ISO 9001:2015 LA, ISO 22301 LA, QMS Implementer, TOGAF9 Certifieed

OBJECTIVE

I intend to establish myself in IT Governance, IT Risk Management, Business Continuity

Governance, Information Security Governance, IT audits & Compliance with an esteem organization through a long-time commitment, contributing to the company's growth and in turn ensuring personal growth within the organization. I believe that my functional and communication skills will enable me in facing a challenging career ahead.

TRAININGS & CERTIFICATIONS

Sep-2009 ITIL V3 Foundation

Jun-2013 COBIT-5 Foundation

Oct-2013 ISO 9001:2008 QMS

Feb-2014 TOGAF-9 Enterprise Architect

Nov-2016 ISO 9001:2015 Lead Auditor

SEP-2021 ISO 22301:2019 Lead Auditor

QUALIFICATION

2004-2006 MCS – Computer Science (CGPA: 3.17)

The Islamia University of Bahawalpur, Punjab, Pakistan PROFESSIONAL EXPERIENCE

Etisalat - Ufone - Head Office, Islamabad

Assistant Manager Business Continuity & Risk Management

(JUN 2021-NOW)

Major responsibilities:

• Assisting in implementation of BCM measures as part of continual process improvement, using industry standards & frameworks e.g. (ISO 22301) aligned with Etisalat Group BC-DR Framework Guidelines.

• Assisting in managing / maintaining the BCM forum at Etisalat Ufone.

• Engagement in CAB reviews, drill documents reviews and closures with technology teams.

• Assisting in rolling out new policies & procedures covering definition, roles and responsibilities and people enablement.

• Effective coordination/work with the audit teams (internal/external).

• Performing BC-DR program review through Etisalat self-assessment review.

• Performing BIA and RA exercises annually.

• Ensuring compliance of BCM Governance practices including BC-DR controls.

• Assisting in managing / maintaining the Business Continuity Steering Committee, which includes gathering/incorporating stakeholders’ feedback on BC-DR controls, plans, drills, and gaps etc.

• DR drills tracking and counselling through Annual Calendar.

• Management of yearly external audit (Technology) with KPMG for the YE 2021.

• Monitoring of BC-DR KPIs and reporting to Etisalat Group on quarterly basis.

• Review, monitor and follow-up the implementation of BC-DR controls as part of Risk Management and updating BC-DR Steering Committee on quarterly basis.

• Conducting periodic awareness sessions.

MUHAMMAD AKHTAR ALI

Mobile: +92-335-*******

Mobile: +92-300-*******

******.***@*****.***

• Creative strategy management.

• Self-starter, self-motivated with

strong professional ethics.

• Result oriented & responsible.

• Proven experience working with

COBIT, ISO methodologies.

• Proven experience working in IT

Governance.

• Excellent convincing, negotiation &

interpersonal skills.

• Well known to powerful team spirit,

like teamwork, can easily establish a

good working relationship with

team members.

Ooredoo Oman – Muscat, Sultanate of Oman

Expert IT Governance & Contracts (JULY 2019-Jan 2021) Major responsibilities:

• Development, review, and compliance of frameworks, i.e. IT Governance, Information security and IT risk management in collaboration of COBIT, NIST, ISO 9001 & ISO 27001 and COSO standards.

• Development, review and compliance of IT governance processes, IT policies and procedures.

• Ensuring IT Risks Management (ISO 31000) in collaboration with ERM.

• To conduct periodic risks assessments on quarterly basis, maintain IT risk register and report it to the management. Also conducted risk management awareness sessions within technology.

• To Lead IS audits within technology for certification of ISO 9001:2015, as per approved audit plan and management of resources to review CGIs and GITCs.

• To conduct analyses of controls deficiencies noted during the audit and their impact on overall audit strategy and communicate to the Group Internal Audit.

• Strong follow-up on management action plans with technology stakeholders and to ensure closures of internal/external audit findings as per their timelines.

• Management of yearly IT external audit with PWC for the YE 2019 & 2020.

• Management of ICOFR revenue IT controls, D&I testing with BDO for 2019 & 2020.

• Development and review of IT Business Continuity Plan and Disaster Recovery.

• Governance of IT projects (delivery methodologies, effort estimations, budgeting, development, and delivery) through Agile & Waterfall models with 3rd party vendors (Cognizant/Wipro).

• To ensure IT deliverables are compliant with OO ISM polices and TRA Oman.

• Follow up and resolve any vendor contractual/processes and payment conflicts.

• To provide weekly/monthly and quarterly reports to the Management.

