Muhammad Jawwad Alam Siddiqi

Heading the Information Security function at group level

Heading the Information Security Governance, Risk, Compliance and Trainings & Awareness Teams of NADRA Pakistan.

Responsibilities include:
􀂃 Conducting ISO27001 Internal Audit for Financial Services - Mobile Banking (EasyPaisa)
􀂃 Conducted TL9000 Internal Audit for Business Services, NOC
􀂃 Conducted ISO14001 Internal Audit of Telenor Pakistan
􀂃 Performing Business Impact Analysis for Business Services
􀂃 Conducting Policy Compliance Reviews
􀂃 Performing Incident Response activities
􀂃 Conducting Application Security Reviews
􀂃 Conducting Process Reviews
􀂃 Coordinating with External Auditors
􀂃 Coordinating with Tameer Bank
􀂃 Ensruing regulatory compliance in Financial Services - Mobile Banking

Responsibilities included:
􀂃 Managing the IT Advisory Service line & IT Audits of KPMG TH Islamabad Office

Major Projects include:
􀂃 Integrated Banking System Selection Consultancy to Khushali Bank
􀂃 Royal Bank of Scotland global KPMG assignment of conducting ISO27001 based security reviews of RBS vendors.
􀂃 Conducted ISO27001 based security review of Ufone for RBS-Ufone co-branding project
􀂃 Conducted ISO27001 based security review of Chanda Law Associates

Responsibilities include:
􀂃 Leading the IT Advisory Section of KPMG TH Islamabad Office
􀂃 Leading the Information Risk Management (IRM) Audit team of KPMG TH Islamabad Office

IRM clients audited belong to following sectors:
􀂃 Hospitality
->Marriott Hotel Islamabad, Marriott Hotel Karachi, Serena Hotel Islamabad, Pearl Continental Hotel Rawalpindi, Hashwani Hotels Limited, Pakistan Services Limited
􀂃 Manufacturing
-> AkzoNobel (formerly ICI Pakistan), Murree Brewery, Biafo Industries Limited, Bestway Cement Limited, Mustehkam Cement Limited, Fauji Cement Company Limited, Fauji Fertilizer Company Limited, Fauji Fertilizer Bin Qasim Limited
􀂃 Telecom
-> Mobilink (PMCL), Diallog CDMA
􀂃 Insurance (nonlife)
-> Askari General Insurance Company Limited
􀂃 NGO
-> National Rural Support Program (NRSP), Sarhad Rural Support Program
􀂃 Pharmaceutical
-> Ferozsons Laboratories Limited
􀂃 Government
-> Pakistan Telecom Authority (PTA)
􀂃 Oil & Gas
-> Halliburton, Oil & Gas Development Corporation Limited, Dewan Petroleum Limited
􀂃 Stock Exchange
-> Islamabad Stock Exchange
􀂃 Electricity Generation & Distribution
-> Islamabad Electric Supply Company Limited, Southern Electric Power Company, Uch Power, Saif Power Limited, Fauji Power Company (Dharki) Limited
􀂃 Airline
-> Air Blue
􀂃 Banking & Microfinance Institution
-> NRSP Bank, Khushali Bank Limited, First Microfinance Bank
􀂃 Software House & IT Consulting
-> Landmark Resources (LMKR)
􀂃 Construction
-> PakGulf Construction

􀂃 Leading one of ISO/IEC 27001:2005 implementation team.
􀂃 Maintaining Disaster Recovery Plan
􀂃 Managing Information Security Group (ISG) in the absence of Manager
􀂃 Member Incidence Response Team
􀂃 Coordinating with Consultants, External Auditors & Pakistan Software Export Board (PSEB) Representatives
􀂃 Creating and implementing information security policies and practices in DPS Inc.
􀂃 Monitoring and Controlling the Information Security Management System (ISMS).
􀂃 Implementing ISO/IEC 27001:2005 controls
􀂃 Implementing Information Security related CMMI process areas.
􀂃 Conducting internal audits of applications, processes and physical sites.
􀂃 Conducting risk analysis
􀂃 Providing Information Security Consultancy to the clients of DPS Inc.
􀂃 Coordinating with other branches of DPS Inc. for acquisition and deployment of security hardware.
􀂃 Conducting Information Security Awareness campaigns for all DPS Inc. employees
􀂃 Administering Information Security Induction to newly hired employees in DPS Inc.
􀂃 Preparing EOI and RFP documents for the projects DPS Inc. is interested in.

Responsibilities included:
􀂃 Creating and implementing information security policies and practices in DPS Inc.
􀂃 Monitoring and Controlling the Information Security Management System (ISMS).
􀂃 Implementing ISO/IEC 27001:2005 controls
􀂃 Implementing Information Security related CMMI process areas.
􀂃 Conducting internal audits of applications, processes and physical sites.
􀂃 Conducting risk analysis
􀂃 Providing Information Security Consultancy to the clients of DPS Inc.
􀂃 Coordinating with other branches of DPS Inc. for acquisition and deployment of security hardware.
􀂃 Conducting Information Security Awareness campaigns for all DPS Inc. employees
􀂃 Administering Information Security Induction to newly hired employees in DPS Inc.
􀂃 Preparing EOI and RFP documents for the projects DPS Inc. is interested in.
􀂃 Created Training Guides for TABS (Telecommunications, Administration, & Billing System) of ITS
Kuwait. Sites included Warid Telecom (Pakistan) & BanglaLink (Bangladesh).

Work responsibility included maintaining college website and computer laboratories.

Worked in the clearing section of the bank therefore I am familiar with the entire inward and outward
clearing procedures being followed in most of the well reputed banks. Also during my stay there I
prepared an interns manual for those doing internship in the clearing section of Union Bank.