Consultant - IT Governance, Audit & Compliance
Ooredoo - Oman
Total years of experience :16 years, 8 Months
• Project Governance, Delivery Methodology, Estimation, Budgeting and Costing
• Development and Review of IT Governance Framework and to ensure Dependent IT areas are Effectively Managed through ITG framework
• Governing Architectural Designs, ADM Delivery & Operation SLA and apply the service credit when it is needed
• Managing all non-production IT environments to be in-sync with production environment, and following up with all Requirements such as Sync, Approvals form ISM, etc
• Ensure IT Deliverables are compliant with Info Sec Polices and TRA Oman
• Forging and maintaining Collaborative Relationships within IT Sections. Actively Monitoring External Trends in the areas of IT, Remote Access features, Authentication Mechanisms, Threat/Risk evaluations and Vulnerability Evaluation while also acquiring Knowledge on these topics
• Strong Follow up with Management Action Plans of all IT stakeholders and Ensuring closures of Internal/External Audit Findings as per their timelines
• Coordinating and Facilitating PWC for Yearly External Audits 2019 and 2020
• Designated Risk Champion and Point of Contact in IT. Managing Risks and their Calculations, Reporting & Maintenance of IT Risk Register
• Designated Business Continuity Champion in IT. Development & Compliance of IT Business Continuity & Disaster Recovery Plans
• Coordination of Weekly TMC, Monthly Operational Review (IT OpRev) Meetings
• Coordination of Monthly (Jour Fixe) CAPEX/OPEX/AOP Review Meeting with Ooredoo Oman & Ooredoo Group Qatar
• Coordinating with other relevant Stakeholders to Implement/Improve IT Governance Process
• Coordination of IT related Actions with Procurement and Legal teams
• Follow up and Resolve any Vendor Contractual/Processes & Payment Conflicts
• Providing Ad-hoc/Weekly/Monthly and Quarterly Reports to the Higher Management
• Supporting Technical Project Managers (TPMs) in Executing against Delivery Contracts and Processes
• Supporting teams in technical discussion of Strategic Projects
• Assisting IT Director in Various Ad-hoc based actions
Quarters Office, Islamabad, Pakistan
• Align IT Services Management (ITSM) with the Dynamic needs of the
Business
• Development of IT Governance Framework, IT Steering Committee TORs &
Compliance
• Compliance of Systems & Network Operations, Apps & DBs, Data Centers,
Programs based upon assessed Risks, Internal Controls,
Policies & Procedures
• Managing Resources to ensure Audit Plan is executed Effectively
• Compliance Review of General IT Controls, Risk Assessment, Application
Controls & CGI's
• Supporting Formalization, Review & Fine-Tune ISO/ITIL based PIBs &
Policies
• Supporting in IT QA Function, formalization of Test Cases and Conducting
UATs
• Supporting in IS Internal Audits for the Compliance of ISO 9001:2015
• Liaising with Senior Management personnel across the company
Key Engagements include Audits of:
• Billing & Customer Care System (B&CC)
• SAP FI/CO, Basis Modules
• CRM System
• PCRM
• AAA-EVO, AAA-DSL
• IT Governance
• IT Data Center
• Management Communication Systems
• Domain Controller
• Information Security (SOC)
• PTCL Smart Shops, Contact Centers and Training & Development
Additionally, to carry out periodic internal investigations from time to time.
Assistant Manager IT Governance, Standards, Audits & Compliance
• IT Audit Coordination & Audit Findings Management to their closures
• Ensure proper Regular Reporting to IT Management on Audit Status on a
timely basis
• Ensure effective IT Risk Management and monitoring of IT Risk Trends
• Establish, Review and Recommend IT Risk Management Policies
• Worked and Liaise with Internal Controls, Audit and Compliance Departments
• Annual Audit Supervisor from PTCL side, for PWC Annual Audits (2013- to
-2015)
• Ensure Proper Communication of IT Risk Management and Improvement
Progress
• Support Manager for Information Security and Governance with all related
functions
• Perform regular IT Governance Maturity Assessments for the respective IT
Functional Areas
• Coordinated with Manager ITG for Evaluating Compliance with Policies &
Procedures
Worked on following projects:
1 - PTCL IT Strategic Plans (One Year & 5 Year Plan)
2 - PTCL IT Risk Management with Etisalat ERMC (ISO 27002)
3 - ISO 9001:2008 and ISO 9001:2015 IT Internal Audits
4 - Coordinated Annual Audit from IT Domains
5 - PTCL Project One - Online Customer Experience (Website and Mobile
Apps)
6 - PTCL E-payment - Online Revenue Collection System (Integrated with
Banks) Dev. & Support
7 - PTCL E-Doc - File Management System
8 - Etisalat - Control Self Assessment (CSA) for the Ccompliance of COBIT
9 - PTCL Infoship SharePoint Portal Administration
10 - Conducted IT Customer Satisfaction Surveys, Calculated Results and
submitted to Management
Worked with Etisalat PTCL Headquarters Office, G-8/4 Islamabad, with following roles & responsibilities:
• Worked with PTCL‘s IS Development Team for the development of In-House
apps in J2EE.
• Extensive experienced in design and development of multi-tier applications.
• Using Java, J2EE, Struts, Spring, Hibernate, iBATIS, HTML, JavaScript, Tag
Libs
• Experience with 2-tier, 3-tier and N-tier architecture
• Worked on different App & Web Servers like IBM Web Sphere, Web Logic,
Tomcat & JBoss
• Exp in Object Oriented Analysis & Design techniques using UML in Rational
Rose & MS Visio
• Participated in requirements gathering, analysis & design of systems
• Participated in testing and quality assurance of systems by preparing test
cases scenarios
• Prepared technical documents & users guides for different systems
• Conducting trainings for end users of newly developed systems
Worked on PTCL Transfer of Technology Project (B&CC- Customer Care
System).
• Worked on the development of new functionalities in CCS against various
CRs of PTCL.
• Experienced various methodologies like Waterfall and Agile
• Developed use cases, workflow, screen mock-ups, and conversion
requirements.
• Prepared test cases and participated in testing activities.
• Participated in patching activities on live systems.
(1 year 4 months)
Software Technology Park-1
• Worked on web based portals eHRMS, TMS (Time Management System) &
eWorks,
• Portals developed by using J2EE i.e. Spring, Hibernate, GWT, Jasper Reports
& Oracle DB.
• Developed data models using Hibernate POJO's & configuring Hibernate
persistence layer.
• Experienced Hibernate for mapping Java classes with database.
• Extensive Experienced in using MVC (Model View Controller) architecture for
developing applications using JSP, Java Beans and Servlets.
• Worked on analysis & designs of portals, tested and deployed remotely on
live servers.
• Worked as support engineer for portals, implemented CRs and deployed
patches remotely.