Risk Management Director
National Petroleum Construction Company (NPCC)
Total years of experience :23 years, 8 Months
• In charge of establishing an enterprise risk management (ERM) framework suitable for the existing operations and environment
• Responsible of developing and maintaining the internal and external organization structure for the ERM function
• Report to the Risk Management Committee (RMC) on key risk issues, risks profile, risk management status, etc.
• In charge of managing the Internal Audit function and related operations.
• Report directly to the Audit Committee and administratively to the CEO.
• Responsible of providing progress status and highlights on the Internal Audit function activities to the Audit Committee on a periodic basis.
• Responsible of complying with Abu Dhabi Accountability Authority (ADAA) governing standards.
• Act as an advisor to management on business risk, internal control and process efficiency matters.
• In charge for constructing an IT audit plan based on risk profiling of the IT universe.
• Execute internal audits at the general controls level and process-level as planned.
• Report to senior management on a regular basis, and communicate the audit findings in the form of audit reports to the Chief Audit Executive (CAE) and senior management.
• Provide recommendations for the existing issues and audit findings, and contribute to advisory work in the IT related operations.
Holding an IT audit support manager position in the Risk Management Services area. Experience in managing small to medium size engagements in different types of industries. Focused on Sarbanes-Oxley and FSA type of work.
Experience and Responsibilities
• Sarbanes-Oxley IT controls testing including all GCC and BMP requested application/process level controls
• Designing and executing tests of key IT controls and evaluating results obtained.
• Documenting and reporting results to management.
• Experience with internal audit engagements for several different systems.
• Advising clients of potential risks involved with deficiencies
• Crystal Reports development
• Managed 2 internal audit engagements including developing engagement memos and creating final audit reports to represent findings to the client.
• Enterprise integration
• PeopleSoft process level controls testing
• Experience with supporting FSA Engagements for several small size clients.
Representative Accomplishments
• Managed Sarbanes-Oxley (SOX) IT General Computer Controls and Application controls testing efforts at several clients.
• Document process flows in Microsoft Visio and performed walkthroughs with the process owners.
• Prepared testing workpapers and performed testing of key IT processes/controls.
• Documented gaps/exceptions throughout the IT controls testing engagement.
• Evaluate the Control Testing Management Assessment using EMAP matrix.
• Assisted with developing FIEC proposal for a financial and banking services company.
• Delivered IT application controls test work for SAP system on several SOX engagement
• Experienced in conducting detailed design sessions with clients and drafting business as well as system/technical requirements for system development consulting services.
• Quality Assurance testing experience; developing test scripts, and performing and executing unit and product tests on applications. Unit, pair, product and regression testing performance in GENTRAN.
• Wireless Number Portability experience; design and Gap analysis work to develop methods and procedures for Wireless Number Portability (WNP) solution.
• Process Design and Requirements Gathering experience; detailed design work and creating service order work flow charts using MS Visio. Business requirements research and gathering for business service order management application implementations in the telecommunication industry.
• Crystal Reports development experience; 2 years of experience in designing & developing of crystal reports using versions 8, 8.5 and 9. Crystal Reports requirements gathering, detailed design and implementation for different types of industrial applications and projects. Developed several reports for telecommunication service order management applications (OMS by MetaSolv and Clarify) as well as for financial services applications (E.piphany). All reports were created based on and linked to Oracle databases. Experience in installing and operating Crystal Enterprise to execute reports remotely.
Engineering Student Aid Position in Research and Development.
Worked with the Gas Systems Team at Home and Building Control Division. Familiar with gas pressure regulation and control in gas valves. Worked with thermoelectric microchips as sensors for fluid flow pressure regulation. Experienced in thermoelectric power generation (Thermopile). Worked on redesigning a thermopile to improve its power output with minimum cost. Also, worked in a lab-testing group as a test engineer assistant for new valve products.
Overall GPA: 3.5/4.0 Total Credits: 30 (Semester) CONCENTRATION Computational Fluid Dynamics, Large Eddy Simulations in Round Jets, Fluid Flow Modeling
Overall GPA: 3.5/4.0 Total Credits: 30 (Semester) CONCENTRATION Computational Fluid Dynamics, Large Eddy Simulations in Round Jets, Fluid Flow Modeling
BS with distinction in Mechanical Engineering Overall GPA: 3.7/4.0 Total Credits: 214 (Quarter) CONCENTRATION: Thermoelectric and Electromechanical Design and Control Engineering. Senior Design Project involved design and development of a Laser pulse energy measurement device.
BS with distinction in Mechanical Engineering Overall GPA: 3.7/4.0 Total Credits: 214 (Quarter) CONCENTRATION: Thermoelectric and Electromechanical Design and Control Engineering. Senior Design Project involved design and development of a Laser pulse energy measurement device.