Hesham Karim

providing audit and consultancy to institutions in the financial services industry.

Managed a portfolio of client engagements and risk professionals in the delivery of information technology, governance, risk and control engagements. Refer to the attached CV for achievements.

Led the IT audit department activities and technology aspects of specialized assignments and forensic investigations requested by the board and regulators. Planned and delivered the annual IT audit program of work to identify and address risks, fulfil regulatory compliance obligations and propel the bank towards enhanced operational efficiency and resilience.

Managed a portfolio of IT risk and control assignments and cyber security reviews for Deloitte clients in Saudi Arabia. Performed specialized advisory reviews for strategic clients. Refer to attached CV for a list of achievements.

Managed a portfolio of IT internal audit and risk consulting projects and supported the GRC automation service line by forming alliances with software vendors.

Seconded to BHP Billiton as part of an outsourcing agreement to assist with the delivery of the annual IT Internal Audit program of work.

Managed a portfolio of audit and advisory clients mainly across the government, oil & gas sectors. Refer to attached CV for achievements.

I joined the Protiviti Middle East member firm in a dynamic and challenging role which required me to expand my knowledge beyond financial audit support work, execute a wide range of IT risk and control engagements, improve service quality and build relationships to support the growth of technology risk service line in the UAE. Refer to attached CV for achievements.

Undertook Financial Audit Information Technology (FAIT) and Internal control reviews using a risk-based approach. Demonstrated good communication and interpersonal skills to promote the client-auditor relationship. Performed assessment and management of business risk and made recommendations on improving IT general and application-level controls.