SearchSearch

Sign In
 Sign in or Register
Buyer zone
Find skilled Sellers for your organisation
Seller zone
Tell organisations about your skills

About us

Contact us

FAQs

Testimonials

Site map

Can we help?
tel0870 389 3244
emaile-mail

infoYou are currently viewing the web site for registered charities, showing discounted Seller rates.


Access our main site

HomeSOX Compliance Auditor
[ Printer friendly ]

Freelance SOX Compliance Auditor

SOX Compliance Auditor, Information Technology experience, Quality Assurance Manager, CISA Auditor, CISM Systems Manager

Rating:Unrated (New)
Hourly Rate:
Available From:
Seller ID: 288697

[ Top | CV | Skills ]

CV

PROFILE SUMMARY

Methodologies, Frameworks, Processes and Standards

ˇ business and IT experience in developing and implementing strategies, methodologies, frameworks, policies and procedures for IT Auditing, Enterprise Information Security Management, Risk Management, Software Quality Assurance, Quality Control, Procurement & Outsourcing Management, Deployment Management, Project Management, Configuration Management, Incident/Problem Management, Change Management, Release Management, Service Level Management, Availability Management, Capacity Management, Business Continuity (BCP) & Disaster Recovery (DRP)

ˇ Used standards and guidelines from ANSI, ITU-T, IETF, IEEE, ISO, W3C, GAISP, IFAC, British Standards

ˇ Experienced in RUP (Rational Unified Process), SEI-CMM-SW (Capability Maturity Model), SSE-CMM (Systems Security Engineering-Capability Maturity Model), SDLC, ISO 9001:2000 (Quality Management System), BS 7799/ISO 17799, ITIL Framework, COSO Framework, ISC2 CBK, ITGI COBIT, SIX SIGMA

Program/Project Management

ˇ Established, managed and monitored PMO (Project Management Office)

ˇ Expert in Project Management standards and methodologies i.e., PMBOK (Project Management Body of Knowledge), PRINCE2, IV&V, IEEE Std. 1058 Standard for Software Project Management Plans

ˇ Experienced in Project Integration Management, Scope Management, Time Management, Cost Management, Quality Management, Human Resources Management, Change Control Management, Communication Management, Risk Management and Procurement Management

ˇ Participated in negotiating, creating, documenting, reviewing of MA, NDA, SLA, UC, OLA, EULA

Quality Assurance Management

ˇ Experienced in system's Quality Control, Quality Improvement, Systems Analysis as well as design and testing of B2B, B2B2C, P2B, B2C web based and Mainframe applications

ˇ Excellent skills in evaluating methodologies, hiring & retaining SQA staff and measuring effectiveness

ˇ Excellent skills in IV&V Independent Validation & Verification of projects for large enterprise systems to meet standards, and requirements

ˇ Expert in various kinds of Functional and Non-Functional related testing such as: application & infrastructure security testing, failover testing, scalability testing, environment testing, integration testing, performance testing, load testing, stress testing, volume testing, black box testing, white box testing, functionality testing, client usability experience (CUE), screen navigation testing and GUI testing

Information Security & Risk Management

ˇ Developed various enterprise policies, processes and guidelines for security and internal controls

ˇ Uncovered, documented and contained security breach incidents and violation of policies

ˇ Strong knowledge & skills in managing, monitoring and controlling security of large IT infrastructures

ˇ Experienced in integrating different frameworks like COSO, COBIT & ITIL in security audit planning

ˇ Excellent knowledge and skills in preparing, implementing and auditing BCP/DRP

ˇ Expert in Risk Management models (Qualitative & Quantitative) and implementing remediation plans

ˇ Experienced in auditing authentication mechanisms (single & two-factor), SSO and biometrics

ˇ Knowledge of Privacy Act PIPEDA, Sarbanes-Oxley Act, Bank Secrecy Act (BSA), Office of Foreign Asset Control (OFAC), BASEL II, Anti Money Laundering (AML) , AICPA-SAS70 SAS99, Open Web Application Security Project (OWASP), Open Source Security Testing Methodology Manual (OSSTMM)

Auditing / Sarbanes-Oxley Compliance

ˇ Experience of 3 projects on Sarbanes-Oxley 404 compliance (Bank of Montreal, INCO and CIBC Mellon)

ˇ Intimate hands on knowledge of Sarbanes-Oxley Act and its implications on company's internal controls and integrating with COBIT & COSO frameworks

