Sultan Al-Anazi, Head of IT Audit

Sultan Al-Anazi

Head of IT Audit

Al-Rajhi Bank

Location
Saudi Arabia
Education
Diploma, CISA
Experience
20 years, 9 Months

Share My Profile

Block User


Work Experience

Total years of experience :20 years, 9 Months

Head of IT Audit at Al-Rajhi Bank
  • Saudi Arabia - Riyadh
  • My current job since June 2013

• Assist CIA in developing Bank Audit Universe and Annual IT Audit Plan.
• Support the CIA in developing the Audit Committee reports.
• Lead the audit review over subsidiary, overseas branches and owned companies.
• Manage IT Audit Assignment to ensure the achieving of targets set out in annual IT audit plan.
• Review and approve the audit work programs and audit planning memorandum to ensure that there is alignment among audit objective, audit scope and field work.
• Review the draft audit reports to ensure that there is alignment among audit issues, recommendations and action plans.
• Discuss the audit reports with respective line mangers and Groups Heads.
• Close monitoring and follow up with auditees regarding the implementation of action plans.
• Support the Audit Management in all reporting requirements including the Audit Committee reports.
• Lead and supervise IT audit team to ensure that their performance is in line with IAG methodology and best practice.
• Provide an on-going training, coaching and motivate IT audit team to achieve their objectives.

Senior Operation Audit Manager at Al-Rajhi Bank
  • Saudi Arabia - Riyadh
  • August 2010 to June 2013

Currently working with Al-Rajhi Bank under Internal Audit Group, as Senior Operation Audit Manager. Roles and responsibilities include the following:
• Lead the operation audit team to review the adequacy and applications of accounting, financial and operating controls throughout the organization and also approve the audit programs and prepare the reports with recommendations on audit findings.
• Support the Audit Management in all reporting requirements including the Audit Committee reports.
• Ascertain the reliability of accounting and other operational procedures within the organization
• Provide management with recommendations to ensure maintenance of a high level of internal control & promote operational efficiency.
• Monitor the implementation of decisions taken by the management on audit recommendations.
• Train, develop and motivate the internal audit team on frequent basis, to ensure a healthy working environment and achieve their objectives
• Continuously monitor all aspects of the internal control solutions

IT Audit Manager at Al-Inma Bank
  • Saudi Arabia - Riyadh
  • February 2009 to August 2010

Currently working with Al-Inma Bank under Internal Audit Department, as an IT Audit Manager. Al-Inma Bank is a newly established Bank with Capital of 15 Billion SR. I was the first staff in IT Audit team and the main reason for moving to the Bank is to gain a managerial experience. Roles and responsibilities include the following:

• Establish IT audit team.
• Develop the audit methodology and related process and procedures.
• Lead the project to develop the audit related templates and standards.
• Plan for IT audit assignments.
• Communicate with vendors to select the revenant IT audit tools.
• Interview the junior auditors to form a team.
• Manage the IT readiness assignment to ensure that the Bank’s IT environment, control, policies, processes and procedures are well managed for the commercial launch which is planned in July, 2009.
• Assignment covered:
o T24 (Globas) system.
o Oracle System.
o SARIE.
o Base 24.

Senior IT Internal Auditor at Riyad Bank
  • Saudi Arabia
  • September 2005 to February 2009

Currently working with Riyad Bank under Internal Audit Department, as an IT Internal Auditor. Roles and Responsibilities including:
• Plan and Manage audit assignments
• Independently developed and conducted the audit test plans.
• Selecting the available audit tools through the internet
• Conduct a compliance Review
• Conduct a follow-up Audit assignment
• Quality assurance of IT
• Steering the meeting with the auditee to discuss audit findings
• Write draft and final audit report
• Managing the audit related documentation and evidences in accordance with quality assurance requirement of Internal Audit Department
• Support the Internal Audit system used in the department
• Audit Assignments accomplished including: Network Management Audit, Treasury Systems Audit, SARIE Audit, Visa and MasterCard Audit, ATM and POS Audit, LAN Security Audit, End User Support Audit, Data Center Audit, Retail Systems Audit and GL:M Audit.
• Assignments included the review of Routers, Switches, Firewalls, IDS, Windows 2003 servers, AIX, MS Exchange Server, and ORACLE database, .

Customer Services Supervisor at National Commercial Bank (NCB)
  • Saudi Arabia
  • April 2004 to August 2005

Worked with National Commercial Bank (NCB) under Retail Department after completing NCB's Fresh Graduate (FG) program. Roles and Responsibilities including:
• Supervise the customer services representatives
• Check the required reports generated from the system to verify the branch's employee work

Network Engineer Trainee at Saudi Telecom Company (STC)
  • Saudi Arabia
  • February 2003 to September 2003

Joined Saudi Telecom Company (STC) through the cooperative program as a Network Engineer Trainee. Trained on:
• Network Design process
• Network Implementation process
• IP addresses management
• Evaluate the network design using evaluation tools (OPNET)
• Network monitoring process using HP-OpenView

Education

Diploma, CISA
  • at ISACA
  • August 2009
Bachelor's degree, Computer Engineering
  • at King Fahd University of Petroleum and Minerals (KFUPM)
  • February 2004

Bachelor of Science (B.S.) degree in Computer Engineering. Courses taken including: • Introduction to Networks • LAN and WAN management • Database management • Programming using C++ GPA: 2.49 out of 4

Specialties & Skills

Compliance
Risk Management
Operation Audit
IT Audit
Team Leadership
Microsoft Office

Languages

Arabic
Expert
English
Expert

Memberships

ISACA
  • Member
  • January 2005

Training and Certifications

PIONEER (Certificate)
Date Attended:
April 2013
Valid Until:
August 2013