صادق نواف الهواوشة, Manager- Information Security

صادق نواف الهواوشة

Manager- Information Security

Jordan Dubai Islamic Bank

البلد
الأردن - عمان
التعليم
الثانوية العامة أو ما يعادلها, CISM - Certified information security manager
الخبرات
28 years, 11 أشهر

مشاركة سيرتي الذاتية

حظر المستخدم


الخبرة العملية

مجموع سنوات الخبرة :28 years, 11 أشهر

Manager- Information Security في Jordan Dubai Islamic Bank
  • الأردن - عمان
  • أشغل هذه الوظيفة منذ أكتوبر 2012

• Lead in the development, adoption, implementation and enforcement of Information Security.
• Developing, maintaining, and supporting the implementation of the Information Security Policies in aspect to ISO 27001, 27002
• Monitoring internal control systems to ensure that appropriate information access levels and security clearances are maintained.
• Participating And/or Preparing the bank disaster recovery and business continuity plans .
• Coordinating And/or participating in the preparation of Disaster Recovery Site (DRS) and Business Alternate Site.
• Serving as an internal information security consultant to the bank Monitoring advancements in information security technologies.
• Support senior management in ensuring that security management activities are conducted as required to meet the bank needs.
• Establishing and maintaining the information security awareness program.
• Perform ongoing information risk assessments to ensure that information systems are adequately protected & meet the bank requirements.

Senior IT Auditor في jordan dubai islamic bank (jdib)
  • الأردن
  • يناير 2010 إلى سبتمبر 2012

o responsible for monitoring IT systems to ensure they follow policies and practices
o evaluate technology, manage staff, identify controls and keep records
o Executes and manages detailed audits of IT systems and infrastructure to verify systems are secure and support the related applications/business processes.
o Develops audit programs, evaluates system controls, documents audit results, makes recommendations and communicates findings to Internal Audit and senior management.
o Prepares and presents comprehensive written reports on the results of IT audits and special projects to Internal Audit and senior management.
o Monitors the progress of IT audits and special projects against the audit plan and ensures audits/special projects are completed on time and within budget.
o Presents and communicates complex technological issues in a clear, concise and effective manner to technical and non-technical audiences.
o Assists in the identification of risks as part of the risk management process, including business continuity and disaster recovery planning.
o Serves as a liaison between Internal Audit and the IT department to ensure effective communication between the two departments.
o Assists in the preparation of the quarterly audit progress reports and Management Action Plan updates for the Audit Committee.

o Performs special projects relating to information technology as requested by management.

Information Technology Auditor في Industrial Development Bank
  • الأردن - عمان
  • أغسطس 2004 إلى ديسمبر 2009

o Responsible for monitoring IT systems to ensure they follow policies procedures and best practices.
o Executes and manages detailed audits of IT systems and infrastructure to verify systems are secure and support the related applications/business processes.
o Develops audit programs, evaluates system controls, documents audit results, makes recommendations and communicates findings to Internal Audit and senior management.
o Prepares and presents comprehensive written reports on the results of IT audits and special projects to Internal Audit and senior management.
o Monitors the progress of IT audits and special projects against the audit plan and ensures audits/special projects are completed on time and within budget.
o Presents and communicates complex technological issues in a clear, concise and effective manner to technical and non-technical audiences.
o Assists in the preparation of the quarterly audit progress reports and Management Action Plan updates for the Audit Committee.
o Maintains or acquires sufficient knowledge of authoritative and regulatory issues governing information technology, auditing, maritime matters and other fields as required to complete audit assignments.
o Participate on operation audit for the bank.

Programmer And Systems Analyst في Industrial Development Bank
  • الأردن - عمان
  • يناير 2000 إلى يوليو 2004

o Analyzes the Bank information needs, both immediate and long term, and plans for the development of and/or changes in the system to meet these needs.
o Develop systems using the methodology of the system development life cycle.
o Write, update, and maintain computer programs or software packages to handle specific jobs, such as tracking inventory, storing or retrieving data, or controlling other equipment.
o Perform or direct revision, repair, or expansion of existing programs to increase operating efficiency or adapt to new requirements
o Write, analyze, review, and rewrite programs, using workflow chart and diagram, and applying knowledge of computer capabilities, subject matter, and symbolic logic.
o Provides user support and training for modifications of systems or procedures.
o Team at Y2K problem and sharing this team in solving Y2K problem by using Cobol.
o Programmer In oracle programming language and MS Access
o Perform systems analysis and programming tasks to maintain and control the use of computer systems software as a systems programmer.
o Provides assistance and advice to business users in the effective use of applications and information technology.
o Participate in programmed the systems (guarantee system, , labels systems, layers system, human resources system) including analyst for these systems.
o Do the analyses for all the reports that needs by the employee and programming all these reports.
o Team member in the new IT projects.
o Test and participate in conversion process for varies systems.
o Member in various IT projects.

Programmer , Operator and System Administrator في Industrial Development Bank
  • الأردن - عمان
  • يونيو 1995 إلى ديسمبر 1999

o Operating systems control using AOS_VS and UNIX operating system
o Doing all macros that needed for the backups and users.
o Organize the entire database file on the main servers and put the policy to save all - files on the main storage and make all the links needed by users and programmers
o Create users for the systems and put all the privileges to insure the security for the information system.
o Take all the backups needed for all systems (daily, weekly, monthly, and yearly).
o Doing end of day procedure (update transactions, closing, reports).
o Technical support for all PC, printers, Servers.
o Technical support for all Microsoft products installing, updating and doing supports for users.
o Produce technical documentation for new and existing applications.
o Verify database and data integrity
o Assist in the creation of the system design and functional specifications for all new development projects.
o Serve as a liaison and facilitator between all business units to assist in addressing and resolving IT software issues.

الخلفية التعليمية

الثانوية العامة أو ما يعادلها, CISM - Certified information security manager
  • في ISACA
  • يونيو 2014

Certified information security manager

دبلوم, Certified in Risk and Information Systems Control
  • في ISACA
  • مارس 2011
ماجستير, Computer Science
  • في Al-Balqa’a Applied University
  • فبراير 2005
دبلوم, Certified Information Systems Auditor
  • في ISaca
  • فبراير 2005
بكالوريوس,
  • في PHiladelphia University
  • فبراير 2001

i have Bachelors in computer scince and informatiom system - oracle training courses - unix training courses - windows Networking courses -

Specialties & Skills

Science
Management
Internal Audit
oracle programmer

اللغات

الانجليزية
متمرّس