ˇ Experienced in designing and documenting internal controls to satisfy internal control objectives

ˇ Hands on experience in preparing audit test strategy and test plans for compliance and substantive testing

ˇ Ability to look beyond the testing structure and identify key gaps for remediation

ˇ Superb understanding of mapping IT processes with internal controls by leveraging ITIL framework

ˇ Excellent skills in conducting QC (Quality Control) of the audit work and coordinate for improvements

ˇ Delivered 7 training seminars on SOX, Internal Controls, Operations and Change Management (2004)

ˇ Well nurtured skills in communicating and negotiating the risks and remediation with teams

Relationship Management & Personal Skills

ˇ Superb skills in managing relations with senior management(CEO, COO, SVP, VP and Director levels), technical teams, vendors, clients and line of business

ˇ Good understanding of sales funnel process, customer service and service level support

ˇ Superb relationship management, team building, teamwork and leadership skills

ˇ A natural and a planning leader who can switch gears to amicably handle technical, interpersonal and organizational policy related matters

ˇ Excellent interpersonal, communications and negotiation skills

ˇ Experienced in implementing framework (Training & Development) to facilitate learning at individual, team and organizational levels.

CERTIFICATIONS & EDUCATION

PMP (Project Management Professional) from PMI, USA ( Completed)

CISSP (Certified Information Systems Security Professional) from ISC2, USA ( Completed)

ISSMP (Information Systems Security Management Professional) from ISC2, USA ( Completed)

ITIL-Foundation (IT Service Management Foundation Certificate) from ISEB, U.K ( Completed)

CISA (Certified Information Systems Auditor) from ISACA, USA ( Completed)

CISM (Certified Information Security Manager) from ISACA, USA ( Completed)

CIA (Certified Internal Auditor) from IIA, USA ( Cleared Part-IV, waiting for exam of Part-I, II & III)

CFE (Certified Fraud Examiner) from ACFE, USA ( Exam in 2006)

MBA Diploma in Business Management (1yr, 10 courses)

Lemania College, Lausanne, Switzerland

Bachelor's Degree in Administration and Information Management (42 courses)

School of Information Technology Management, Ryerson University, Toronto

Bachelor's Degree in Journalism and Political Science (2yr)

Forman Christian College (Punjab University), Lahore

Information Systems Management Certificate (1 yr program)

School of Information Technology Management, Ryerson University, Toronto

Telecommunications Management Certificate (1 yr program)

School of Information Technology Management, Ryerson University, Toronto

PROFESSIONAL ASSOCIATIONS & MEMBERSHIPS

Member of the "Project Management Institute" (PMI)

Hold "Member" grade in the "Institute of Electrical and Electronics Engineers" (IEEE) Computer Society

Member of "International Information Systems Security Certifications Consortium" (ISC2)

Member of the "Information Systems Audit and Control Association" (ISACA)

Member of the "The Institute of Internal Auditors" (IIA)

Associate Member of the "Association of Certified Fraud Examiners" (ACFE)

Member of the "Toronto Association of Systems and Software Quality" (TASSQ)

Community member of the "Harvard Business School Working Knowledge"

WORK EXPERIENCE

Apr 2005 - May 2006

Riyad Bank, Saudi Arabia

Position: Vice President

Background: Riyad Bank (founded in 1957) is one of the largest banks (Assets 74 Billion) in Middle East. Change Management Department comprises of 25 employees in 3 sub-departments i.e., Configuration, Change and Release Management Sections. I have full responsibility of managing the department from strategic, tactical and operational standpoint including the cost center. Approx cost for all Projects/CRs is over 600 Million.

ˇ Developed an integrated "Control Framework" which include hand-offs and processes of IS Security Dept, Physical Security Dept, Business Continuity Dept, Quality Control Dept, PMO, IT, Change/ Release/ Configuration Management using best practices and methodology from COBIT, ITIL, BS7799, ISC2, Gartner

ˇ Provided guidance and established CMD controls for configuration and related aspects for Seibel STARS Project (cost over 150 Million) and EMV (Europay, MasterCard & Visa) for change/release life cycle

ˇ Hired 5 new employees to close the resource gaps within the department and to kick start release audits

ˇ Engaged the Audit Department in discussions to close the lingering "Audit Exceptions" from last 2 years and closed 6 out of 9 audit exceptions with remediation plans for the outstanding exceptions

