NAVED KHAN
S/o JAVED AKHTAR KHAN
E-mail: ***********@*******.***
Mobile Ph#: +92-333-*******; Home Ph#: +92-21-580****
CAREER OBJECTIVE
“To seek employment in a reputed and progressive organisation where my technical and soft skills could be best utilized and developed, and where, I could become part of team to assist organization achieve its business objectives and goals.”
FIELDS OF INTEREST
Information Risk Management, IT Security and Audit, ERP
PROFESSIONAL CERTIFICATION
Certified Information Systems Auditor (CISA)
ACADEMIC QUALIFICATION
• BS in Computer Science from FAST-NU in 2005.
• HSC from DJ Science College with A grade.
• SSC from DMS School with A-1 grade.
MAJOR ACADEMIC COURSES
• Network Security
• IS Audit and Control
• Software Engineering
• Marketing Management
WORK EXPERIENCE
Consultant at Sidat Hyder Morshed Associates (Former Ernst & Young) (1st Jan 2007- Present)
JOB RESPONSIBILITIES:
• Project Management
• Information Systems Audit
• Develop BCP/DRP for local and international clients
• Perform Network Security Assessment and Penetration Testing
• Develop IT Policies and Procedures
RECENT PROJECTS AT SIDAT HYDER MORSHED ASSOCIATES (FORMER ERNST & YOUNG)
Information Systems Audit of Bank Al Habib
Responsibility: Provide management and business process owners with assurance and advice regarding controls in the organization. Identify weaknesses in controls and the risk that may be associated with such weaknesses.
Business Continuity and Disaster Recovery Plan development of Karachi Stock Exchange
Responsibility: Identification and understanding of business processes of KSE, perform threat and risk assessment and business impact analysis of all business processes. Identification of core IT assets and suggestion of risk mitigation techniques to avoid any possible financial and reputational impacts
Business Continuity Plan development of Engro Chemicals
Responsibility: Identification and understanding of business processes of ECPL, perform threat and risk assessment and business impact analysis of all business processes. Developed Recovery Strategies and recommended best possible way to resume business functions in the event of disaster
Penetration Testing of Meezan Bank
Responsibility: As a part of the team performed external Attack and Penetration review of Meezan Bank’s Internet Banking Infrastructure. This review focused on assessing the level of resilience to an external attack, as well as, reviewing potential security vulnerabilities in the Internet Banking network and applications.
IT Policy and Procedure Development of Bosicor Pvt ltd
Responsibility: Developed policy and procedures for the IT operations of the Bosicor private Ltd using best practice of COBIT and ISO 17799
Business Analyst at Algorithm Consulting (3rd Jan 2006 to 30th Dec 2006)
JOB RESPONSIBILITIES:
Responsibilities: As a Business Analyst, had been involved in the ERP implementation. Worked on ERP product, called AlgoERP. Interacted with client and resolved queries. Performed Quality assurance and testing of new added functionalities of the product.
Internship in the IT-Department of United Bank Limited (11th July 2005 to 20th Aug 2005)
JOB RESPONSIBILITIES:
During the internship, performed different tasks like documentation and some database related work like applying queries and analyzing the results
MAJOR ACADEMIC PROJECTS
E-Commerce M-Commerce Engine
Tools: ASP.NET, MySQL
Description: Provided Complete E-infrastructure for booksellers. Provided purchasing, shipment, tracking, intra-organizational communication via mobile phones and websites.
Marketing Report on LU Biscuits
Prepared a project report on Continental Biscuits and analyzed their marketing strategies and brands.
TECHNICAL SKILLS
Programming Languages C/C++, Pascal, VB
Databases SQL Server, MySQL
UML Visio, Corel Draw
Windows Windows 2000, XP
EXTRA CURRICULAR ACTIVITIES
• Won first prize in the Essay Competition.
• Active participant of team sports at school and college (Cricket, Throw ball, Badminton)
• Took active part in charity works at DJ College Karachi.