Mohamed Shabir, MBA, CISA, PMP, BS7799 LA, Senior Manager Information Technology Operations

Mohamed Shabir, MBA, CISA, PMP, BS7799 LA

Senior Manager Information Technology Operations

NRICH Group, Canada

Location
Canada
Education
Diploma, MBA, PMP, CISA, CRISC, ISO27001LA, PCI-QSA
Experience
27 years, 2 Months

Share My Profile

Block User


Work Experience

Total years of experience :27 years, 2 Months

Senior Manager Information Technology Operations at NRICH Group, Canada
  • Canada
  • My current job since February 2016

Roles & Responsibilities include but not limited to:
IT vision, assessment, strategy formulation, planning; IT value, priority setting; architecture; aligning IT with the CEO's agenda and enterprise architecture activities, Global Portfolio Management (Advisory role), Global IT Service Delivery & Standards, Global Information Security and ISMS Policy & Procedure, IS Pre-Audit & IT Risk Assessment on IT Applications, implementation of IT Risk Management Framework (IT RMF) and IS Delivery Planning:
• Planning activities for technology risk management & information security
• Cross Functional projects & modification/change control
• Contingency planning, tracking budget, risks and resources
• Risk assessments and mitigation strategies and monitoring effectiveness
• Managing business risk through technology control Assessment & Vendor Risk Assessment &
• Program & Projects Management and Third Party Risk Assessment
• Developing and maintaining strong relationships with business partners and internal/external team members
• Implementing security in rapid software development methodologies (like, Agile) and DevOps automation

Business Technology Risk Manager (CISO) at TD Bank Group
  • Canada
  • May 2012 to January 2016

As a Business Technology Risk Manager, my role is to assess the risk, analyze and mitigate the risk arising due to weakness or gap found in Process, procedure, people.
Operational Risk, Legal, Regulatory, Privacy and Information Security are some of the focus.
In addition, I liaise with Audit and Business if required with Technology team to provide security infrastructure services and solutions including anti-virus, vulnerability assessment, security event monitoring, privileged access management, systems compliance reporting, cryptographic key management, mainframe security access and data security services to TD Bank Group.

Director, IT at Seiko Denki Canada Ltd.
  • Canada
  • September 2010 to April 2012

Director IT, Seiko Denki Canada Ltd.
Toronto, ON, Sept 2010 till Present
Seiko Denki is true multinational Japanese based Electronic Wire Harness Manufacturing Company having plants spanning across Japan, Malaysia, Taiwan and China with its sales offices operating out of Singapore and India.
Roles & Responsibilities include but not limited to: Global Portfolio Management (Advocacy role), Global IT Service Delivery & Standards, Global Information Security and ISMS Policy & Procedure, IS Pre-Audit & Risk Assessment on IT Applications and IS Delivery Planning.

Head of IT (CIO) at United Arab Bank (UAB)
  • United Arab Emirates - Sharjah
  • July 2006 to February 2010

To envision, plan, develop, acquire, stabilize, and deploy the business application systems with the total involvement of management, business units and Techno-function departments (Project Management); and to ensure that Information and related Technology Systems performing in line with Business Strategy.

Roles and Responsibilities:
- Program Management: Being in-charge of PMO office, managed below listed projects with 7 Project Managers and we were compliant to SDLC standards.
- Data-Center Management: Both Production and DR Site were managed to align with business strategy
- Service Desk: Provided internal and external Customers support with ITIL standards
- Network & Systems Support: System Admin and Network managers were reporting to me and we maintained highest protection while keeping optimal performance.

Achievements: Projects Implemented
(a) BCP/DRP: Development of Disaster Recovery Plan and Site Setup
(b) Develop and Implement Information Security Policy & Procedure
(c) Implementation of new ATM apps with CreditCard (VISA & MasterCard) interface implementation
(d) EMV Compliance for CreditCard & Automated Teller Machine application
(e) SAN Project
(f) Fax Consolidation
(g) Core Banking System requirement collection to replace existing Apps
(h) SMS Banking
(i) Basel II Requirement Analysis
(j) TI Archiving (Misys)
(k) ICCS (Image Cheque Clearing system)
(l) Electronic Document Image / Identity and Access Management System
(m) Treasury system

Core Banking Application studied and evaluated are: Finacle, Flexcube, T24

Head of IT (CTO) at BankMuscat International
  • Bahrain - Manama
  • March 2005 to June 2006

Head of Information Technology (CIO),
BankMuscat International, Bahrain March ‘05 - June ‘06
I’ve managed IT department as part of its vision as envisage the IT function to be robust, reliable and be a significant contributor to the achievement of Bank's objectives and goals.

Achievements:
Trade Finance System - TI(Misys), eTrade(Misys), BCP/DRP, Network Security, Internet Banking, ATM application with Card Management, IVR Phone Banking, Call Center as part of key management initiatives.