ˇ Established horizontal communication channel (TQM) by creating an Inter-Departmental Forum (recurring bi-weekly meeting) with participation from all IT and control departments to discuss & mitigate strategic, tactical and operational issues without having to push issues all the way up through vertical escalation

ˇ Developed and implemented "Release Certification Process" and standardized "Deployment Plans"

ˇ Provided roadmap for tools (Remedy, Rational, Endevor) for forward/backward traceability of CRs

ˇ Coordinated complete Risk Assessment review with KPMG and Risk Management Dept and established KRI (Key Risk Indicators) in overall change management process flow plus managing the residual risks

ˇ Presented a strategic roadmap (by leveraging ITIL, COBIT, COSO, CMM, BS 7799) to align different aspect that are sometime considered conflicting objectives i.e., Banks' Mission, senior management's vision, auditability, operational effectiveness, business time to market and proper governance

ˇ Delivered bank wide training seminars on Project Management, ITIL, COSO, SOX-404, COBIT, ISO-17799, n-Tier Architectures and CMM, Non-functional Requirement Management, Test Methodologies.

Jan 2005 - Mar 2005

Bank of Montreal - Nesbitt Burns (Canada) & Harris Bank (USA)

Position: Sr. Manager Audit Methodology & Quality Review

Project: BMO (Est. 1817, assets $265 Billion, Branches 1,156, employees 34,000) is one of the largest Banks in Canada and Harris in USA. Sarbanes-Oxley 404 compliance project is focused on (PCG, IBG, PCCG, IT) assessment of ICOFR (Internal Controls over Financial Reporting) for both BMO & HARRIS. The SOX 404 team comprised of over 40 people (CA, CPA, CIA, CISSP and CISA).

ˇ Reporting to SOX 404 Program Director for QR & Methodology work against non-negotiable timeline

ˇ Developed "Fraud Risk Assessment Methodology" (includes financials operations & IT) by incorporating requirements from PCAOB Auditing Std. 2 and US Sentencing Commission Guidelines Chapter 8 and best practices from PWC, KPMG, PROTIVITI, ACFE, CICA, COSO, AICPA-SAS99 SAS70

ˇ Quality reviewed the Test Plans Templates in Pre-Walkthrough/Testing Phase to ensure adherence to SOX Audit Methodology and to identify any weaknesses early in the Audit Life Cycle

ˇ Quality Reviewed (Post Walkthrough/Testing) the Audit Test Plans to ensure relevant controls were tested according to the Test Plan Design and proper evidences are captured

ˇ Prepared assessment of SOX Internal Audit team's audit work to identify gaps for "Design Effectiveness" and or "Operating Effectiveness" in the organizational entity level controls

ˇ Designed "Entity Level Deficiency Assessment Database" for issues to record and assess risks by individual and aggregation basis

ˇ Provided feedback to colleagues on matters related Process Level Controls, IT General Controls and Application Level Controls.

ˇ Quality reviewed the audit work in following Entity Level Areas:

o Corporate Compliance (include regulatory compliance i.e., OSFI, CDIC…etc)

o Human Resource Management (Operational Management and Governance, Institute for Learning, Employee Equity and Engagement, Performance Alignment and Compensation, Talent Management)

o Corporate Security (all controls related to physical monitoring)

o Ombudsman

Nov 2004 - Jan 2005

INCO Inc., Ontario

Position: Lead IT Auditor/PM (Sarbanes-Oxley)

Project: INCO is one of the largest mining companies in the world. Sarbanes-Oxley 404 compliance project is focused on assessment of internal controls and reporting. Systems audited: Hyperion Enterprise, CISCO IDS 4230, LURHQ Managed Intrusion Detection, Clarify eFrontOffice, PeopleSoft Financial /HRIS /Payroll /GL/AP /AM /Purchasing, Sungard Treasury Systems-GTM, BenPlus, Active Directory (AD), NT, Backup/Restore.

ˇ Managed the testing of AI (Acquisition & Implementation) & DS (Delivery and Support) which encompasses SDLC, Security Access Controls (application and infrastructure), Change and Configuration Management, Operations Controls and third party procurement management

ˇ Developed high level project plan to identify the test plan modification and execution using COBIT & COSO

ˇ Hands-on testing of systems/applications and follow up on remediation

ˇ Reported the results with preservation of audit evidences

ˇ Conducted QC (quality control) of audit work done by other auditors

ˇ Coordinated with internal audit team and consulting partner KPMG.

