Technology Risk Manager – EY – Montreal, Canada (2022 – Today)
- - IT General Controls and Application Controls (ITGC, ITAC),
- - Service Organization Controls reports (CSAE 3416, SOC2, 4400),
- - SOX/PCAOB/CPAB audits management,
- - Financial data Migration and transformation testing.
IT Risk & Advisory Manager – Deloitte – Casablanca, Morocco (2018 - 2022)
- - IT General Controls and Application Controls (ITGC, ITAC),
- - Data Analytics (ACL),
- - Security and privacy laws and regulations (GPDR),
- - Service Organization Controls reports (ISAE 3416, SOC2),
- - NIST, COBIT, SOC2 reporting framework,
- - Consulting sub-services such as Internal Audit,
- - Performance Improvement and Cyber Security,
- - Cyber Threat Management; Identity and Access Management; Data Protection and Privacy; Business
- - Resilience; Audit SAP, and Oracle.
Service Delivery Manager – CGI – Casablanca, Morocco (2017)
- - Managing IT staff by overseeing, recruiting, and training employees,
- - Analyzing the IT budget and maintaining cost-effectiveness,
- - Monitoring daily performance of IT systems, including servers, programs, and networks,
- - Troubleshooting problems and increasing overall efficiency,
- - Developing data backup systems and disaster recovery contingencies,
- - Staying up to date with new IT developments in the industry,
- - ISO27001 audit certification management.
Transition & Transformation Project Manager – IBM – Wroclaw, Poland (2016 - 2017)
- - Managing projects and programs in complex environment,
- - Working closely with the customer, suppliers and to lead project team to deliver medium size and large Transition & Transformation projects,
- - Overall responsibility for managing scope, cost, schedule, and contract deliverables, according to the project charter or contract,
- - Applying techniques of planning, tracking, change control and risk management as well as day to day direction to the project team and regular project status to the client.
Infrastructure Projects Team Leader – BNP Paribas – Casablanca, Morocco (2013 - 2016)
- - Program and change management,
- - Team leader of Project Managers on infrastructure, datacenters, virtualization, and system,
- - Expert in Microsoft, Vmware, Lotus Note, IBM Tivoli, SCCM environments, Antivirus, RPO & RTO, PCA, PSI and PCI DSS,
- - Monitoring deployment, backups, migration, infrastructure, and level 3 support,
- - General Data Protection Regulation, Intrusion detection, Risk analysis and mitigation, Cloud security & Security analysis.
IT Manager – Phone Group – Casablanca, Morocco (2008-2012)
- - System and network administration,
- - Incident support Level 2, Level 3,
- - Routing, Firewalls, and IDS, IPS Management,
- Backup management (NetBackup)