محمد Shabir, MBA, CISA, PMP, BS7799 LA, Senior Manager Information Technology Operations

محمد Shabir, MBA, CISA, PMP, BS7799 LA

Senior Manager Information Technology Operations

NRICH Group, Canada

البلد
كندا
التعليم
دبلوم, MBA, PMP, CISA, CRISC, ISO27001LA, PCI-QSA
الخبرات
27 years, 3 أشهر

مشاركة سيرتي الذاتية

حظر المستخدم


الخبرة العملية

مجموع سنوات الخبرة :27 years, 3 أشهر

Senior Manager Information Technology Operations في NRICH Group, Canada
  • كندا
  • أشغل هذه الوظيفة منذ فبراير 2016

Roles & Responsibilities include but not limited to:
IT vision, assessment, strategy formulation, planning; IT value, priority setting; architecture; aligning IT with the CEO's agenda and enterprise architecture activities, Global Portfolio Management (Advisory role), Global IT Service Delivery & Standards, Global Information Security and ISMS Policy & Procedure, IS Pre-Audit & IT Risk Assessment on IT Applications, implementation of IT Risk Management Framework (IT RMF) and IS Delivery Planning:
• Planning activities for technology risk management & information security
• Cross Functional projects & modification/change control
• Contingency planning, tracking budget, risks and resources
• Risk assessments and mitigation strategies and monitoring effectiveness
• Managing business risk through technology control Assessment & Vendor Risk Assessment &
• Program & Projects Management and Third Party Risk Assessment
• Developing and maintaining strong relationships with business partners and internal/external team members
• Implementing security in rapid software development methodologies (like, Agile) and DevOps automation

Business Technology Risk Manager (CISO) في TD Bank Group
  • كندا
  • مايو 2012 إلى يناير 2016

As a Business Technology Risk Manager, my role is to assess the risk, analyze and mitigate the risk arising due to weakness or gap found in Process, procedure, people.
Operational Risk, Legal, Regulatory, Privacy and Information Security are some of the focus.
In addition, I liaise with Audit and Business if required with Technology team to provide security infrastructure services and solutions including anti-virus, vulnerability assessment, security event monitoring, privileged access management, systems compliance reporting, cryptographic key management, mainframe security access and data security services to TD Bank Group.

Director, IT في Seiko Denki Canada Ltd.
  • كندا
  • سبتمبر 2010 إلى أبريل 2012

Director IT, Seiko Denki Canada Ltd.
Toronto, ON, Sept 2010 till Present
Seiko Denki is true multinational Japanese based Electronic Wire Harness Manufacturing Company having plants spanning across Japan, Malaysia, Taiwan and China with its sales offices operating out of Singapore and India.
Roles & Responsibilities include but not limited to: Global Portfolio Management (Advocacy role), Global IT Service Delivery & Standards, Global Information Security and ISMS Policy & Procedure, IS Pre-Audit & Risk Assessment on IT Applications and IS Delivery Planning.

Head of IT (CIO) في United Arab Bank (UAB)
  • الإمارات العربية المتحدة - الشارقة
  • يوليو 2006 إلى فبراير 2010

To envision, plan, develop, acquire, stabilize, and deploy the business application systems with the total involvement of management, business units and Techno-function departments (Project Management); and to ensure that Information and related Technology Systems performing in line with Business Strategy.

Roles and Responsibilities:
- Program Management: Being in-charge of PMO office, managed below listed projects with 7 Project Managers and we were compliant to SDLC standards.
- Data-Center Management: Both Production and DR Site were managed to align with business strategy
- Service Desk: Provided internal and external Customers support with ITIL standards
- Network & Systems Support: System Admin and Network managers were reporting to me and we maintained highest protection while keeping optimal performance.

Achievements: Projects Implemented
(a) BCP/DRP: Development of Disaster Recovery Plan and Site Setup
(b) Develop and Implement Information Security Policy & Procedure
(c) Implementation of new ATM apps with CreditCard (VISA & MasterCard) interface implementation
(d) EMV Compliance for CreditCard & Automated Teller Machine application
(e) SAN Project
(f) Fax Consolidation
(g) Core Banking System requirement collection to replace existing Apps
(h) SMS Banking
(i) Basel II Requirement Analysis
(j) TI Archiving (Misys)
(k) ICCS (Image Cheque Clearing system)
(l) Electronic Document Image / Identity and Access Management System
(m) Treasury system

Core Banking Application studied and evaluated are: Finacle, Flexcube, T24

Head of IT (CTO) في BankMuscat International
  • البحرين - المنامة
  • مارس 2005 إلى يونيو 2006

Head of Information Technology (CIO),
BankMuscat International, Bahrain March ‘05 - June ‘06
I’ve managed IT department as part of its vision as envisage the IT function to be robust, reliable and be a significant contributor to the achievement of Bank's objectives and goals.

Achievements:
Trade Finance System - TI(Misys), eTrade(Misys), BCP/DRP, Network Security, Internet Banking, ATM application with Card Management, IVR Phone Banking, Call Center as part of key management initiatives.

