Salman N

As Head of Internal Audit:
● Oversight of the overall internal audit function including audit plan, audit projects progress,
stakeholder communications, periodic reporting to executive management and Audit Committee.
● Remedied audit function compliance issues in accordance with regulatory and internal requirements
as well as international standards.
● Conducted annual companywide risk assessments to tailor the audit plan.
● Evaluated the company risks, controls and compliance with regulatory rules, regulations and
guidelines, along with internal policies and procedures.
● Developed, maintained and authorized the internal audit function charter, policies, procedures, work
standards, templates, audit plan (3 years risk-based plan), companywide risk assessment in
accordance with the standards, using the best practices and through assessing the company
requirements and risk evaluation.
● Oversight of team recruitment, development, succession planning and evaluation.

As Secretary to the Audit Committee:
● Developed the Audit Committee Charter in accordance with the regulations and standards.
● Minted the proceedings and resolutions of the Audit Committee meetings.
● Scheduled meetings, coordinated communications, prepared agenda items for Audit Committee.
● Prepared and managed meeting schedules, agendas, communications and relevant meeting
stakeholders within regulatory and internal requirements.
● Properly documented and approved all relevant meeting minutes, resolutions and supporting
documents as per regulatory and internal requirements.
● Monitoring Audit Committee actions and follow up of implementation.

● Establishing the internal audit function with head of the department.
● Drafted and coordinated with the Head of Internal Audit the internal audit charter, policies,
procedures, work standards, templates, audit plan (3 years risk-based plan), companywide risk
assessment in accordance with the standards, using the best practices and through assessing the
company requirements and risk evaluation.
● Managing the internal audit project assignments, including planning, field work, workpapers
documentation, finding formulation and analysis, audit drafting and discussion with auditees and
final report submission.
● Leading the compliance, governance, risk and regulatory audits requested by SAMA.
● Managing audit projects outsourcing and ensuring proper planning, conducting, acceptance criteria
and timely report submissions.
● Preparing a team development program as well as succession planning.
● Managing day to day work and task assignments.

● Developed general department policies such as access controls, data confidentiality controls and
confidentiality of service providers.
● Developed the department mandates, policies, processes and work instructions, governance
requirements.
● Developed the department service catalog (including risk register).
● Reviewed and ensured adherence of the risk mitigation plans.
● Provided controls consulting to the operational processes while maintaining independence.
● Performed and monitored performance data and established periodic reporting with analysis,
performance, targets.

● Ensured project requirements met budget, procurement requirements, strategy adherence,
compliance with regulatory requirements and have proper accountability established.
● Managed and coordinated all projects financial and technical performance, change requests, targets,
deadlines and risks, issues and actions tracking.
● Overviewed stakeholder management, communication plan, matrix, channels and documentation.
● Consulted in organization’s strategic objectives, balancing short- and long-term goals, risk and
rewards, operations and project implementation.
● Continuously analyzed portfolio risks and issues ensuring reasonable measures are taken and proper
accountability in place.

● Prepared, and managed financial budget for projects and their percentage of completion.
● Reviewed construction projects and their phases along with actual project progress.
● Reviewed project risks and issues and ensuring proper communication and actions and accountability are in place
● Streamlined, proposed, implemented and automated of OSP (Outside Plant/Civil) projects.
● Delivered status reports to stakeholders for budgeting and planning purposes.
● Executed proof of concept implementations to validate product feasibility.
● Developed new reporting and analysis methods to allow senior management to understand the impact of each project.
● OSP Project Management: Managing STC’s OSP contractors in projects such as FTTH, LEAD, OSP, OSP materials etc.
● Reviewed Vendor/contractor management, ensuring project financial and technical performance, milestones and deadlines.

Accomplishments:
● Established PMO (Portfolio Management / Strategy Alignment Office) as project manager.
● Established a Portfolio Investment Board to evaluate all STC Tech and Ops Programs, Projects and initiatives and ensure alignment between different sectors
● Established Strategy Alignment Performance Report (Monitors all projects, programs and initiatives).
● Enhanced and reengineered SMART KPIs of the projects, programs and initiatives.
● Established project procurement progress monitoring dashboard.
● Lead the material acquisition system automation.
● Established project operational and financial reporting and tracking standards for material acquisition and civil works.
● Lead a committee between finance and implementation that lead to agreements on invoicing, capitalization and project progress tracking of material acquisition and civil works.
● Provided Backup Storage Solutions and System Administration for STC’s Network Implementation’s Project Control Dept.
● Provided consulting in IT security internal control awareness in areas of weakness in PwC storage methods which were implemented and resolved.

● Planned and conducted operational and financial audits to confirm financial statements are fairly
presented in alignment with IFRS.
● Tested design and effectiveness of internal controls by obtaining a thorough understanding of the
industry and business.
● Tested internal controls to ensure effectiveness and generated comprehensive reports on audit
findings, including identification of financial information material misstatements or severe control
deficiencies and recommendations on improvement of internal controls.
● Substantive and analytical testing to obtain reasonable assurance over matterial accounts.
● Perfomed risk assessment of clients and mesuring the matteriality needed to obtain reasonable
assurance over accounts.