Manager, Network and Delivery Channels (eChannels Manager) at Doha Bank, Doha, Qatar Sept 2002– March 2005
  • Qatar - Doha
  • September 2002 to March 2005

The leading private bank in Qatar, providing wide array of banking services with the largest network of branches, ATMs and POS. Market leader in retail banking and credit card business with operation in the MEA region, always in the forefront of introducing new technologies, first one to achieve BS7799/ISO17799 (ISO27001) information Security certificate in the region

Major Roles and responsibilities were as follows:
• To Manage Core Banking/ ATM Applications Systems
• To ensure the implementation of Standard Operating Procedure in Operation
• To Manage Systems Administrators and DBA resources effectively
• To Manage Helpdesk/ServiceDesk as per ITIL standards
• To Manage Network and Delivery Channels and minimize operational Risk
• To Provide 24/7 production Support
• To Manager Internal & External Audit
• To Assist IT Budgets/Purchase decision
• To Manage Vendors/Contracts
• To Manage Bank assurance/Islamic Banking window

Project Highlights - Doha Bank
The following projects were successfully managed from initiation to closeout to help the bank achieve IT Goals:
• Electronic Cheque Clearing System
• IS Governance Project
• Information Security management Systems (ISMS) implementation for bank-wide.
• BS-7799 Certification
• Implementation of CRSA
• Enterprise Architecture Planning (EAP) and Implementation with SAN, DR replication.
• ERP (Oracle 11i HRMS) Project
• BCP/Disaster Recovery Planning/Implementation. Identified business critical system and documented disaster recovery plan
• Off-country Cold Disaster Recovery Site
• Conducted Security awareness workshop Training for all Doha bank employees

ENIRONMENT: Software: HP-UX with MC Service Guard/ Oracle RAC (Real Application Cluster), Oracle 10g, Oracle10gApps Server, Sun Solaris, Windows 2000, PL/SQL, Pro*C, Shell Scripts, Oracle 7.x, 8.x, 8i, 9i, 9iAS, MS SQL Server 2000
Hardware: hp rp7420, hp BL20/BL40 hp DL380, Sun 280R

Senior Database Consultant – Professional Consulting Service at Intel Corp, USA
  • United States
  • August 2000 to September 2002

Database Engineering, Design, Architecture, Planning and Tuning, Managed Database Services, and Custom Application development with prime focus on Oracle and MS SQL Server Databases and MS development environments.

Projects Assignments:
Intel Corporation, Portland-USA - Database Engineering Support

Integra Telecom, Portland-USA - Managed Database Service

Egghead.com, Portland-USA - Database Re-engineering

Harsch Investment Properties, Portland-USA - Managed Database Support

Nissho Iwai American Corporation (NIAC), Portland-USA - Database Engineering

Doster.com, Portland-USA - MS SQL Server Database Support/tuning

ENIRONMENT: HP-UX, Sun Solaris, Windows NT/2000, PL/SQL, Pro*C, Shell Scripts, Oracle 7.x, 8.x, 8i, 9i, 9iAS, MS SQL Server 7.0, 2000, ModelMart, ERwin, Informatica PowerMart, SITE Scope, QUEST-spotlight

ERP Database Analyst/Architect, at Kodak Canada, Inc., Toronto, Canada
  • Canada
  • August 1998 to August 2000

Production Support and System Monitoring and maintaining organization-wide Oracle Database (UNIX/Windows NT) on HA Fail-over configuration include:

Projects:
1) Data Warehouse: Database Designing and Capacity Planning Project Management and 2) Supported SAP Interface and Administration & EDI interface module.

ENVIRONMENT: Oracle, UNIX, Windows NT, SAP, R/3 and SAP DBA

Product Consultant at Stirling Douglas Group (SDG),
  • Canada
  • August 1996 to August 1998

Stirling Douglas Group specializes in Data Warehouse, Retail Supply Chain Management, Material Management, and Automatic Replenishment Control Business.

Implementation Team Member for:
- Home Place Inc. Detroit, MI - USA
- OfficeMax Inc. Cleveland, Ohio - USA

Education

Diploma, MBA, PMP, CISA, CRISC, ISO27001LA, PCI-QSA
  • at PCI DSS
  • August 2016

Payment Credit Card Industry (PCI) Data Security Standard (DSS) Specialist and Qualified Security Assessor.

Master's degree, CRISC, CISA
  • at ISACA
  • March 2014

Certified in Risk and Information Systems Control, ISACA, USA

Diploma, PMP
  • at Project Management Institute, USA
  • October 2011

Certified Project Management Professional

Diploma, CISA
  • at ISACA, USA
  • September 2011

Certified Information Security Auditor

Diploma, BS7799 (ISO 27001)Lead Auditor
  • at BSI, UK
  • April 2003

Certified Information Security Lead Auditor (ISO27001)

Master's degree,
  • at MBA
  • April 2000

Specialties & Skills

Project Management
Information Security Management
IT Risk
Data Center
IT Risk and Control
Data Center Management
DRP/BCP
Project Management
Risk Governance & Compliance (GRC)

Languages

English
Expert

Memberships

Project Management Institute (PMI)
  • member
  • September 2011
ISACA
  • member
  • September 2011
Toastmaster International
  • member
  • August 2012

Training and Certifications

Certified in Risk and Information Security Control (CRISC) (Certificate)
Date Attended:
March 2015
Valid Until:
January 9999
Project Management Professional (PMP) (Certificate)
Date Attended:
September 2011
Valid Until:
January 9999
Certified Information Security Auditor (CISA) (Certificate)
Date Attended:
September 2011
Valid Until:
January 9999
BS7799 LA (ISO 27001) Lead Auditor (Certificate)
Date Attended:
April 2004
Valid Until:
January 9999
CIISA - Certified Internal Information Seucrity Auditor (Certificate)
Date Attended:
December 2004
Valid Until:
January 9999

Hobbies

  • Community Volunteering with Schools and hospitals
    Participated to assit distribution of food to needy in our local foodbank in Canada. Instrumental for Chennai Flood Relief fund Raising campaign