MUHAMMAD's CV
MUHAMMAD NAUMAN
Muhammad Nauman
Profile summary
Strategic technology audit professional with 18 years shaping risk management and information systems governance outcomes across 15 organizations including operations in the GCC region. Known for defining IT audit strategies and directing complex technology evaluations. Committed to maintaining high standards of regulatory compliance and internal controls.
Career highlights
Information Technology Audit Strategy: Defined information technology audit strategy and steered group-wide risk evaluations, overseeing information systems governance and security frameworks across subsidiaries.
Digital Banking Systems Review: Shaped information systems audit strategy across digital banking, remittance, and card production environments while evaluating internal controls and risk management frameworks.
Professional Qualifications: Completed professional examinations and practical experience requirements to attain Fellowship status while maintaining ongoing compliance with regulatory and ethical standards.
Audit Framework Certifications: Maintained professional audit credentials including information security management systems lead auditor and certified information systems auditor memberships.
Key skills
Professional experience
Steered group-wide information systems governance and security frameworks across subsidiaries, defining overarching IT audit strategy to evaluate enterprise risk.
- Established the IT and IS Audit function from the ground up and implemented a three-year risk audit plan.
- Directed IT audit engagements covering Oracle ERP deployments, data center physical security, disaster recovery plans, and network infrastructure.
- Managed infrastructure audits across Active Directory, file servers, biometric systems, and CCTV networks for the entire group.
Shaped information systems audit strategy across digital banking, remittance, and card production environments, evaluating internal controls, risk management frameworks, and technology processes to secure system reliability and deliverables.
- Executed post implementation reviews of website redesign projects while designing audit plans for information systems.
- Analyzed information technology processes and business controls to identify internal control risks and propose solutions.
- Monitored mobile device management solutions for email access and endorsed privileged access manager implementation.
- Executed detailed reviews of internal processes to ensure policy compliance.
- Generative AI, Machine Learning, and Quantum Computing - Transforming the Internal Audit Profession by ARC (2024)
- Internal Audit facing systemic global risk shifts in a new world of ESG assurance by ARC (2024)
- Lean Six Sigma Yellow Belt Training by Ali & Sons Holding, Abu Dhabi, UAE (2022)
- Hands-on training for Microsoft Power BI – Data Analytics & Visualization by Finance House, Abu Dhabi, UAE (2021)
- Internal Audit Conference – “The new Era: Challenges & Opportunities” by UAE IIA, Dubai, UAE (2020)
- Received an award for technical insights and creativity on artificial intelligence use cases from the Group Chief Risk and Assurance Officer at e&.
- Evaluated physical and environmental security controls of data centers to assess risk exposure.
- Reviewed disaster recovery plans and system backups to verify operational continuity standards.
- Directed multi-entity audit assessments for payment systems encompassing the Image cheque clearing System, Direct Debit System, Dividend Management System, and NEST FTS.
- Recommended the application of hashing mechanisms on funds transfer instruction files within the UAE Funds Transfer System.
- Completed professional examinations and practical experience requirements to attain Fellowship status.
- Maintained ongoing compliance with regulatory and ethical standards set by the governing body.
- Maintained active professional accounting standards and qualifications.
- Engaged with international accounting frameworks.
- Evaluated debit and credit card production platforms, including IRIS and Dexxis, alongside SMS banking and home remittance systems.
- Audited phone banking applications such as CRM, Genesys solutions, and Sybase 365, plus consumer retail banking systems like CAMS auto, personal finance, and lease management.
Education
Applied Accounting