Hamza Palala, IT Audit Manager

Hamza Palala

IT Audit Manager

Betur Inc.

Lieu
Philippines - Manille
Éducation
Baccalauréat, BS Accountancy
Expérience
14 years, 0 Mois

Partager Mon CV

Empêcher usager


Expériences professionnelles

Total des années d'expérience :14 years, 0 Mois

IT Audit Manager à Betur Inc.
  • Philippines - Manille
  • Je travaille ici depuis mai 2020

Does the following:
* Prepares the risk-based IT Audit Plan and budgeted manpower and trainings
* Audits the company's IT general controls (IT governance, SDLC, BCP, Operating Systems and Databases)
* Audits the company's core systems for applicable application controls
* Conducts special engagements as assigned
* Prepares the necessary reports after the engagement is finished.
* Monitors issues until they are resolved

Achievements:
Established the IT audit department and IT audit manual according to regulatory requirements

IT Audit Manager à TrueMoney Philippines Inc.
  • Philippines
  • décembre 2019 à mai 2020

1. Create an IT audit manual
2. Assist in developing an internal audit plan based on the IT audit universe using a risk-based methodology,
including input of senior management and the Board.
3. Prepare and issue a written report following the conclusion of each IT engagement and submit to the Audit Head for review and approval.

Sr. IT Internal Auditor à Awqaf Sulaiman Al-Rajhi Holding Co.
  • Arabie Saoudite - Riyad
  • avril 2018 à novembre 2019

• Reviews the IT General Controls and IT application controls of Awqaf Holding and the related subsidiaries (Agriculture, IT consultancy, Manufacturing).
• Prepares related review reports and presents to management for discussion.
• Assists IT audit team in data analysis and IT audit manager from time to time.

IT Audit Officer à Bank of Makati (A Savings Bank) Inc.
  • Philippines
  • octobre 2016 à avril 2018

• Supervises staffs in performing post-implementation, pre-implementation, and IT General control reviews.
• Assists in the preparation of the IT audit plan.
• Assists the IT Audit Department Head and Chief Audit Executive.
• Prepares detailed IT audit report for auditee and Executive Summary for Senior Management
• Presents audit report to the Audit and Compliance Committee.

IT Auditor à Zamil Industrial Investment Company
  • Arabie Saoudite - Dammam
  • août 2014 à août 2016

• Performs IT audits for corporate internal audit department either solo or with financial auditors;
• Performs some data analysis using ACL
• Prepares IT audit plan and assists the general auditor.

IS Audit Team Member/Junior Assistant Manager à Security Bank Corporation
  • Philippines
  • octobre 2012 à juillet 2014

• Performs Pre-implementation review of new projects about to be deployed
• Performs application controls review of systems already deployed
• Prepares internal audit report for review of IT Audit Team Leader and IT Audit Department Head

ITRA Associate à Ernst and Young Philippines - SGV & Co.
  • Philippines
  • juin 2010 à août 2012

• Performs business process reviews on engagements to support financial statement audits for companies in diverse industries, focusing on risks assessment and controls evaluation over Enterprise Resource Planning (ERP) application systems such SAP R/3 and SAP Business One;
• Performs IT general control reviews including detailed security review focusing on appropriateness of user access rights at the operating, database and application systems level;
• Performs data analysis (data migration review, inventory recalculation, etc.) including use of computer assisted audit techniques (CAATs) and general audit purpose software such as Audit Command Language (ACL).
• Participates in other company activities under the supervision of more experienced staff members and prepares himself/herself for more responsibilities in the Firm.

Functional Consultant à FastTrack Solutions, Inc.
  • Philippines
  • février 2010 à avril 2010

• Understands the business requirements of the client and maps them to SAP Business One.
• Documents business requirements, prepare functional specifications, technical specifications, configure and perform unit tests.
• Assists the end-users in the UAT phase.

Éducation

Baccalauréat, BS Accountancy
  • à Mindanao State University
  • avril 2009

I was an academic scholar from year 1 in college until graduation. I was also a 3rd placer in our Punongbayan and Araullo Quiz bee competition (A competition based on our know how in Auditing Theories and Auditing Problems and Financial Accounting). And was also a consistent Top 100 in our pre-board exams during our review. I have garnered an average of 85% during our Actual CPA Board Exam.

Specialties & Skills

ISO 27001
Information Security
IT Audit
MS Office 2007
MS Office 2000
Typing 70 WPM
IT audit
ISO 27001

Langues

Anglais
Expert
Filipino
Expert
Arabe
Débutant

Adhésions

National Institute of Accounting Technicians
  • Member
  • March 2010
Philippine Institute of Certified Public Accountants
  • Member
  • November 2009
Junior Philippine Institute of Accountants
  • Member
  • June 2004
ISACA
  • Member
  • April 2015

Formation et Diplômes

ISO/IEC 27001 Lead Auditor (Formation)
Institut de formation:
PECB
Date de la formation:
March 2017
Durée:
31 heures
Certified Information Systems Auditor (CISA) (Certificat)
Date de la formation:
April 2016
Valide jusqu'à:
December 2019
PECB Certified ISO/IEC 27001 Lead Auditor (Certificat)
Date de la formation:
May 2017
Valide jusqu'à:
May 2020
Fundamentals of IT Auditing (Formation)
Institut de formation:
ISACA
Date de la formation:
April 2014
Durée:
24 heures
Basic and Advanced Excel Training (Formation)
Institut de formation:
Security Bank Corporation
Date de la formation:
November 2013
Durée:
8 heures
ITRA Bootcamp Training (Formation)
Institut de formation:
Ernst and Young - SGV & Co.
Date de la formation:
July 2010
Durée:
80 heures
SAP Business One Basic Training Course (Formation)
Institut de formation:
FastTrack Solutions, Inc.
Date de la formation:
March 2010
Durée:
40 heures
PHL ERP Foundation Learning: SAP IT General Controls (Formation)
Institut de formation:
Ernst and Young - SGV & Co.
Date de la formation:
May 2012
Durée:
8 heures
PHL ITRA Technical Training (For Experienced Staff) (Formation)
Institut de formation:
Ernst and Young - SGV & Co.
Date de la formation:
April 2012
Durée:
8 heures
PHL Soft Skills: Report Writing (Formation)
Institut de formation:
Ernst and Young - SGV & Co.
Date de la formation:
May 2012
Durée:
8 heures
PHL ERP Foundation Learning: Oracle IT General Controls (Formation)
Institut de formation:
Ernst and Young - SGV & Co.
Date de la formation:
May 2012
Durée:
8 heures