Arshaq Hassan Syed, Integration Project - Quality Assurance Head

Arshaq Hassan Syed

Integration Project - Quality Assurance Head

The Saudi British Bank - Sabb

Location
Saudi Arabia - Riyadh
Education
Diploma, CISA (Certified Information System Auditor)
Experience
17 years, 1 Months

Share My Profile

Block User


Work Experience

Total years of experience :17 years, 1 Months

Integration Project - Quality Assurance Head at The Saudi British Bank - Sabb
  • Saudi Arabia - Riyadh
  • My current job since August 2020

Primary Responsibilities
- Reporting key risks via risk assessments to Board Integration Committee (BIC)
- Providing independent assessment on Quality Assurance of the project
- Assessing and reporting of key risks associated with the project to stake-holders including Chief Operating Officer (COO), Chief Risk Officer (CRO) and Chief Integration Officer (CIO)

Achievements
- Weekly reporting to Chief Risk Officer (CRO) and Chief Integration Officer (CIO) about the key risks and challenges in delivery and completion of key project milestones
- Assessing the effectiveness of control environment around project to ensure that key risk that might jeopardize the project delivery are addressed effectively
- Worked with external and internal project resources in finalization and independent assessment of Quality - Assurance Framework (which includes around 100 questions around operations, reporting and technology), to ensure the bank’s readiness for the migration of all customers from Alawwal to SABB platform
- Monthly reporting to Board Integration Committee (BIC) for key risk areas, areas of improvements and Quality Assurance framework update
- Providing recommendations and suggesting solutions on mitigating risks via timely implementation of controls

Senior IT Auditor at National Commercial Bank - Alahli Ncb
  • Saudi Arabia - Jeddah
  • August 2014 to August 2020

Primary Responsibilities
- Performing risk based Information System Audits and Reviews based on the annual audit plan
- Analyzing and providing independent assurance on effectiveness of Information Security controls implemented by the Bank
- Periodic and continuous reporting of risks and issues, faced by IT and Information Security departments of the bank

Achievements
- Led team for Integrated audit (IT and Business) of Payment and Sanction Screening department along with various integrated audits (operations and IT) for Electronic and telephone banking, Cyber Security, Enterprise Project Management (EPD) etc. by utilizing internal and external resources
- Contributed in formalization and finalization of Audit Universe along with Annual Audit Plan for the Internal Audit Department of the bank
- Audited all critical IT functions including IT Operations, Core Banking Applications, Databases and Data Centre Physical Security.
- Actively validating and reviewing the validations performed by team members, for issues identified by internally by Internal Audit and externally by the regulator (Saudi Arabian Monetary Agency (SAMA)) and external audit
- Assessed SAMA Cyber Security Framework (SAMA CSF) to provide assurance to regulator about the effectiveness of cyber security controls implementation by the bank
- Continuously evaluated and provided feedback on the readiness of Business Continuity (BC) and Disaster Recovery (DR) planning and testing, for the bank
- Regular assessment reports provided to key stake-holders including Head of IT, Head of Project and Head of Information Security on the completeness of IT and Information Security Policies and Procedures in line with standards like COBIT, ISO 27001 & 27002
Usage and optimization of several CAATT (Computer Aided Audit Tools and Techniques) including Morgan Key Insight (MKI), Audit Command Language (ACL), MS Access for databases etc.

IT Application and Support Manager at United Bank Limited - Bahrain
  • Bahrain - Manama
  • September 2013 to June 2014

Primary Responsibilities
- Management of complete IT department, including budgeting, resourcing and day to day operations
Project management for system and infrastructure upgrades
- Management and administration of the teams responsible for infrastructure and end user computing support
- Implementation of compliance of IT controls in line with Central Bank regulations and best practices

