Kabeer Khan

Quality Assurance (QA) Lead Feb. 2019- July 2021
Reporting to the Group Chief Internal Auditor (CIA), my achievements and key areas of responsibilities included:
• Established QA Unit for implementation of IIA standards. This included performing gap analysis with IIA standards, developing the QAIP, QA criteria, checklists for QA reviews, training the GIA staff etc. which resulted in significant cost savings for the Bank.
• Development of risk based annual and three years’ audit plan including resource planning and engagement timelines for Group Head and Board of Directors’ approval.
• Perform first level QA reviews/ ongoing assessments for all audits performed by GIA to ensure that the audits are conducted to professional and IIA standards.
• Conduct periodic self- assessment of GIA in line with IIA Standards.
• Preparation of the meeting dossiers for the Board Audit Committee meetings.
• Actively conduct coaching and training sessions to guide auditors on areas such as performing risk assessments, developing RCMs/ audit work programs to address the major risks of auditable entities.
• Provide guidance to team leads for preparation of individual audit scopes for CIA approval, planning and pre- audit work for individual assignments.
• Maintain an ongoing view of the control environment through monitoring of post- audit follow- up of reported issues and validation of remediation actions reviewed by the team leads for closure.
• Continuously work on developing and improving GIA methodologies and raising fraud risk awareness among auditors to enhance audit efficiency and effectiveness.


Audit Team Lead Mar. 2018- Feb. 2019
• Preparation of audit notification and terms of reference (TORs) for assigned engagements.
• Engagement planning including risk assessments through meetings, review of policies and procedures, research and cumulative audit knowledge and experience.
• Preparation of RCM/audit programs/checklists for achievement of engagement objectives.
• Controls’ testing to assess the design and operational effectiveness and overall efficiency of controls.
• Conduct engagements in a constructive manner fostering cooperative relationships with stakeholders.
• Preparation of audit reports for Group Head review and submission to the Board Audit Committee.
• Conduct follow- up of outstanding audit issues for effective and timely implementation of audit recommendations by auditees.
• Undertake ad hoc assignments/ investigations requested by the Board Audit Committee and Senior Management.

• Participation in audit planning stage.
• Defining the internal audit scope in coordination with the Senior Manager/ Director.
• Conducting risk assessments and analysis of design and effectiveness of various internal controls implemented by the entity through client meetings, review of policies and procedures, research and analysis and cumulative audit knowledge and experience.
• Leading engagement teams through the planning, execution and completion stages of engagements.
• Review audit working papers to ensure clarity and structure of documentation.
• Preparation of internal audit reports after discussion with management on observations noted during the course of the audit.

Major Audit Responsibilities:
• Assist the Audit Manager in engagement planning including risk and materiality assessments, establishment of scope and objectives of individual assignments and preparation of audit programs.
• Obtain an understanding of auditable entities through review of processes, procedures, controls and risk assessment for identification of financial, operational and reputational risks for centralized functions/ departments as well as general banking departments in branches and devising various testing strategies for achievement of engagement objectives.
• Test controls to ensure they are appropriately designed, implemented and operating effectively.
• Conduct initial, interim and exit meetings with clients (and Internal Audit management as and when needed) to communicate engagement requirements, significant issues encountered and progress of the engagement.
• Conduct engagements in a constructive manner fostering cooperative relationships with clients.
• Preparation of draft audit reports for discussion and subsequently final audit reports for Managerial and Head of Audit review, submission to the client and Board Audit Committee.

Other Responsibilities/ Assignments:
• Conduct Fraud Investigations and Fact Finding assignments. This includes but not limited to gathering data and evidence associated with fraud allegations and/or unethical behavior to confirm/ refute the occurrence of fraud, conducting interviews, determining the extent of and the control lapses/ breaches that led to fraud, identifying the perpetrator(s) and reporting the findings to senior management along with necessary recommendations.
• Conduct pre and post implementation reviews for new functionalities/ enhancements in the Core Banking Application both as team lead and independently.
• Review and approval of monthly claims of T.T. charges on home remittances being submitted to the Central Bank under PRI (Pakistan Remittance Initiative).
• Annual review of ICFR (Internal Controls over Financial Reporting) as a team member.
• Participate in meetings with stake holders on behalf of Internal Audit during various ad hoc/ cross functional assignments.
• Conducted an Internal Assessment of the Top 100 depositors of each branch of the bank and as required, prepared a report for the Central Bank on the status and adoption of additional measures by the bank to strengthen the AML regime.
• Establishment of Corporate Hubs in Karachi and Lahore respectively as a team member to ensure the integrity and validity of the data being migrated which entailed the phased migration of corporate accounts of multiple branches to a single corporate hub/ branch.
• Pre-implementation audit of ERP Inventory Application where overall functionality of the application from both business and IT general controls perspective was assessed.
• Participated as an independent observer in a number of Crisis Simulation Exercises and reported the weaknesses observed in the process and recommendations for improvement of the Business Continuity/ Disaster Recovery Plan.