MOHAMMED SHAMSEER
IT Governance
Doha
Summary
Skilled IT Governance Risk & Compliance Officer with 15 years’ experience in the field GRC, Information & Cyber Security, IAM.
Overview
16
16
years of professional experience
4
4
years of post-secondary education
12
12
Certifications
Work History
IT Governance Officer
Dukhan Bank
Doha
03.2013 - Current
- • Collaborated with Head of IT and division managers to develop and communicate IT governance framework, policies, procedures, and standards across Bank aligned to Business goals and Strategy
• Liaised with Audit to ensure compliance with security policies, procedures, and standards. Follow up on action plans related to internal and external audit recommendations.
• Supported enhancement of risk management capabilities throughout Bank using appropriate tools, techniques, and procedures.
• Performed IT & Security Risk Assessments and managed risk register including continuous monitoring, control execution, follow ups and reporting.
• Assisted in developing Cyber Security policies, standards, guidelines, baselines and procedures while ensuring they align with industry best practices and industry requirements (QCB, NCSA, FIFA, NIA, ISO 27001,NIST, PCI)
• Business Continuity and Disaster Recovery Management – BIA, Communications, Test Plans, Call tree, Results review
• Performed user access and privileges provisioning/de-provisioning processes to address security gaps and evaluate identity and privileges management solutions.
• Provided training and awareness programs to enhance understanding of IT governance principles and practices.
• Conducted asset discovery and data classification and ensured compliance with information security policies and procedures for asset use.
• Collaborated with Incident manager and Risk department to detect, identify, and contain security-related events and incidents.
• Performed periodic Risk Control Self-Assessment (RCSA) to assess effectiveness of policies, procedures, and system security safeguards.
• Participate in evaluation of advanced technologies and tools with vendors to assess their impact on business unit operations and provide guidance to Head of IT (Cloud Technology, DevOps, Kubernetes, Artificial Intelligence - AI)
• Investigate industry risk and compliance trends related to new technologies and provide recommendations to enhance security and compliance measures.
• Perform Vulnerability assessments, coordinate Penetration Testing and provide recommendations for improvements
• Communicated with stakeholders to define & report IT performance metrics, trends, Key Performance Indicators (KPIs) & Key Risk Indicators (KRIs)
• Management of SOC Monitoring, Tracking, Use case Optimization & Metrics
• Assessed risks on Vendors and Outsourced companies supporting IT activities
• Tracked IT Budgets and Cost Control
• Governance on all IT Process (Patch, Backup, Access Control, Advisories, Change management, Data Center, Data Privacy & Protection, Enterprise Architecture, Hardening, Health Checks, IAM, IOCs, Log monitoring, Physical Access, SDLC)
IT Engineer
First Leasing
Doha
03.2010 - 02.2013
- Management of IT Operations, Server, Networks, Security, Backup, Database & Applications
- Configuration & Troubleshooting all the technical issues in the company
- Performed keynote presentations with the higher management and Contractors
- Supervision and Continuous Improvement of Computer systems
- Technical Support & Monitor ICT activities with the subsidiary organisation
- Planning and Implementation in Migration of Information Systems from First Leasing to Barwa Bank
Project Engineer
Wipro Technologies
Bangalore
12.2007 - 02.2010
- Interact with HP clients and onsite coordinators to obtain the support requirements
- Analysis, Planning, Design, Develop, Testing & Bug fixing of Un- Installation Tool for Printer Overlay
- Managing 3 project teams for new, modification, maintain & bug fixing of Strings and Helps into 38 languages
- Fix and deliver of critical bugs that gets logged by Clients or testers in any of the 38 locales
- Designing scripts for performing different Computer Build Activities
- Perform SCM activities, Test and Debugging Hudson Build Portal
- Technical Documentation and deliver projects
Education
Bachelors Of Technology - Electronics & Communications
University Of Calicut
01.2003 - 04.2007
Skills
Governance
Information Security
Risk Assessment
Compliance
IT Strategy
Policy & Procedure Development
ISO 27001
Business Continuity
Identity Access Management
Change Management
Incident Management
Audit
Microsoft Office
Certification
CISSP
Quote
Success is not final; failure is not fatal: It is the courage to continue that counts.
Winston S. Churchill
Timeline
IT Governance Officer
Dukhan Bank
03.2013 - Current
IT Engineer
First Leasing
03.2010 - 02.2013
Project Engineer
Wipro Technologies
12.2007 - 02.2010
Bachelors Of Technology - Electronics & Communications
University Of Calicut
01.2003 - 04.2007