Achievements
- Migration of servers from physical to virtual environment (VM ware implementation project)
Upgrade of ATM and online banking switch from ‘Phoenix’ to ‘Randevu’
- Implementation of key security controls including dual control for administrative passwords and upgrade of HSM for ATM PINS
- Continuous improvement of IT infrastructure, in terms of performance and control environment
- Overseeing the administration of the all banking applications
- Timely coordination with business units for gathering procurement and project requirements
- Coordination with Central Bank of Bahrain for compliance related issues

System Analyst and Administration at Kooheji Global Group Holding W.L.L.
  • Bahrain - Manama
  • November 2011 to September 2013

Primary Responsibilities
- Audit and analysis of ERP (Enterprise Resource Planning) systems
- New system requirement gathering and evaluation

Achievements
- Assessing the IT requirements, for Real Estate Business projects, like Bahrain Bay, Kooheji Hotel and other Building projects
- Supporting the IT services for ensuring availability, integrity and confidentiality of information systems
- Supporting audit function by carrying out IS audit and compliance exercise, as and when required
Coordinating with vendor for changes in Enterprise Resource Planning (ERP) system
- Evaluating and requirement gathering for alternative IT Solutions, for addressing business requirements and strengthened control environment
- Formalizing IT Security Policy, in-line with ISO-27001 Standard

Sr. IT Auditor at United Bank Limited
  • Pakistan - Karachi
  • April 2008 to November 2011

Primary Responsibilities
- Performing Information Systems Audits and Reviews
- Analyzing IT control environment of the Bank
- Analysis of policies, procedures and standards

Achievements
- Contributed in integrated audits (business, operations and IT) for Finance, Consumer Banking, Branchless Banking and Treasury Banking departments
- Core IT audits include IT Operations (Network and Infrastructure), Central Database (CDB), System Services Division (SSD) and IT Security Department.
- Assessing and providing independent input on various Policies, Procedures and product papers specific to technology and online processing (branchless banking and internet banking)
- Evaluating Business Continuity and Disaster Recovery Planning arrangements in the organization
Completed the technology stream audit for UBL-Bahrain (international subsidiary of bank)
- Usage of several CAATT (Computer Aided Audit Tools & Techniques) including dumpsec for networks, MS Access for databases etc.
- Development and maintenance of internal audit web site

System Specialist at Standard Chartered - Pakistan
  • Pakistan - Karachi
  • April 2007 to May 2008

Primary Responsibilities
- Providing 1st level IT Support to Phone Banking Department
- Coordinating for 2nd level support and projects for Distributed Channels in the bank

Achievements
- Part of the project team responsible for Migration of Host ‘EQUATION’ to Host ‘Electronic Branch Banking System (EBBS)’.
- Part of project team responsible for migration of core switch ‘SPARROW’ to ‘PHOENIX’
- Providing assistance, 24 by 7 for the optimum service of phone banking technology.
- Responsible for the administration of the call center technologies including Genesys CTI (Computer telephony Integration), Avaya-ACD (Automated Call Distribution) and IVR (Interactive Voice Response)
Worked as a part of Falcon integration team as a project coordinator.
- Attained the knowledge of administration of core Phone-banking systems and applications and their interaction with Banking Host systems.
- Timely coordination with Host teams, TPS, NCR, Unified Communications, Avanza solutions, Americom Technologies and other vendors carried out as and when required.
- Phone Banking Systems User instance and Rights assignments.

Education

Diploma, CISA (Certified Information System Auditor)
  • at ISACA
  • June 2009
Bachelor's degree,
  • at NED University of Engineering and Technology
  • May 2007

Engineering in computer information technology 4 years Degree Program

Specialties & Skills

Auditing
Information Security Policy
IT Audit & Security CISA & CISM by ISACA
Application & Network Support and Deployment
Information System Audit

Languages

Urdu
Intermediate
English
Beginner

Memberships

Institute of Internal Auditing (IIA)
  • Member
  • August 2015
Information Systems Audit and Control Association (ISACA)
  • Member
  • July 2014

Training and Certifications

CISA (Cirtified Information System Audit) (Certificate)
Date Attended:
January 2008
Valid Until:
July 2008