Information Systems Auditor
Al Ahli Bank of Kuwait
مجموع سنوات الخبرة :16 years, 4 أشهر
Responsible for planning, executing and reporting on IT audits.
Conducts risk assessments of Systems and Processes and identifies controls in place to mitigate
identified risks.
Develop audit plan including Terms of Reference and Audit Program for the assignments.
Performs audit procedures to verify that controls are operating through testing and interviewing
techniques.
Assessing controls surrounding banking applications such as Core banking, Card management including PCI pin security requirements Self Audit, Treasury operations, Loan Management, Swift, Trade finance, and AML systems.
Assessing controls surrounding critical processes such as Information Security, Systems Development and Change Management, IT Service Management, Data Center Operations and IT Vendor Management.
Assessing controls surrounding UNIX and Windows operating systems.
Assessing controls surrounding Oracle and SQL databases.
Vulnerability Scanning and Compliance check using Nessus Tool.
Analyses and concludes on effectiveness and efficiency of control environment.
Identifies control gaps and opportunities for improvement.
Document the results of audit work in accordance with audit department and the Institute of Internal Auditors (IIA) standards.
Conduct/Assist in investigations/special review in line with the Bank’s and internal audit policy and processes.
Identify system based controls, suggest and review new control activities to be included in Continuous Auditing Procedures.
Prepare continuous audit operational plan for obtaining approval from Audit Committee.
Implement and monitor audit plan and seek approval for any deviation, if deemed necessary.
Review and approve Continuous Auditing Procedures and scope of each assignment.
Designing / reviewing data formats for extraction of data from system and analysis of data using
continuous auditing procedures / tools.
Liaise with Regulatory inspectors/external auditors.
Follow up with management on audit/review, investigations, Regulatory and external audit findings.
Prioritizes and delegates tasks as appropriate to other auditors, supervises their daily performance
and coordinates resources and periodically reports the audit progress to Head of Banking Operations
Audit and Chief Internal Auditor.
Manages the efficiency and deadlines of the assignments while maintaining departmental quality
assurance standards.
Part of the team for assessing the governance & processes of the Core Banking Project.
Evaluating and validating IT general controls and application controls to address relevant risks to
financial statements or business operations and identifying control weaknesses that represent areas
of risk in an IT environment as it aligns with
an organization's business objectives.
Assessing controls surrounding banking applications, generic applications, Operating systems and
Databases.
Assessing controls surrounding key IT processes.
Testing of segregation of duties to assist the client in improving their user management,
authentication management, authorization management, access management and provisioning
capabilities around Core banking system.
Prioritizes and delegates tasks as appropriate to other auditors, supervises their daily performance
and coordinates resources.
Building KRIs (Key Risk Indicators) for IT Continuous Auditing.
- Implementing ISO 27001 :2013 for one the largest Logistics company in Kuwait
- Conducting IT Integration Audit supporting the Financial Audit.
- Handling IT and Information Security Projects
1. IT Infrastructure Transformation Project
2. Implemented ISO 20000 for one of the largest bank in Kuwait
3. Implemented Service Level Management and Configuration Management using Cobit 5 Framework for one of the largest bank in kuwait
3. Implemented SIEM Solution for telecom company in kuwait
4.IT Audit and Information System Audits
5.Vulnerability Assessment and Penetration Testing Projects
6.Preparing feasibility studies, requirement analysis, procurement, development, implementation and maintenance plans for organization-wide Information Systems and services
=====================================================
Complete details of my current responsibilities are mentioned in My Resume (Attached)
-Managed a team of 11 members for network operation center, system administration and IT help desk services;
-Project Management for implementation of various products and services;
-Managed Incident handling change management process;
-Handled projects such as Installation and management of network and security products;
-Managed Log management and incident management process of security products such as Intrusion Prevention / Intrusion Detection systems and firewalls;
=====================================================
Complete details of my current responsibilities are mentioned in My Resume (Attached)
Bachelor of Engineering (Electronics & Communication) Sathayabama Institute of Science & Technology