Altaf Ahmed Khaja

• Ensure that the ERM Framework is in line with the industry best practices and International standards such as ISO 31000, COSO and the IRM & PMI risk management.
• Develop ERM documents such as but not limited to Policies & Procedures, Mitigation Plans, Annual Risk Reviews Plan etc.
• Advise the management on critical risks requiring the active monitoring & management decision making for effective and efficient risk mitigation.
• Develop strategy & plans for creating sustained awareness and understanding of ERM across the organization to ensure a healthy risk culture is maintained.
• Facilitate the Executive Risk Management Committee, issue timely reports and escalate the qualified risks
• TOP Priority Risk reporting to all internal & external stakeholders such as management & Board Sub-committees, JV partners, Govt. entities etc.
• Identity gaps in the BCPs and monitor the implementation and capture lessons learned into processes
• Document & analyse information gathered from various sources to decompose high-level information into detail risk descriptions, and differentiate risks from issues to update the risk registers.
• Monitor the operations and integration of risk management program of subsidiaries, contractors, sub-contractors, suppliers and vendors etc. as appropriate
• Review the risk management program on a continual basis to ensure that it is continuously updated to meet the needs of the corporation as it progresses through various phases such as from construction to operational readiness to operations.
• Work with key stakeholders to ensure the integrity of the risk identification process is maintained across the organization.
• Implement program of recurring reviews designed to evaluate the possible adverse impacts on the Prime Contractor due to economic, political, regulatory and strategic matters
Key Initiatives:
• Developed & implemented Risk Tolerance & Appetite for the Enterprise.
• Developed and implemented the Combined Assurance Framework (3 lines of defence) across the Enterprise.
• Developed reports for Executive Risk Management Committee (ERMC), Audit Risk Compliance Committee (ARCC), Committee on Nuclear Power (CNP) and Combined Assurance Framework Report (3 lines of defence) etc. to be presented to the CEOs/CXOs, BoD Sub-committees and Board of Directors.
• Partnered with other business and functional entities such as Procurement & Supply Chain, Finance, Human Resources, ICT, Legal & Compliance, Fraud Management, Internal/Management Systems/Quality Assurance Audits, Business Excellence, Construction and Engineering, HSE etc. to ensure the alignment and integration of/with ERM.
• Developed Project Risk Management process in collaboration with the PMO to cater to all project sizes and complexities.
• Developed a training schedule and matrix for the ERM team and the risk champions for continued development and up-skilling.
• Regularly conduct risk assessment, develop & implement the mitigation plans, conduct cost benefit analysis with PMO/Business Planning (BP) teams for the key business plan projects.
• Develop KPIs and risk performance score cards (ERM Index) at divisional and Chief Office levels and report to the directors/chiefs and corporate performance management team.
• Regularly train and coach the risk owners, and management (Heads & above) on the ERM process and tools
• Conduct biennial self-assessment on the ERM
Achievements:
• Received “Exceptional Performance Award” for Nov’2017
• Received “Certificate of Appreciation” for the contribution to ENEC Innovation Week 2018.
• Received “Award for the support & contribution to ENEC’s Abu Dhabi Award for Excellence in Govt. Performance (ADAEP) submission. ENEC’s Risk & Business Continuity Management Program was shortlisted in Top 5 programs among 63 participating entities.
• Submitted several Innovative Ideas which are accepted, that will have the long term impact and benefit to the organisation and UAE Energy and Water Security.

Customers: Oil/Gas/Energy, (Semi) Government, Investment, Manufacturing, Hospitality, Legal,
and Education
 Participate in client interactions to understand the business, functional & technical requirements; business
process workflows to elicit analyze & specify requirements to technical team for developing the solution.
 Conduct boardroom presentations to CXOs taking consultative approach to provide better understanding of
the GRC concepts & showcase the solution’s relevance and benefit to their business with TOC & ROI
 Liaise as a Techno-Functional GRC SME to develop the solutions and services packages for the customers.
 Participate in the business requirements gathering, solution design, business process workflows design and
ERM functionalities development in the GRC software.
 Provide training to internal team members and the client’s business users on ERM functionalities.
 Manage and monitor various projects, vendors, and customers.
 Identify, manage, and secure existing and new projects; continue to maintain a high level of services
Highlights:
 Developed highly customized GRC business solutions for the customers
 Implement lessons learned and knowledge sharing among team members for enhanced services
 Actively involved in acquiring many new governmental & semi-governmental projects
 Introduced and enhanced land and expand strategy with existing customers
 Continuously monitored the market dynamics, and captured the future business requirements in expanding
the product portfolio.
 Manage a diverse products portfolio, projects such as GRC, Enterprise Mobility, Business/IT process
Automation, and Green IT.

Accountabilities:
 Smart Grid Security Analysis using formal security requirements engineering methods.
 Reviewing critical assets of the system, threats and vulnerabilities to them and perform risk assessment using NIST SP 800-30 Risk Assessment methodology.
 Involved in Smart Grid Business and Technical domain Analysis; developed a domain link matrix (DLM) for linking business and technical domains within Smart Grids.
 Managing requirements gathering, analysis, and specification - business, functional and technical.
 Successfully developed a ‘Portfolio Management Tool’ with the primary focus on reducing risk to maximize the portfolio value, provides balance, and support enterprise strategy.
 Developed a crowd sourcing platform to provide business and technical solutions through exploring the power of the untapped crowd (undefined network of people) around the globe.

