Hamza Palala, IT Audit Manager

Hamza Palala

IT Audit Manager

Betur Inc.

Location
Philippines - Manila
Education
Bachelor's degree, BS Accountancy
Experience
14 years, 0 Months

Share My Profile

Block User


Work Experience

Total years of experience :14 years, 0 Months

IT Audit Manager at Betur Inc.
  • Philippines - Manila
  • My current job since May 2020

Does the following:
* Prepares the risk-based IT Audit Plan and budgeted manpower and trainings
* Audits the company's IT general controls (IT governance, SDLC, BCP, Operating Systems and Databases)
* Audits the company's core systems for applicable application controls
* Conducts special engagements as assigned
* Prepares the necessary reports after the engagement is finished.
* Monitors issues until they are resolved

Achievements:
Established the IT audit department and IT audit manual according to regulatory requirements

IT Audit Manager at TrueMoney Philippines Inc.
  • Philippines
  • December 2019 to May 2020

1. Create an IT audit manual
2. Assist in developing an internal audit plan based on the IT audit universe using a risk-based methodology,
including input of senior management and the Board.
3. Prepare and issue a written report following the conclusion of each IT engagement and submit to the Audit Head for review and approval.

Sr. IT Internal Auditor at Awqaf Sulaiman Al-Rajhi Holding Co.
  • Saudi Arabia - Riyadh
  • April 2018 to November 2019

• Reviews the IT General Controls and IT application controls of Awqaf Holding and the related subsidiaries (Agriculture, IT consultancy, Manufacturing).
• Prepares related review reports and presents to management for discussion.
• Assists IT audit team in data analysis and IT audit manager from time to time.

IT Audit Officer at Bank of Makati (A Savings Bank) Inc.
  • Philippines
  • October 2016 to April 2018

• Supervises staffs in performing post-implementation, pre-implementation, and IT General control reviews.
• Assists in the preparation of the IT audit plan.
• Assists the IT Audit Department Head and Chief Audit Executive.
• Prepares detailed IT audit report for auditee and Executive Summary for Senior Management
• Presents audit report to the Audit and Compliance Committee.

IT Auditor at Zamil Industrial Investment Company
  • Saudi Arabia - Dammam
  • August 2014 to August 2016

• Performs IT audits for corporate internal audit department either solo or with financial auditors;
• Performs some data analysis using ACL
• Prepares IT audit plan and assists the general auditor.

IS Audit Team Member/Junior Assistant Manager at Security Bank Corporation
  • Philippines
  • October 2012 to July 2014

• Performs Pre-implementation review of new projects about to be deployed
• Performs application controls review of systems already deployed
• Prepares internal audit report for review of IT Audit Team Leader and IT Audit Department Head

ITRA Associate at Ernst and Young Philippines - SGV & Co.
  • Philippines
  • June 2010 to August 2012

• Performs business process reviews on engagements to support financial statement audits for companies in diverse industries, focusing on risks assessment and controls evaluation over Enterprise Resource Planning (ERP) application systems such SAP R/3 and SAP Business One;
• Performs IT general control reviews including detailed security review focusing on appropriateness of user access rights at the operating, database and application systems level;
• Performs data analysis (data migration review, inventory recalculation, etc.) including use of computer assisted audit techniques (CAATs) and general audit purpose software such as Audit Command Language (ACL).
• Participates in other company activities under the supervision of more experienced staff members and prepares himself/herself for more responsibilities in the Firm.

Functional Consultant at FastTrack Solutions, Inc.
  • Philippines
  • February 2010 to April 2010

• Understands the business requirements of the client and maps them to SAP Business One.
• Documents business requirements, prepare functional specifications, technical specifications, configure and perform unit tests.
• Assists the end-users in the UAT phase.

Education

Bachelor's degree, BS Accountancy
  • at Mindanao State University
  • April 2009

I was an academic scholar from year 1 in college until graduation. I was also a 3rd placer in our Punongbayan and Araullo Quiz bee competition (A competition based on our know how in Auditing Theories and Auditing Problems and Financial Accounting). And was also a consistent Top 100 in our pre-board exams during our review. I have garnered an average of 85% during our Actual CPA Board Exam.

Specialties & Skills

ISO 27001
Information Security
IT Audit
MS Office 2007
MS Office 2000
Typing 70 WPM
IT audit
ISO 27001

Languages

English
Expert
Filipino
Expert
Arabic
Beginner

Memberships

National Institute of Accounting Technicians
  • Member
  • March 2010
Philippine Institute of Certified Public Accountants
  • Member
  • November 2009
Junior Philippine Institute of Accountants
  • Member
  • June 2004
ISACA
  • Member
  • April 2015

Training and Certifications

ISO/IEC 27001 Lead Auditor (Training)
Training Institute:
PECB
Date Attended:
March 2017
Duration:
31 hours
Certified Information Systems Auditor (CISA) (Certificate)
Date Attended:
April 2016
Valid Until:
December 2019
PECB Certified ISO/IEC 27001 Lead Auditor (Certificate)
Date Attended:
May 2017
Valid Until:
May 2020
Fundamentals of IT Auditing (Training)
Training Institute:
ISACA
Date Attended:
April 2014
Duration:
24 hours
Basic and Advanced Excel Training (Training)
Training Institute:
Security Bank Corporation
Date Attended:
November 2013
Duration:
8 hours
ITRA Bootcamp Training (Training)
Training Institute:
Ernst and Young - SGV & Co.
Date Attended:
July 2010
Duration:
80 hours
SAP Business One Basic Training Course (Training)
Training Institute:
FastTrack Solutions, Inc.
Date Attended:
March 2010
Duration:
40 hours
PHL ERP Foundation Learning: SAP IT General Controls (Training)
Training Institute:
Ernst and Young - SGV & Co.
Date Attended:
May 2012
Duration:
8 hours
PHL ITRA Technical Training (For Experienced Staff) (Training)
Training Institute:
Ernst and Young - SGV & Co.
Date Attended:
April 2012
Duration:
8 hours
PHL Soft Skills: Report Writing (Training)
Training Institute:
Ernst and Young - SGV & Co.
Date Attended:
May 2012
Duration:
8 hours
PHL ERP Foundation Learning: Oracle IT General Controls (Training)
Training Institute:
Ernst and Young - SGV & Co.
Date Attended:
May 2012
Duration:
8 hours