Muhammad -

I am working as Senior Manager Business Processes in Business Process Management Division (BPMD). Purpose of Division is to develop, manage and oversee operational policies and procedures, maintenance and upgrade of COSO documentation, Compliance with regulations for Internal Controls over Financial Reporting (ICFR), pre-implementation review of new/ changed business processes & products, and extend functional support for implementation of various business applications. Also includes management of centralized operational functions requiring major change / improvement of Applications and Processes on Build, Operate and Transfer (BOT) methodology.

In this role my functional duties are:

> Pre-implementation review of business products and processes and identification of gaps related to internal controls and highlight the area of process efficiency.
> Provide functional support during implementation/review/upgrade of various applications from controls perspective and process efficiency.
> Assist Line Manager in handling tasks related to projects in hand. Works closely with the Business, Systems and IT department to ensure smooth transition and implementation of operational process improvement.
> Maintenance of ‘Branch Operations Manual’ (a comprehensive book that details rules/ instructions of operations for branches/ back offices).
> Draft new/ revised instructions/ circulars for branches/ back offices for implementation of the latest changes as per the directive of Central Bank.
> To review of business process documentation prepared in context of COSO Framework in accordance with requirements of SBP (Central Bank) guidelines on Internal Controls and COSO Framework.

> Document Bank wide business processes and managing Entrepreneur Risk Management (ERM) through COSO - Internal Control framework.
> At Bank wide level, prepare and maintain Risk Register (Risk Control Matrices) and performing GAP Analysis.
> Maintain and manage Bank wide COSO Processes Flows
> Review of Business Policies, Processes & Procedures with respect to Risk and Control mechanism in light of COSO Internal control Framework.
> Review of bank’s Processes, Manuals, Operational guidelines, Standard operating procedures with respect to risk and control prospective.
> Documenting base line criteria that are used in evaluation & testing of Management Controls.
> Provide functional support in implementation of business applications
> Coordinating with external auditors to obtain ICFR (Internal Control over Financial Reporting)
> Facilitate Management in centralized operational functions requiring major change /improvement of Applications and Processes on Build, Operate and Transfer (BOT) methodology

I had also worked in bank’s Internal Control Department that is established for testing of effectiveness of
Internal Control System. As a team member & independently I had also conducted pre-audit review of
branches in order to; minimize/ remove Operational and Procedural lapses, help to strengthening control
environment. On other hand we report issues to help Management to establish their opinion regarding
effectiveness of Internal Control System.
My primary responsibilities were related to overall review of different Branch segments with respect to Risk and Control prospective. These segments are:

> Deposits (Bank Customer relationship, Cheque book issuance, unclaimed deposits etc)
> Remittances (Banker’s instruments, Traveler Cheques, Bills for Collection etc)
> Teller Services (Cash counter services, Cash handling mechanism etc)
> Branch Administration (Head Office reconciliation, Expenses etc)
> Financial Risk analysis of branch books (General Ledgers, sub ledgers, Statement of Affairs, Balance Sheet etc)

Branches Review is being carried as per Bank’s Operation manuals, SBP (Central Bank) Prudential
Regulations/ guidelines and COSO - Internal Control framework. Also pay special attention toward Anti
Money Laundering measures and Customer Due Diligence (CDD)/ KYC related issues. Preparation of
branches review plan, selection of appropriate review sample. Crash Reporting of Critical Incident found
during review and submission of final review report to Unit Head ICD.

Other Special Assignments were:
> Member of Team conducted ‘Special IT’ review of one Branch of Bank
> Special review of branches ‘Pre-SBP (Central Bank) Inspection’
> Conducted Special review of branches at year end to validate the financial figures reported by branches in order to identify Inflationary impact/ window Dressing
> Monitoring of ‘Bi-annual Statement Rendition Process’ at centralized level