Highlights:
 One of the founders of Masdar Institute IEEE Student Branch.
 Published One IEEE Transactions Journal paper, One IEEE CPSCom-2013 Conference Paper, 2 more research papers published in APCOSE, AAAI Symposium on CrowdSourcing at Stanford University.
 Treasurer of the first Student Government Association (SGA) & Alumni Association (current) of the Masdar Institute from October 2009 to October 2010. My responsibilities were providing the logistics, support, and getting best deals for arranging various outings, activities, and managing the limited budget. Also getting sponsors for the events and activities. Improving student academic and social life at the campus.
 Handled two Masdar Institute - MIT joint research projects on Smart Grid Systems Engineering.
 Won an Award of Excellence in Sep’2010 in recognition of outstanding services to the students of the first graduating class of Masdar institute.

Accountabilities:
 Monitor & analyse high risk online transactions on the Amazon.com website for any fraudulent activity.
 Prepare Device finger printing, IP geo-location, velocity; reporting and documenting new trends in fraud;
design new counterstrategy with the help of subject matter experts and team leads.
 Scrutinise the existing customer accounts for any account take over or counterfeit by fraudsters; kept a
watch over ‘Identity theft cases’, updated customers and databases; scanned the databases to identify
further transactions or accounts by same or similar information.
 Proactively liaised with external and internal customers to define departmental risk appetite; monitor,
analyze risks, conduct risk assessments, prepare & implement mitigation plans (conduct periodic reviews).
 Collaborate with different stakeholders for continually monitoring the dynamic risk/fraud trends and to take
proactive mitigation actions to keep looses within the agreed range/limits.
 Checked quality misses on queries and trained associates on business process workflow for defect free
quality service; imparted training to new hires for better utilization of available resources and risk based
decision making with customer and client centricity in focus.
 Ensured that high levels of quality (98.6%), accuracy (99.4%) and productivity (110%) were maintained.
Notable Highlights:
 Cost control initiatives:
o For high $ transactions conducted a bank verification check.
o Removing the unnecessary steps in processing of some transactions (BPE).
 Streamlined various existing systems/ processes as follows:
o Developed a process workflow chart and decision assisting algorithm enhancing decision
making capabilities of team members.
o Started inter department collaboration ensuring reduction in the fraud losses & improved
efficiency.
 Undertook several initiatives to minimize portfolio risk like starting customer verification back-calling, re-
verification by credit team.

Accountabilities:
 Monitor credit card transactions for detecting fraudulent cases transactions made online, over the phone or by swiping the cards at Point of Sale (PoS)/stores.
 Fraud Underwriting the new applications for Loan/Line of Credit, Credit Card, Business Credit Line or the Active Credit Card Accounts financed by GE Money Bank.
 Conduct credit worthiness assessment to approve the credit limit and contribute in Credit Risk prevention strategy design.
 Monitor the non-monetary changes on the accounts to ensure that the accounts are not taken over by fraudsters or by fraud rings.
 Review fraud cases where losses were over $10k; perform data modelling and information analysis on these high risk transactions to identify any hidden patterns/ uncertainties to capture new fraud rings or processing mistake; share the relevant data with Strategy Design Team & Law Enforcement Teams (LET).
 Streamline Processes, update SOPs (Standard Operating Procedures), and use them to drive customer CTQ’s (Critical to Quality), lead process improvements and handle escalations.
 Assist the Business Continuity Plan Team by collaboration with various departments like IT, Telecom, Operations, Counterpart sites & agents to ensure that operations were run smoothly in case of transitions, emergencies and outages.

Notable Highlights - GE Money Servicing:
 Received “Certificate of Graduation - HR Rep Program 2006-07” from GEMS India Business Leader for selected HR Reps & actively participating in the Job Fairs & for bringing the awareness about the HR policies, resolving employee issues with HR, payroll, etc.
 Chosen as “Diligent Employee of the Month” Nov’07 for making contributions in the evolution of the credit application processing, and client/customer servicing.
 Holds merit for saving $44729 for the company with proactive fraud catches from Nov’07-Feb’08.
o Distinction for having filed second highest no. of “I Resolved IT” (for fraud catch and process improvement) Cases (6).
o Recognised by the Management for “Best I Resolved IT” case of the team, received a Certificate and Gift as a token of appreciation from Clients in the Town Hall.
 Played a pivotal role for effectively bringing down fraud losses from $130, 000 per month to $30, 000 - $40, 000 per month for one of the portfolios and won “Dream Team Award”.
 Selected for “Pillars of Support Award” for significant contributions towards arrangements for team outings, rewards and recognition programme, etc.
 Awarded “Certificate of Achievement” Q4 2005 for being quality topper - 100% QIIC for 3 consecutive months from GE India Business Leader in the annual town hall.
 Cost control initiatives:
o Developed a macro to process the charge backs which reduced the processing time by 50% & improved the quality and almost reduced defects.