Manager, Network and Delivery Channels (eChannels Manager) في Doha Bank, Doha, Qatar Sept 2002– March 2005
  • قطر - الدوحة
  • سبتمبر 2002 إلى مارس 2005

The leading private bank in Qatar, providing wide array of banking services with the largest network of branches, ATMs and POS. Market leader in retail banking and credit card business with operation in the MEA region, always in the forefront of introducing new technologies, first one to achieve BS7799/ISO17799 (ISO27001) information Security certificate in the region

Major Roles and responsibilities were as follows:
• To Manage Core Banking/ ATM Applications Systems
• To ensure the implementation of Standard Operating Procedure in Operation
• To Manage Systems Administrators and DBA resources effectively
• To Manage Helpdesk/ServiceDesk as per ITIL standards
• To Manage Network and Delivery Channels and minimize operational Risk
• To Provide 24/7 production Support
• To Manager Internal & External Audit
• To Assist IT Budgets/Purchase decision
• To Manage Vendors/Contracts
• To Manage Bank assurance/Islamic Banking window

Project Highlights - Doha Bank
The following projects were successfully managed from initiation to closeout to help the bank achieve IT Goals:
• Electronic Cheque Clearing System
• IS Governance Project
• Information Security management Systems (ISMS) implementation for bank-wide.
• BS-7799 Certification
• Implementation of CRSA
• Enterprise Architecture Planning (EAP) and Implementation with SAN, DR replication.
• ERP (Oracle 11i HRMS) Project
• BCP/Disaster Recovery Planning/Implementation. Identified business critical system and documented disaster recovery plan
• Off-country Cold Disaster Recovery Site
• Conducted Security awareness workshop Training for all Doha bank employees

ENIRONMENT: Software: HP-UX with MC Service Guard/ Oracle RAC (Real Application Cluster), Oracle 10g, Oracle10gApps Server, Sun Solaris, Windows 2000, PL/SQL, Pro*C, Shell Scripts, Oracle 7.x, 8.x, 8i, 9i, 9iAS, MS SQL Server 2000
Hardware: hp rp7420, hp BL20/BL40 hp DL380, Sun 280R

Senior Database Consultant – Professional Consulting Service في Intel Corp, USA
  • الولايات المتحدة
  • أغسطس 2000 إلى سبتمبر 2002

Database Engineering, Design, Architecture, Planning and Tuning, Managed Database Services, and Custom Application development with prime focus on Oracle and MS SQL Server Databases and MS development environments.

Projects Assignments:
Intel Corporation, Portland-USA - Database Engineering Support

Integra Telecom, Portland-USA - Managed Database Service

Egghead.com, Portland-USA - Database Re-engineering

Harsch Investment Properties, Portland-USA - Managed Database Support

Nissho Iwai American Corporation (NIAC), Portland-USA - Database Engineering

Doster.com, Portland-USA - MS SQL Server Database Support/tuning

ENIRONMENT: HP-UX, Sun Solaris, Windows NT/2000, PL/SQL, Pro*C, Shell Scripts, Oracle 7.x, 8.x, 8i, 9i, 9iAS, MS SQL Server 7.0, 2000, ModelMart, ERwin, Informatica PowerMart, SITE Scope, QUEST-spotlight

ERP Database Analyst/Architect, في Kodak Canada, Inc., Toronto, Canada
  • كندا
  • أغسطس 1998 إلى أغسطس 2000

Production Support and System Monitoring and maintaining organization-wide Oracle Database (UNIX/Windows NT) on HA Fail-over configuration include:

Projects:
1) Data Warehouse: Database Designing and Capacity Planning Project Management and 2) Supported SAP Interface and Administration & EDI interface module.

ENVIRONMENT: Oracle, UNIX, Windows NT, SAP, R/3 and SAP DBA

Product Consultant في Stirling Douglas Group (SDG),
  • كندا
  • أغسطس 1996 إلى أغسطس 1998

Stirling Douglas Group specializes in Data Warehouse, Retail Supply Chain Management, Material Management, and Automatic Replenishment Control Business.

Implementation Team Member for:
- Home Place Inc. Detroit, MI - USA
- OfficeMax Inc. Cleveland, Ohio - USA

الخلفية التعليمية

دبلوم, MBA, PMP, CISA, CRISC, ISO27001LA, PCI-QSA
  • في PCI DSS
  • أغسطس 2016

Payment Credit Card Industry (PCI) Data Security Standard (DSS) Specialist and Qualified Security Assessor.

ماجستير, CRISC, CISA
  • في ISACA
  • مارس 2014

Certified in Risk and Information Systems Control, ISACA, USA

دبلوم, PMP
  • في Project Management Institute, USA
  • أكتوبر 2011

Certified Project Management Professional

دبلوم, CISA
  • في ISACA, USA
  • سبتمبر 2011

Certified Information Security Auditor

دبلوم, BS7799 (ISO 27001)Lead Auditor
  • في BSI, UK
  • أبريل 2003

Certified Information Security Lead Auditor (ISO27001)

ماجستير,
  • في MBA
  • أبريل 2000

Specialties & Skills

Project Management
Information Security Management
IT Risk
Data Center
IT Risk and Control
Data Center Management
DRP/BCP
Project Management
Risk Governance & Compliance (GRC)

اللغات

الانجليزية
متمرّس

العضويات

Project Management Institute (PMI)
  • member
  • September 2011
ISACA
  • member
  • September 2011
Toastmaster International
  • member
  • August 2012

التدريب و الشهادات

Certified in Risk and Information Security Control (CRISC) (الشهادة)
تاريخ الدورة:
March 2015
صالحة لغاية:
January 9999
Project Management Professional (PMP) (الشهادة)
تاريخ الدورة:
September 2011
صالحة لغاية:
January 9999
Certified Information Security Auditor (CISA) (الشهادة)
تاريخ الدورة:
September 2011
صالحة لغاية:
January 9999
BS7799 LA (ISO 27001) Lead Auditor (الشهادة)
تاريخ الدورة:
April 2004
صالحة لغاية:
January 9999
CIISA - Certified Internal Information Seucrity Auditor (الشهادة)
تاريخ الدورة:
December 2004
صالحة لغاية:
January 9999

الهوايات

  • Community Volunteering with Schools and hospitals
    Participated to assit distribution of food to needy in our local foodbank in Canada. Instrumental for Chennai Flood Relief fund Raising campaign