Skilled IT Governance Risk & Compliance Officer with 15 years’ experience in the field GRC, Information & Cyber Security, IAM.
Overview
16
16
years of professional experience
4
4
years of post-secondary education
12
12
Certifications
Work History
IT Governance Officer
Dukhan Bank
Doha
03.2013 - Current
• Collaborated with Head of IT and division managers to develop and communicate IT governance framework, policies, procedures, and standards across Bank aligned to Business goals and Strategy
• Liaised with Audit to ensure compliance with security policies, procedures, and standards. Follow up on action plans related to internal and external audit recommendations.
• Supported enhancement of risk management capabilities throughout Bank using appropriate tools, techniques, and procedures.
• Performed IT & Security Risk Assessments and managed risk register including continuous monitoring, control execution, follow ups and reporting.
• Assisted in developing Cyber Security policies, standards, guidelines, baselines and procedures while ensuring they align with industry best practices and industry requirements (QCB, NCSA, FIFA, NIA, ISO 27001,NIST, PCI)
• Business Continuity and Disaster Recovery Management – BIA, Communications, Test Plans, Call tree, Results review
• Performed user access and privileges provisioning/de-provisioning processes to address security gaps and evaluate identity and privileges management solutions.
• Provided training and awareness programs to enhance understanding of IT governance principles and practices.
• Conducted asset discovery and data classification and ensured compliance with information security policies and procedures for asset use.
• Collaborated with Incident manager and Risk department to detect, identify, and contain security-related events and incidents.
• Performed periodic Risk Control Self-Assessment (RCSA) to assess effectiveness of policies, procedures, and system security safeguards.
• Participate in evaluation of advanced technologies and tools with vendors to assess their impact on business unit operations and provide guidance to Head of IT (Cloud Technology, DevOps, Kubernetes, Artificial Intelligence - AI)
• Investigate industry risk and compliance trends related to new technologies and provide recommendations to enhance security and compliance measures.
• Perform Vulnerability assessments, coordinate Penetration Testing and provide recommendations for improvements
• Communicated with stakeholders to define & report IT performance metrics, trends, Key Performance Indicators (KPIs) & Key Risk Indicators (KRIs)
• Management of SOC Monitoring, Tracking, Use case Optimization & Metrics
• Assessed risks on Vendors and Outsourced companies supporting IT activities
• Tracked IT Budgets and Cost Control
• Governance on all IT Process (Patch, Backup, Access Control, Advisories, Change management, Data Center, Data Privacy & Protection, Enterprise Architecture, Hardening, Health Checks, IAM, IOCs, Log monitoring, Physical Access, SDLC)
IT Engineer
First Leasing
Doha
03.2010 - 02.2013
Management of IT Operations, Server, Networks, Security, Backup, Database & Applications
Configuration & Troubleshooting all the technical issues in the company
Performed keynote presentations with the higher management and Contractors
Supervision and Continuous Improvement of Computer systems
Technical Support & Monitor ICT activities with the subsidiary organisation
Planning and Implementation in Migration of Information Systems from First Leasing to Barwa Bank
Project Engineer
Wipro Technologies
Bangalore
12.2007 - 02.2010
Interact with HP clients and onsite coordinators to obtain the support requirements
Analysis, Planning, Design, Develop, Testing & Bug fixing of Un- Installation Tool for Printer Overlay
Managing 3 project teams for new, modification, maintain & bug fixing of Strings and Helps into 38 languages
Fix and deliver of critical bugs that gets logged by Clients or testers in any of the 38 locales
Designing scripts for performing different Computer Build Activities
Perform SCM activities, Test and Debugging Hudson Build Portal
Technical Documentation and deliver projects
Education
Bachelors Of Technology - Electronics & Communications
University Of Calicut
01.2003 - 04.2007
Skills
Governance
undefined
Certification
CISSP
Quote
Success is not final; failure is not fatal: It is the courage to continue that counts.
Winston S. Churchill
Timeline
IT Governance Officer
Dukhan Bank
03.2013 - Current
IT Engineer
First Leasing
03.2010 - 02.2013
Project Engineer
Wipro Technologies
12.2007 - 02.2010
Bachelors Of Technology - Electronics & Communications
University Of Calicut
01.2003 - 04.2007
Similar Profiles
Parvaze Attaullah Mohammed Attaullah KhanParvaze Attaullah Mohammed Attaullah Khan
HEAD - CONTRACTING UNIT, COMMERCIAL BANKING GROUP at DUKHAN BANKHEAD - CONTRACTING UNIT, COMMERCIAL BANKING GROUP at DUKHAN BANK