Manager Information Systems Audit.
Pakistan mobile communication limited (Mobilink)
Total years of experience :19 years, 2 Months
Currently i am working as "Manager Information Systems Audit" and also have worked in following roles during last six years in Pakistan Mobile Communications Limited (Mobilink Pakistan): b) Designation: Assistant Manager Information Systems Audit (Internal Audit) Jan-2011 to Dec-2012 c) Designation: Specialist Information Systems Audit (Internal Audit) Jan-2009 to Dec-2010 d) Designation: Associate Information Systems Audit (Internal Audit) Oct-2007 to Dec-2008 Responsibilities: R1. Information Systems Audits Plan and Conduct Information Systems Audits. Deliver results by identifying risks & suggest recommendations in audit/Investigation draft reports; Using COSO standards for audit report drafting; Design the initial framework for the control environment; Validate deviations (from audit reports and any other source); Provide suggestions, guidance, advice and consulting to IT Operations; Escalate noncompliance to senior management; Obtain management responses to uncorrectable control deviations; Mediators between Audit and IT Operations, internal and external IT auditors, etc. Following are the main Area wise audits i have planned and conducted during my current experience: Area1. Finance and Revenue Assurance: a) Inventory Management system and Point of Sale Audit b) Interconnect Cost & Revenue Audit c) Credit and Collection Audit d) International Roaming Audit e) VOMS (Voucher Management System) Audit f) Revenue Assurance Recons’ Audit g) Bank Reconciliation System Audit h) Technical Warehouse Audit Area2. Technical (Engineering) and IT (Information Technology) a) Prepaid Billing System (IN: Intelligent Network) Audit b) Postpaid Billing system Audit c) Switch System Audit d) HLS (Home Location Server) System Audit e) OTAR (Over the Air Recharge) System Audit f) SMSC platform security review Audit g) Verification of Ethical Hack Testing of Mobile Commerce application (MFS). h) IR (International Roaming) & VAS (Value Added Services) testing. i) BTL (Below the Line) activities Audit. j) Business Critical Applications Audit (High level risk assessment of company applications). Area3. Customer Care a) Numbers Deletion Audit. b) CS Processes Compliance Audit. Area4. HR & Admin a) Human Resource Management (HITS) System and Controls Audit. R2. Forensic / Fraud Investigations Following are some important special assignments and fraud investigations that I have planned and conduct during my tenure in Mobilink: 1 Embezzlement Of Company funds fraud investigation. 2 Illegitimate Installation of Company’s Applications on Personal Machine fraud investigation. 3 Illegal prepaid recharge posting through IN (Intelligent Network) fraud investigation 4 Unauthorized access to prepaid subscribers data by sales BDO (Business Development Officers) fraud investigation. 5 Exploitation of HRN (Hidden Recharge Number) fraud investigation. 6 Fraudulent sales of special numbers (Platinum, Gold & Silver) fraud investigation. 7 Wrong tariff implementation for IR subscribers (Subscribers on International Roaming) Fraud Investigation. 8 SMS spoofing fraud investigation (Other mobile operator Pre‐paid Roamers sending free SMS using Mobilink SMSC GT). R3. Outsourcing of Audit Assignments Lead and plan outsourced engagements related to Information and network security. Currently leading following outsourced assignment: IT Network Security audit R4. Development & Improvement Program During my tenure in Mobilink I have played critical role in following internal projects: Acquisition of ACL software to perform advance data analysis in audit assignments. Enterprise Repository project for managing company policies and procedures in a centralised manner.
DATA Configuration.
DATA Conversion
DATA Migration.
DATA Reconciliation.
By using ORACLE 9i (SQL, PL/SQL)
Project Name: Billing & Customer Care of PTCL (Pakistan Telecommunication Corporation Limited).
Create new Forms and Reports and Registration of Reports in Oracle Financial.
Designed and develop new Database Applications in Oracle 9i and Developer 6i.
Mphile/MS (18 years of education) degree in computer sciences.