Mumtaz Alam Malik, Senior IT Audit Manager

Mumtaz Alam Malik

Senior IT Audit Manager

Tamer

البلد
المملكة العربية السعودية - جدة
التعليم
بكالوريوس, Computer Sciences
الخبرات
15 years, 4 أشهر

مشاركة سيرتي الذاتية

حظر المستخدم


الخبرة العملية

مجموع سنوات الخبرة :15 years, 4 أشهر

Senior IT Audit Manager في Tamer
  • المملكة العربية السعودية - جدة
  • أشغل هذه الوظيفة منذ سبتمبر 2018

Responsible for the internal controls and risks of the company's technology assets. This role includes identifying the weaknesses in the system's network and creating an action plan to prevent security breaches in the technology.

Senior IT Audit Manager في TAMER Group
  • المملكة العربية السعودية - جدة
  • أشغل هذه الوظيفة منذ يناير 2022

Senior IT Audit Manager with 14+ years of experience in managing and executing comprehensive IT audit programs for multinational organizations.

Proven track record of delivering high-quality audit services, identifying and mitigating IT risks, and enhancing internal controls.

Skilled in leading cross-functional teams, developing audit methodologies, and implementing best practices to ensure compliance with regulatory requirements and industry standards.

Strong expertise in assessing IT governance, IT infrastructure, cybersecurity, data privacy, and business continuity.

A strategic thinker with excellent communication and stakeholder management skills, driving organizational change and fostering a culture of continuous improvement.

Dedicated to driving efficiency, optimizing IT processes, and adding value through actionable recommendations.

ISACA Certified Information Systems Auditor (CISA)
ISACA Certified in risk and information system controls (CRISC).
ISACA Certified Data Privacy Solution Engineer (CDPSE).
Cybersecurity Audit Certificate.

Senior IT Auditor في Nahdi Medical Company
  • المملكة العربية السعودية - جدة
  • سبتمبر 2015 إلى سبتمبر 2018

- CISA Certified
- IRCA Trained ISO 22301:2012 BCMS, Lead Auditor

- Responsible for the management and delivery of IT and business process audits to ensure business risks get identified and appropriately managed before the strategic objectives get adversely affected.

- Perform general and application control reviews for simple to complex computer information systems.

- Perform information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.

Technical Consultant في Logici Information System
  • باكستان - كراتشي
  • ديسمبر 2012 إلى أكتوبر 2014

Being part of Technical Team of oracle retail implementation project for several sales corporations, major responsibilities included

 Integration of oracle retails with external systems.
 Identification, Analysis and design of integration points.
 Configuration and execution of integration methodology on Oracle Retail Integration Bus (ORIB).
 Developing PL/SQL Procedures and business logics on various customize modules.
 Development of custom API's and integration of custom modules with standard application modules through provided standards in ORIB for Oracle RETAILS.
 Development of custom shell programs.
 Development of custom pro*c programs.

System Analyst في Gull Ahmed Textile Mils Ltd
  • باكستان - كراتشي
  • يناير 2012 إلى ديسمبر 2012

Job Period : From JAN. 2012 to date
Designation : System Analyst
Role : Techno-Functional
Responsibilities:

Part of Technical Team of an in-house ERP implementation project, providing support, report development and maintenance on SCM, OM, INVENTORY and HRMS modules
Implementing Order Management, Bills of Material, HRMS & Payrollin techno-functional role.
Leading a Team, integrating Order Management and Bills of Material with custom Discrete Manufacturing module, further
 Custom Form development in Oracle Application Framework (OAF).
 Developing PL/SQL Procedures and business logics on various customize modules.
 Development of custom API's and integration of custom modules with standard application modules through provided Interfaces and standard APIs for Oracle EBS R12.
 Report development.
 Personalization and Extension.
 EBS R12 Supply Chain Management
 HRMS
 Integration of Order Management & Bills of Material with custom discrete manufacturing application

Technichal Consaltant في Inbox Business Technologies
  • باكستان - كراتشي
  • فبراير 2010 إلى ديسمبر 2011

Was part of Technical Team of an ERP implementation project intended for a national defense organization, Phase 1 included locational implementation of SCM and EAM, which was successfully developed, major responsibilities included.

 Custom Form development in Oracle Application Framework (OAF).
 Developing PL/SQL Procedures and business logics on various customize modules.
 Development of custom API's and integration of custom modules with standard application modules through provided Interfaces and standard APIs for Oracle EBS R12.
 Preparing AS-IS, TOBEs and TDR for the implementation of ERP.
 Designing custom Workflow and personalization for EBS R12.

Software Engineer في Emmaculate
  • باكستان - كراتشي
  • مارس 2008 إلى فبراير 2010

* Complete analysis, design and development of MCB E-payments system (online transfer and home remittance system).

* Complete analysis, design and development of KASB EnVoy System (home remittance system).

* Involved in analysis and development of enhancements for UBL’s CARS (credit analysis and reporting system) application.

* Provided support and involved in new developments for Bank Alfalah’s CARS application.

* Provided support and involved in new developments for I.G.I M.F.I.S (mutual fund investment system) application.

* Over all analysis, database designing and optimization of Sieman’s VMP(vehicle management portal) .

الخلفية التعليمية

بكالوريوس, Computer Sciences
  • في Federal Urdu University of Arts, Science and Technology
  • ديسمبر 2007

Specialties & Skills

Internal Controls
Cyber Security
IT Audit
Risk Management
Audit Command Language (ACL)
IT Risk Management
Data analysis
Business Continuity management
Data Modeling
SQL / PL SQL programing
IT Governance
IT Compliance Audit
IT Auditor
IT Infrastructure Audit

اللغات

الانجليزية
متمرّس

العضويات

ISACA
  • Professional Member
  • October 2019

التدريب و الشهادات

CDPSE (Certified Data Privacy Solution Engineer) (الشهادة)
تاريخ الدورة:
May 2020
ISACA Cybersecurity Audit Certificate (الشهادة)
تاريخ الدورة:
April 2020
ISO 22301:2012 Business Continuity Management Lead Auditor (Training) (الشهادة)
تاريخ الدورة:
December 2017
صالحة لغاية:
December 2020
CRISC (Certified in Risk & Information System Controls) (الشهادة)
تاريخ الدورة:
January 2020
CIA (Certified Internal Auditor) (تدريب)
معهد التدريب:
Power Resource Corporation
تاريخ الدورة:
November 2015
المدة:
40 ساعة
CISA (Certified Information System Auditor) (الشهادة)
تاريخ الدورة:
August 2017
صالحة لغاية:
January 2021

الهوايات

  • Reading, Writing and Exploring