Dedicated and highly skilled IT professional with a strong background in network administration, security, and IT audit. Proven expertise in designing, implementing, and maintaining secure network infrastructures for financial institutions, ensuring data integrity and regulatory compliance. Experienced in conducting IT audits, identifying vulnerabilities, and implementing robust security measures. Possess a comprehensive understanding of network technologies, certifications in information security, and a commitment to delivering exceptional results. Seeking opportunities to contribute my technical acumen and leadership to drive IT excellence in a dynamic organization.
· Develop/implement ITGC, information technology general control review.
· Execute readiness assessments for PCI DSS, SOC2 Type II and ISO 27001 compliance projects.
· Evaluate effectiveness of existing controls and determining the impact of proposed changes to business processes, applications and systems.
· Perform risk assessment & communicate identified security risks to appropriate parties to ensure a clear understanding of the risks as well as potential mitigations.
· Execute internal audits and assessments as per business need.
· Support global cybersecurity risk & compliance function.
· Conducted IT audits, assessing internal controls, and developing risk mitigation strategies.
· Monitored and enhanced security measures to safeguard data, systems, and networks.
· Evaluated data integrity risks, ensuring confidentiality, completeness, and accuracy.
· Identified and addressed network and system vulnerabilities, enhancing overall security.
· Reviewed Security Operation Center and related systems, including SIEM tools like Logrhythm and Wazuh.
· Performed efficient and effective IT audit procedures, ensuring compliance with industry standards.
· Communicated complex technical issues in a clear and simplified manner.
· Conducted regular audits of financial and non-financial applications, including overseas operations in Pakistan, Dubai, Bahrain and Sri Lanka.
· Reviewed and tested application controls, providing recommendations for enhanced security.
· Demonstrated expertise in disaster recovery procedures and business continuity management.
· Ensured the integrity of application systems and databases through rigorous backup processes.
· Evaluated regulatory requirements and their implementation within the MCB Bank environment.
· Maintained adherence to Information Security Manual and Policy for various systems.
· Reviewed critical documents such as PID, BRD, FSD, UATs, and SLAs with vendors and other departments.
· Investigated and resolved customer claims related to ADC (MCB Live Application), Visa Debit & Credit Cards.
· Designed and managed secure network architectures for a financial institution.
· Ensured network security through the use of advanced security appliances.
· Collaborated with vendors for network administration and troubleshooting.
· Implemented and maintained VPN connectivity with third-party partners.
· Coordinated ATM, mobile app, and NADRA service connectivity.
· Documented and maintained records, including SLAs and incident reports.
· Established primary data center and DR site.
· Configured and maintained diverse networking equipment.
· Facilitated VPN connectivity and coordinated with vendors for project deployments.
· Troubleshot network and data center issues.
· Managed servers, routing, switching, and firewall configurations.