• To assist IT director in various Ad-hoc based actions. Etisalat - PTCL - Headquarters Office, Islamabad

Manager IT Governance & Standards (SEP 2016-JULY 2019) Major responsibilities:

• Align IT services management (ITSM) with the dynamic needs of the Business.

• Development of IT governance framework, IT steering committee TORs.

• Compliance of the processes in systems & network operations, applications and databases, data centers, business continuity planning & disaster recovery.

• Management of internal and external audits.

• Evidentiary collection and review for audit findings closures documentations.

• Annual audit supervisor for KPMG external audit 2018.

• Annual audit supervisor for Deloitte external audit 2016 & 2017

• Development of risk-based audit program upon controls, policies & procedures.

• Management of resources to ensure audit plans to be executed effectively.

• Compliance review of general IT controls, risk assessment, application controls and CGI's.

• Support formalization, review, and fine-tune ISO/ITIL based PIBs & policies.

• Support IT QA function in formalization of test cases and conducting UATs.

• Support IS audits for the compliance review of annual ISO certifications.

• Liaising with senior management personnel across technology. Etisalat - PTCL - Headquarters Office, Islamabad

Assistant Manager IT Governance, Planning & Strategy (JUN 2011-SEP 2016) Major responsibilities:

• IT audits coordination and audit findings management to their closures.

• Ensure proper regular reporting the management on audit status regularly.

• Ensure effective IT risk management and monitoring of IT risk trends. Establish, review and compliance IT risk management policies and trainings.

• Worked and liaise with departments on internal controls, audits & compliance.

• Annual audit coordinator for PWC external audits from 2013 to 2015.

• Performed regular IT Governance maturity assessments for the respective IT functional areas.

• Supported manager for executing information security and governance related functions and ad-hoc based assignments.

ZTEsoft - R&D Center - Nanjing, China

Software Developer - J2EE (Dec 2009 – Oct 2010)

Major responsibilities:

• Worked on PTCL Transfer of Technology Project (TOT- B&CC- Customer Care).

• The system was developed by using J2EE Technologies.

• Worked on the development of new functionalities in Customer Care System on various change requests submitted by PTCL.

• Analyzed and developed Technical/Architectural documentation.

• Technologies used, J2EE- Struts, Oracle DB and application deployed Weblogic.

• Prepared in test cases and participated in end to end testing activities. Etisalat - PTCL - Headquarters Office, Islamabad

Software Developer - J2EE (Jan 2009-Jun 2011)

Major responsibilities:

• Worked with PTCL-IS development team for in-house development of applications by using J2EE Technologies (Spring, Hibernate, Struts) and Oracle 9 database. Deployed applications on JBoss server.

• Worked on requirements gathering, analysis & design of various systems.

• Conducting testing and quality assurance for the systems by preparing use cases, performed stress and load testing through software tools.

• Worked on the preparation of technical documents & User guides.

• Conducted trainings for end users of newly developed systems. DPS - Digital Processing System - Islamabad

Software Developer - J2EE (Oct 2007-Jan 2009)

Major responsibilities:

• Worked as J2EE Developer with Kuwait offshore development team.

• Developed web-based portals eHRMS, TMS & eWorks.

• Developed applications by using J2EE technologies (Spring, Hibernate), used GWT for validation. Developed reports on Jasper Reports too and Oracle database used on the backend. Portals deployed on JBoss server.

• Participated in analysis of the requirements & architectural design functionalities, Developed, tested locally and deployed on remote servers. VOPIUM Pvt Ltd. Lahore Office

Junior J2EE Developer & QA Eng. (Apr 2007-Oct 2007) Major responsibilities:

• Development of Vopium portal & reporting module.

• Worked on architectural design of web-based Portal.

• Used J2EE Technologies (Spring, Hibernate), Jasper Reports and MySQL as backend database. Application deployed on Tomcat server.

• Worked on change requests and deployed patches remotely. SOFT SKILLS & PROFESSIONAL TRAININGS

• Understanding Towards Six Sigma • Interpersonal Communication

• IBM QRadar • Impactful Management

• CCNA • Art of doing Job

• Building Positive Attitude • UML, SDLC

• CRM • ISO 27001 ISMS

• Business Management Skills • PhishRod

• CISA • Adding Value Through Customer

Satisfaction

• 7 Habits of Highly Effective People • ISO 22301:2019 BCMS PERSONAL DETAILS

• Passport #: MW1791532

• Nationality: Pakistani

• References (if applicable): Can be furnished upon request

Contact this candidate