MUHAMMAD SARIM AKHTAR

Mobile: +965-97420225 Office: +965-1881111 Ext: 3159 Fax: +965-24847244 sarim75@yahoo.com

CAREER OBJECTIVE
To obtain a senior role in the Internal Audit or Loss Prevention unit and provide management, guidance and expertise to effectively address operational & IT risks, internal control weaknesses and fraudulent activities.

CAREER SUMMARY
An experienced professional with more than 12 years in the field of risk based operational & IT auditing and fraud investigations specifically related to automotive, retail and manufacturing industries which is supplemented by professional qualifications CISA, MCSE, MCS, BE. Most significant achievements were audits of procurement, inventory, Kerridge, SAP, network infrastructure and implementation of EnCase. Investigation of complex frauds resulted in the recovery of $40,000 and filing of two criminal cases of $2 mil each. Prcis writing comes naturally to keep the subject matter clear and concise. Scheduled to take Certified Fraud Examiner (CFE) exam in March, 2013.

PROFESSIONAL HIGHLIGHTS
Auditing: Managed entire audits from planning, risk assessment, fieldwork, reporting, closing and follow-ups. Audited automotive, retail, manufacturing, FMCG and logistic businesses. Assessed business operational risks & controls, specifically related to procurement, inventory, sales, warehousing, logistics, cash, showroom operations, fixed assets, payroll and contracts. Assessed IT risks & controls against COBIT and ISO-17799 standards for governance and assurance around IT operations, security, networking services and ERP applications. Audited Kerridge, SAP, Sage and retail banking application for user access, concentration of duties, configuration, data recovery capabilities and operations integrity. Investigations: High success ratio of over 90% achieved with unique ways of evaluating, thoroughness, resourcefulness and persistence. Developed a fraud whistleblower hotline solution consisting of posters, email, telephone and webpage. Utilized EnCase and other tools for digital forensics, electronic discovery and data mining. Retrieved data and deleted files from live computers and passive hard disks. Extracted emails, document passwords, text from images and traced emails. Organized, planned and conducted successful interviews with alternate strategies and questions. Information Technology: ACL analyzed data having multi million records with automation enabled through scripting. Business Objects & SQL extracted data from different databases having SAP, Kerridge, Faims and Sage. Developed software for mobile & telephone banking ATM, POS and SWIFT. Management and work methodology: Managed, mentored and guided teams of auditors and software development staff. Planned and organized delivery of multiple assignments timely and implemented innovative ideas to get the job done. Identified problems and resolved them by keeping things simple, short and targeted.

PROFESSIONAL EXPERIENCE

Alghanim Industries [http://www.alghanim.com] since May, 2005

Designation: Compliance Manager (since May, 2012) Role: Fraud Investigation Responsibilities: Lead and manage the entire investigation independently. Develop the scope and execution plan. Conduct the investigation. Arrange the required information and resources. Conduct interviews. Assess internal control deficiencies. Draft the report and finalize it with management. Liaison with the HR and Legal. Prepare witnesses for Police investigation. Achievements: Successfully investigated warehousing, procurement, sales and IT frauds. Proved guilt that lead to terminations and criminal proceeding. Control improvements resulted in stemming revenue leakage. Recovered $40,000 and two cases of criminal suites of $2 mil each. Implemented EnCase on the enterprise. Designation: Internal Audit Manager (April, 2010 2012) Designation: Sr. Internal Auditor (May, 2005 March, 2010) Role: Auditing Operations & IT Role: Auditing Operations & IT and Fraud Investigation

MUHAMMAD SARIM AKHTARs

Resume

sarim75@yahoo.com

(+965) 97420225

Responsibilities: Lead and manage entire audit and investigation cycle either independently or with a team. Develop risk assessment, work programs and testing plans. Draft complete audit findings, getting managements agreement to the facts and finalize the reports. Conduct opening and closing meetings. Provide feedback on various policies and procedures. Page 1 of 2 Significant Audits: Automotive vehicle, spare parts and service operations, procurement, inventory and warehousing. Retail electronics and furniture showroom operations, procurement, inventory and warehousing. Manufacturing procurement, production, material management and logistics. Kerridge infrastructure, user access, security, change management, and end of day procedures. SAP basis and authorizations FI, SD, MM and PP modules. IT governance, operations, networking and access controls. Achievements: Implemented over 400 operational & IT control recommendations. Regularly got appreciation from the executive management on the quality of observations and audit reports. Some of my identified risks subsequently materialized into frauds and led to investigations.

Habib Metropolitan Bank Limited [http://www.hmb.com.pk] Nov 2003 May 2005

Designation: Manager, Audit & Systems Role: Information Systems Auditing & Security Responsibilities: Audited information systems. Redefined and supervised banking systems user access. Reviewed and commented on adaptation of new technologies and systems. Developed utilities for data extraction. Developed reports on red flags or exceptions. Developing template documents for operations. Achievements: Successfully reengineered user access for the core banking system with segregation in duties. Redesigned bank account opening forms. Reviewed and recommended improvements on data backup, migration and synchronization between sites.

PIBAS Inc. [http://www.pibas.com] Aug 2000 Sep 2003

Designation: Project Leader and Sr. Programmer Analyst Role: Software Development Responsibilities: Lead the development and deployment of software applications using various programming languages. Supervising the project to get ISO 9001:2000 certification. Exploring new technologies for enhancing banking solutions. Achievements: Developed mobile banking solution using WAP in 2005 when it was first introduced. Developed universal interface applications for mobile & telephone banking ATM, POS and SWIFT. Successfully reengineered SDLC to gear up the company for certification in ISO 9001:2000.

EDUCATION \ CERTIFICATION
C.I.S.A. MCS BE M.C.S.E. *MBA *C.I.A. Certified Information System Auditor Master of Computer Science Bachelor of Engineering (Mechanical) Microsoft Certified System Engineer Masters in Bus. Admin.(MIS), *Half completed Certified Internal Auditor, *Parts completed I,II,IV

YEAR 2002 2000 1998 1998 2005 2006

INSTITUTE I.S.A.C.A. (USA) Karachi University N.E.D. University Microsoft (USA) I.B.A. Karachi I.I.A. (USA)

TRAININGS
EnCase Online conceptual and practical training on Computer Forensics-I 2012 SAP implementation of controls in different modules 2012. Business Objects introductory level training 2010 NLP (Neuro Linguistic Programming) awareness course 2009 ACL (Audit Command Language) advance level training on Scripting 2008. CISCO training on router administration and configuration 2003. SWIFT funds transfer and trade finance message training 2002. Computer networking training at Micro Innovations & Technology 1997.

Page 2 of 2