Associate Director | Information Risk Management at KPMG Qatar (2025-10 – Present)
- Leader for Information Risk Management function and IT Audit engagements within External Audit for Qatar office reporting to Partners and Head of Audit, supporting financial statement audits under ISA 315 across Banking, Financial Services, Government, Telecom, Oil & Gas, Manufacturing, Hospitality, Insurance, and regulated industries.
- Evaluate IT General Controls (ITGCs), Application Controls, Interface Controls, and Journal Entry Testing, assessing technology risks impacting financial reporting.
- Manage engagement planning, budgeting, financial forecasting, and resource allocation to ensure efficient delivery and optimal utilization.
- Pursue advisory opportunities in IT Internal Audit, Cybersecurity, Business Continuity Management (BCM), and IT Governance to support business growth and team utilization during audit off-season.
- Perform quality reviews and Second Line of Defense (2LoD) reviews to ensure engagement quality, consistency, and efficient delivery.
- Participate in Audit Committees presenting IT observations, management letters, and risk implications.
Senior Manager | Digital Risk Consulting at EY (2024-12 – 2025-09)
- Oversaw IT resource management for the Jordan Resource Hub, serving clients throughout the MENA region.
- Led proposal development and pursued business development opportunities across various sectors, focusing on IT, Cybersecurity, and Business Continuity Management (BCM).
- Managed comprehensive risk assessments for the Digital Cluster of a UAE government entity, developing inherent and residual risk registers and supporting multi-year IT Audit planning.
- Led the Software Asset Management (SAM) and Hardware Asset Management (HAM) review for a UAE government entity.
Manager | Technology Risk Assurance at PwC (2022-04 – 2024-11)
- Managed IT resources for the Jordan Resource Hub supporting the MENA region.
- Performed IT Audits, Cybersecurity Audits, and IT Risk Assessments across UAE, KSA, Kuwait, Oman, and Qatar, covering Banking, Financial Services, Telecom, Government, Oil & Gas, Insurance, Manufacturing, Hospitality, and regulated industries.
- Conducted Revenue and Margin Assurance review engagement for a telecom operator in Qatar.
- Managed SAP Post Implementation Reviews in KSA, including Data Migration and Segregation of Duties (SoD) assessments.
- Developed IT and Cybersecurity Policies & Procedures and Delegation of Authority (DoA) frameworks in KSA.
- Conducted IT Governance and COBIT 2019 Assessments for banks in Jordan.
- Supported proposal development and pursuit of opportunities across Technology Risk.
Manager | Information Risk Management at KPMG (2021-11 – 2022-04)
- Managed External IT Audits supporting financial statement audits across Jordan, Iraq, Lebanon, and Palestine. Managed resources and budget for all IT Audits.
- Oversaw IT Audit including IT General Controls and Application Controls for financial and non-financial industries.
Senior Consultant | Technology Risk at EY (2019-06 – 2021-10)
- Conducted external and internal IT audits of IT General Controls and Application Controls for various industries in KSA, UAE, Jordan, and Palestine.
- Participated in System Hardening and Patch Management in KSA.
- Conducted IT Functional and Technical Assessment in KSA.
- Participated in COBIT 2019 review and IT Risk Assessment for banks in Jordan.
Managed Services Operations Manager at NOKIA (2018-03 – 2018-12)
- Oversaw FTTH Managed Services operations for Orange Jordan, including Field Maintenance, Fault Management, and NOC activities.
- Ensured SLA compliance, service delivery performance, and operational efficiency.
- Monitored operational KPIs, conducting root cause analysis and corrective actions.
Network and Security Operations Senior Engineer at UMNIAH MOBILE COMPANY (2015-05 – 2017-11)
- Managed Network and Security Operations across multi-vendor telecom environments.
- Oversaw network security controls, firewall administration, and infrastructure protection.
- Monitored network performance, incidents, and security events.
- Supported LTE / 4G network expansion initiatives.
- Participated in incident management and operational risk mitigation activities.
Network O&M Team Leader at DAMAMAX Broadband Solutions (2009-03 – 2015-02)
- Managed Network Operations Center (NOC) activities, including monitoring, incident management, and SLA reporting.
- Managed Data Center operations, ensuring infrastructure availability, performance, and operational stability.
- Oversaw network performance, availability, and security configurations.
- Developed operational processes, KPI frameworks, and reporting mechanisms.
- Coordinated network corrective, preventive, and expansion activities.
- Supported infrastructure deployments and operational risk management activities.
