Feb 2025 – Jan 2026 · 11 mos · Remote

• I actively contributed to ISACA as an Exam Question Writer and Social Media Advocate, enhancing exam quality and ISACA's online engagement.

Aug 2019 – Jun 2022 · 2 yrs 10 mos · West Midlands, England, United Kingdom

• As an Acting Manager, I led a range of IT audit engagements, including external and internal IT audits, SSAE 18 (SOC 1), ISAE 3000 (SOC 2), and ISAE 3402 engagements, overseeing the complete engagement lifecycle from planning through to final delivery.
• My responsibilities involved project management, driving all phases of the audit process, and managing logistics such as budgeting, resource allocation, and independence checks. I worked closely with senior stakeholders to ensure timely, high-quality delivery within budget and provided regular reporting on progress. Leading a team of 5–7 members, I assigned and supervised tasks, coordinated with cross-border team members, and guided status meetings with senior client stakeholders.
• Key deliverables in my role included IT General Controls reviews (e.g., Change Management, User Access Management, Patch Management), security controls at operating system and database levels, and assessments of physical and environmental controls at data centers. I also performed business process and application controls reviews, SOX controls testing, and reporting under SSAE 18 and ISAE 3402 standards.
• Additionally, I led specialized engagements, including onsite vendor assessments based on ISO 27001, PCI DSS, and NIST standards, SOC readiness assessments, and collaborated with the Robotics and Automation team to streamline the audit process through automation.

Nov 2016 – Aug 2019 · 2 yrs 9 mos · London Area, United Kingdom

• At EY, I supported IT audit and advisory services across multiple cleints, contributing to diverse assurance and advisory engagements.
• I was responsible for IT audit support in both external and internal audits, helping assurance teams understand technical aspects of client processes and conducting risk assessments to identify key controls.
• My responsibilities included reviewing IT general controls (e.g., IT Governance, Change and Access Management, Backups) and testing application controls for critical systems like SAP and Oracle. I documented audit work in line with EY, IIA, and other standards and prepared audit reports for executive management.
• Additionally, I served as a mentor to junior staff, fostering their growth and technical development.
• Beyond standard audit activities, I contributed to specialized projects. These included audit readiness assessments against ISO 27001 and PCI DSS standards, a quality review of a leading bank's internal audit department, and an IT maturity assessment for a government organization to identify process improvements. I also led an ERP assignment to streamline a client’s year-end closing process, working with assurance teams to align financial records with audited accounts.

May 2016 – Oct 2016 · 5 mos · Bahrain & Qatar

• As a Lead IT Auditor reporting directly to three partners across two countries, I played a pivotal role in driving IT assurance and advisory services across diverse client engagements.
• My responsibilities included end-to-end engagement management, providing IT audit support for both external and internal audits, and conducting comprehensive reviews of IT general and application controls for business-critical systems.
• I worked closely with clients to understand their business processes and information systems, ensuring a tailored audit approach.
• Additionally, I was involved in key administrative functions like preparing planning memos, budgets, and proposals.
• I also took on leadership responsibilities, hiring, training, and managing junior staff and conducting workshops to enhance IT audit awareness across the firm.

Oct 2015 – Jan 2016 · 3 mos

• As above under EY's employment section

Mar 2014 – May 2016 · 2 yrs 2 mos

• At EY Pakistan and Saudi Arabia, I contributed to various assurance and advisory engagements, providing IT audit support for both external and internal audits.
• I gained a strong understanding of client business processes and information systems, guiding assurance teams on technical business aspects and conducting risk assessments to recommend key controls.
• My role included reviewing IT general controls (e.g., IT Governance, Change and Access Management, Backups) and performing application controls testing for critical systems. I also assessed database, operating system, and security settings for core applications with financial impact, such as SAP and Oracle.
• Additionally, I prepared internal documentation, adhered to IIA and other audit standards, produced audit reports for executive management, and mentored junior staff to enhance team capabilities.

Jul 2014 – May 2016 · 1 yr 10 mos · Lahore

• Certified Information Systems Auditor (CISA) Course