the generation of financial statements. o Post implementation review of Evaluated Receipt Settlement (ERS) process; a paper-less procurement business cycle that was utilized to bring robustness and efficiency in the supply chain. - Vela Marines International: Advisory in shipping ERP selection and post-implementation review of the Shipnet system.- Khafji Joint Operations (KJO) a joint venture between Aramco Gulf Operations Company (AGOC) and Kuwait Gulf Oil Company (KGOC); I led the post-implementation review of the SAP FICO, HR and MM modules.- IT audit support of financial audits at the following key clients: o SAMBA Bank o Riyad Bank o Bank Albilad o NCCI Tawuniya o Bank AlJazeera o Savola Group o Luberef o Arab National Bank o Saudi Amiantit o AlHadeed Steel- Saudi Telecom Company (STC): Systems & Process reviews for reliance on the financial logic of the telecom systems and on critical areas of Revenue Assurance for GSM and Land-line. Performed a comprehensive test of controls on complex telecom applications reviewing the automated controls and end-to-end reconciliation process that includes Oracle Suite, ICMS, Mediation Devices and Switches technologies.- Riyadh Cables: IT effectiveness review that covered the IT systems portfolio, organization and management, operations, processes, documentation, and systems relevance study for the end-users. We also assisted management in systems selection.

Karachi, Pakistan

Worked for the Global Risk Management Services (GRMS) department at A.F.Ferguson. Primary responsibility was the audit support and special projects related to IT governance and risk services.Key experience includes:- IT Process Review of National Investment Trust ("NIT")- Comprehensive IT Internal Audit of MCB Pakistan- SAP post-implementation review of PRL (Pakistan Refinery Limited) where I was responsible for FICO module- Development of IT policies, procedures and subsequent compliance review of Jahangir Siddiqui Group.- IT Due Diligence of Habib Bank Limited on behalf of Privatization Commission- IT audit support work for statutory financial audit of the following key clients:Novartis Pakistan, Wyeth Pakistan,Shell Pakistan,Abbott Laboratories Pakistan,Saudi Pak Leasing Company,GlaxoSmithKline Pakistan,- Was seconded to PwC Saudi Arabia to assist in the IT Audit support work for annual financial audits in the closing of the year 2004.

Certificate In Digital Money, Digital Money & Payments, Mobile & Data Environment, Info.Security, Regulations, Financial Inclusion

- The basics of money and the functioning of typical payments systems: - Inter-bank systems, card-based retail systems, mobile money.

Chartered Digital Finance Practitioner (Cdfp), Financial Inclusion,Dfs, Payment Systems, Aml-Cft, Blockchain, Digital Identity, Consumer Protection

Digital Money; Leading Markets: The Global Digital Payments Landscape; Regulations of Digital Financial Services; Customers & Uses.

Certificate Course In Humanistic Counselling, Counseling Psychology

The year long certificate covers three modules: Module - I - Ethics, boundaries, and practitioner safety - The therapeutic alliance.

Certificate In Aml & Cft - Regulation & Compliance, Money Laundering & Financing Of Terror

Exposure of the world of AML, CFT & proliferation financing and the regulatory frameworks, policy & analytical tools required to combat.

Certificate In Bitcoin: Back To The Future, Bitcoin, Blockchain, Merkle Tree, Hash Functions, Cold Wallet, Mining Pool, Smart Contract, Xbt,Etc.

- Philosophy, portraying why cryptocurrencies represent such a big departure from the bank-based digital money we have all become.

Crisc, Information Systems Risks & Controls

Master’S Degree, Economics

Cisa, Information Systems Auditing

Pgd, E-Commerce & Software Engineering

Bachelors, Computer Science

Fsc (Intermediate), Pre-Engineering

Matriculation, Computer Science

Activities and Societies: Quiz society, Computer Science Club