Anas Dawah

Audit Leadership: Lead and manage end-to-end Internal Audit and Business Risk Services (BRS) engagements for a diverse portfolio
of clients in the Manufacturing, Financial, and Construction sectors.
Strategic Planning: Oversee the development of risk-based annual audit plans, prioritizing high-risk areas to ensure optimal
resource allocation and organizational compliance.
Risk Management: Facilitate Enterprise Risk Management (ERM) and Control Risk Self-Assessment (CRSA) workshops to define and
manage inherent and residual risk profiles.
Governance & Reporting: Author comprehensive audit reports and executive summaries for Senior Management and Audit
Committees, detailing critical findings and strategic remediation plans.
Team Supervision: Direct the Internal Audit execution team, providing guidance on audit programs, walkthroughs, and the COSO
internal control framework.
Stakeholder Management: Develop and maintain productive relationships with department heads to facilitate information sharing
and the implementation of corrective measures.

Risk Assessment & Workshops: Facilitated Control Risk Self-Assessment (CRSA) workshops to identify enterprise-level risks and
evaluate the effectiveness of mitigation controls.
Audit Planning & Design: Formulated comprehensive, risk-based Internal Audit plans and developed tailored audit programs for
business units across multiple industries.
Control Evaluation: Executed Compliance Testing (Tests of Controls) and Substantive Testing to detect internal control
deficiencies and ensure regulatory alignment.
Risk Reporting: Authored Risk Summary Reports for Senior Management, highlighting inherent/residual risks, control gaps, and the
evolution of the control environment over time.
Remediation & Advisory: Provided strategic remedial actions for identified gaps and monitored the implementation of
recommendations to strengthen the organizational risk posture.
Methodology Presentation: Presented CRSA methodologies and audit findings to stakeholders, ensuring clarity on risk exposure
and the impact of proposed improvements.

Data Analytics & Fraud: Leveraged IDEA Data Analytics software to perform forensic auditing, extracting and identifying
suspicious transactions, red flags, and potential fraud schemes.
Internal Control Framework: Developed and executed Tests of Controls (ToC) and substantive testing to evaluate the
effectiveness of the internal control environment across various industries.
Risk Workshop Facilitation: Assisted in conducting Control Risk Self-Assessment (CRSA) workshops to map entity-level risks and
identify key mitigation controls.
Audit Program Development: Designed comprehensive audit programs and compliance testing modules tailored to specific
business unit risks.
Executive Reporting: Authored Risk Summary Reports for senior management, analyzing control gaps, trends in improvement, and
historical risk events.
Methodology Presentation: Delivered technical presentations on CARE (Control and Risk Evaluation) and Aldar-specific
methodologies to clients and internal stakeholders.

Financial Oversight: Conducted comprehensive reviews of accounting transactions and journal entries to ensure accuracy, proper
documentation, and adherence to company policy.
Treasury Auditing: Performed monthly Treasury Audits, verifying cash flows, bank reconciliations, and liquidity management to
safeguard company assets.
Contractual Compliance: Reviewed legal agreements and corporate contracts to evaluate financial terms and ensure organizational
compliance with internal governance standards.

Financial Operations: Managed comprehensive accounting cycles within the Revenues and Expenditures departments for a major
healthcare facility.
Expenditure Management: Processed and verified accounts payable transactions, ensuring all expenditures aligned with hospital
budgetary constraints and procurement policies.
Compliance & Reconciliation: Performed periodic reconciliations and verified financial documentation to maintain the integrity of
the general ledger and support month-end closing processes.