Manager ITSM/GRC
Paramount Computer Systems W.L.L.
Total years of experience :22 years, 11 Months
Managing projects in domains like ITSM, GRC and Information Security as a Project Manager, Consultant and / or Auditor in entire GCC.
IT Operations Audit based on Cobit, ISO 20000 and ISO 27001 Standards
Audit Opening Meeting
Audit planning and information gathering
Audit of various functions / processes through interviews and walkthroughs
Samples / evidence collection
Preparing work papers and discussion findings with auditees
Exit meeting with auditees
Preparation and submission of audit reports
Clients: UAE’s largest listed company
ITIL based tool implementation and ISO 20000 Certification
Detailed ITSM Gap Assessment
Formation of ITSM Steering Committee & ITSM working group
Assigning ITSM roles & responsibilities to respective working group members
ISO 20000 introductory awareness workshop for ITD staff
Discussions with ITSM WG in relation with tool functionality against ISO 20000/ITIL processes
Actual process as well as related workflows implementation in the tool
Tool Integrations and customization with various utilities like discovery, SCCM, SCOM, etc.
Parallel run with earlier tool
Final tool functionality/customization related workshops based on ISO 20000/ITIL standard.
Post implementation review
Clients: Govt. Energy Company in UAE
Largest Petroleum Company in Qatar
Ministry in Qatar
ITSM Gap Assessment against ISO 20000 / ITIL Standard
ITSM Process Awareness Workshops
ITSM Tool walk through
Key users interviews based on ITSM / ITIL processes
Key findings / evidences gathering
Process alignment levels based on findings vis-à-vis ISO 20000 / ITIL standards.
Detailed Gap Assessments of each process area against ISO 20000 requirements
Recommendations for process ownership & ITSM Management
Recommendations to close Non Compliances
Clients: Leading Bank, Kuwait
Health Authority, Dubai
Health Authority, Abu Dhabi
Oil & Gas, Qatar
• Being the administrative head of the ISWG, serves as the focal point for deciding on all information security issues and is also responsible for creating security awareness in GRSIA.
• Manage the overall Information Security programme in GRSIA
• Responsible for ensuring maintenance of Information Security Policies, Procedures and Standards for use throughout GRSIA.
• Manage and provide direction for the timely resolution of all Information Security issues in order to achieve and maintain full compliance with the Information Security Policies and Procedures.
• Review third party connectivity to GRSIA’s computing resources.
• Review Third Party Contracts for Security Clauses.
• Communicate Summary of Risk Assessment and Security Incidents to the Information Security Steering Committee.
• Review audit and examination reports dealing with the information security issues and place them before the Information Security Steering Committee during regular meetings.
• Reporting security incidents and violations to the Information Security Steering Committee.
• Encourage the participation of the managers, auditors, legal department and the staff members from various disciplines, who can contribute to the information systems security programme.
• Seek legal guidance and initiate legal proceedings on behalf of GRSIA IT Department in case of illegal data loss or hacking from or in any of GRSIA’s Information systems.
• Review SLA’s