Shahzad Farooqi

A highly accomplished, PMP-certified, Information Systems Audit & IT Operations Leader with over 20 years of elite experience within top-tier financial institutions. Proven track record across the entire banking audit universe, specialized in leading high-stakes risk assessments of Core Banking Applications, PMO, IT Infrastructure, Cyber Security and Business Continuity/Disaster Recovery (BCP/DRP) frameworks. Combines deep technical compliance expertise with extensive hands-on operational leadership, derived from serving as AVP-Manager Information Systems Audit, Unit Head of IT Operations & ADC within large-scale Islamic Banking networks.

A strategic thinker recognized for transforming complex regulatory mandates into robust internal controls, mentoring high-performing audit teams, and delivering actionable, governance-driven risk mitigation to executive boards.

AVP-Manager / Senior Information System Auditor - Al Baraka Bank

(2025-09)

• Led comprehensive risk-based audits of the bank's core banking applications and underlying system infrastructure. Evaluated application controls, database security configurations, and user access management protocols to mitigate operational risks.
• Conducted IT audit of PMO processes, evaluating project governance, controls, and compliance with organizational policies and PM frameworks.
• Conducted thorough security and operational compliance audits of mobile banking platforms, internet banking systems, and ATM networks. Assessed data encryption standards, transaction processing vulnerabilities, and API integration vulnerabilities.
• Evaluated the bank's IT governance framework against SBP regulations, COBIT standards, and internal cybersecurity policies. Reviewed the alignment of IT strategies with business objectives while identifying control gaps in asset lifecycle management.
• Audited the design, readiness, and execution efficiency of the bank's technical Disaster Recovery plans. Verified data replication integrity, failover window timelines, and backup management protocols for critical systems.
• Conducted risk-based audits of the bank's IT infrastructure, including servers, network architecture, and data center operations, to assess security, availability, and performance controls. Evaluated system configurations, patch management, network security controls, and access mechanisms to identify vulnerabilities and recommend improvements for enhanced resilience and compliance.

Unit Head Operation IT & Coordination / Regional Head IT & ADC - National Bank of Pakistan (NBP) - Aitemaad Islamic Banking Region Head Office

(2017-01 - 2025-08)

• Ensured smooth daily execution of all regional branch IT and application operations.
• Managed the regional rollout of the Core Banking APAC application, strictly aligning workflows with AML/KYC regulatory requirements.
• Supervised the technical deployment of regional Zakat deductions, remittance payments, and debit card infrastructure.
• Governed user access provisions for specialized transaction systems including Western Union, Foree Remittance, and Hajj payment portals.
• Oversaw infrastructure connectivity by implementing primary and secondary communication links across regional offices.
• Monitored the entire regional ATM network to ensure maximum uptime, smooth transaction flows, and effective vendor SLA management.

Business Analyst / Project Manager (Core Banking Application) - National Bank of Pakistan (NBP) - Islamic Banking Group

(2011-01 - 2016-12)

• Directed the deployment of the Profile Direct (FIS) Core Banking Application across dedicated Islamic banking branches, ensuring adherence to project scope, governance standards, and timelines while driving operational efficiency.
• Managed the end-to-end implementation of Digital Mobile Banking services for the Islamic Banking Group.
• Implemented Agile/Scrum practices to improve team productivity.
• Directed project deployments for Alternate Delivery Channels (ADC) including ATMs, online banking portals, and internet banking systems.
• Successfully transitioned legacy, offline branch networks into real-time, online functional units.
• Managed full-cycle data migration strategies, transferring critical data sets safely from legacy platforms to the new Core Banking Application.
• Served as Task Team Lead for User Acceptance Testing (UAT) covering Core Banking transactions, fund transfers, remittances, clearing, and ADC modules.
• Authored comprehensive step-by-step user manuals and technical documentation for CIF creation, account opening, and clearing operations.
• Collaborated closely with the PMO and IT Group to map out functional requirements for Sharia-compliant financial products (Savings, Current, and TDR).

O.G.-II / Information System Auditor - National Bank of Pakistan (NBP) - IS Audit & Automation Wing, Audit & Inspection Group, Head Office

(2004-04 - 2010-12)

• Formulated and designed the bank's annual risk-based Information System Audit Plan.
• Served as Team Lead for comprehensive risk audits across Regional Data Centres, business applications, and online branch networks.
• Evaluated business applications to identify internal control gaps and provided strategic, value-added remedial recommendations.
• Acted as the primary technical resource person delivering critical systems and process mappings to the BCP/DRP core planning teams.
• Assessed IT governance frameworks to validate data integrity, system security, and operational efficiency.
• Conducted corporate management audits of the IT Division, Compliance Division, and Operations Group to improve procurement and security frameworks.

Software Engineer - Micro Asian Technologies (Software House)

(2002 - 2003)

• Developed bespoke software applications using modern programming languages and development IDEs.
• Executed structured system analysis and engineering designs for modular systems including Payroll, HR, Real Estate, and Inventory Management.

IT Division Intern - U.S. Publishers (Pvt.) Ltd.

(2000 - 2000)

6-Month Program

• Contributed directly to the E-Commerce development team within the corporate Technology Incubator Group.
• Assisted businesses in establishing online operations, designing shopping carts, and deploying secure payment gateways.

MBA - Banking & Finance - Preston University (2006 - 2007)

B.S. - Computer Science - University of Karachi (1997 - 2001)