Jun 2004 - Sep 2004

London Life Insurance/Great West Life Insurance, Ontario

Position: Sr. Consultant (Portfolio Release Management)

Multiple Projects: Managing releases and non-functional/engineering testing of 3 projects (IIIP Program) into the Production Environment through controlled phase by phase development and testing. Infrastructure complexity consists of multiple Solaris, IBM-IHS, WebSphere Portal, LDAP, MESH eGate, Mainframe 390 z/OS, DB2 UDB, Stellent Content Management servers plus IIS ASP systems. Approx projects cost over 10 Millions.

Overall Responsibilities:

ˇ Conducted Audit and GAP analysis of the existing processes for release management, change management and configuration management to identify areas of improvement for meeting service levels

ˇ Prepared strategy, framework, processes and plan to put 3 concurrent projects into Production

ˇ Guided the team for security testing eBusiness Infrastructure and Mainframe ACF2 security rules

ˇ Conducted Non-Functional/Engineering testing (Performance, Stress, Volume, Load, Scalability, Integration and Reliability) to gain confidence in meeting organizational objectives

ˇ Coordinated the Release Management portfolio of managing 3 projects from scalability exercises to increase from 20 concurrent users to 1200 users using Rational Robot/TestManager

ˇ Provided training on ITIL, Non-Functional Testing, CMM, COBIT and SDLC

Oct 2002 - Jun 2004

CIBC Mellon (Canadian Imperial Bank of Commerce), Ontario

Position(s): e-Business Quality Assurance Manager / Release Manager/ Sr. Project Manager

Multiple Projects: (1) Investor Inquiry and Administration System using Java technologies (J2EE). This Project (costs over $5 Million) comprised of three Applications which are tied with the legacy system (LINK\4) and connected with few external systems and middleware to work as one complete system. In this create mode - my responsibilities range from defining strategy, processes and methodologies to actually performing hands-on testing with help of 7 QA Analysts, few Business Analysts and few resources from Infrastructure team. (2) Sarbanes-Oxley Compliance Project SOX404. (3) Ontario Opportunity Bond e-Commerce Project. (4) Automated Reconciliation Project (Enterprise wide software using CheckFree for Sarbanes-Oxley and Basel II compliance). (5) e-Business Enterprise Application Security Project. (6) Enterprise Fax Project.

ˇ Established KPA of Release Management for addressing the risks associated with lack of control processes that ensure integrity and availability of information systems by establishing policies, procedures, strategy, methodology and templates to effectively manage the SDLC

ˇ Performed Change Management , Configuration Management and Release Management's process review and identified weaknesses

ˇ Guided the team in implementing documented processes for establishing QA controls and implemented Peer Review Process

ˇ Conducted audits of processes in areas of Procurement Management, Configuration Management, Build Management, Change Management and delivered GAP Reports

ˇ Prepared Procurement Management policies, strategy, procedures and methodology to establish a controlled environment to provide transparency and monitoring capability

ˇ Developed Quality Assurance and Release Management Strategy to position for CMM-2

ˇ Interfaced with Line of Business, Business Executives and Marketing (from Managers to Vice Presidents) for managing the expectations from QA and delivery perspective

ˇ Performed audit of newly built, to-be Production and QA environment which include Solaris Servers, Oracle Servers, LDAP Servers, all Hardware, PIX Firewalls, IBM HTTP Servers, WebSphere Application Servers, Interface (Entire-X) to Mainframe and overall architecture

ˇ Provided guidance in the assessment stage for Enterprise Document/Content Management

ˇ Managed releases of over 14 different applications (i.e., Lotus Notes, SAS, Global One, WebSphere MQ Series, e-Business Apps, LINK\4, Corporate Website) from initiation to final Production implementation

ˇ Guided processes improvements for deployments to eBusiness and Mainframe environments

ˇ Estimated and prepared overallProject Plan for handling all aspects of testing in different environments and obtaining UAT sign offs from line of business (LOB) to Go-Live

ˇ Designed and executed test plans for Infrastructure Security, Application Security, Functional, Integration, System, GUI, Performance, Load, Stress testing using manual processes and automated tools, Rational Robot, e-Suite and Compuware QARUN

ˇ Guided the QA team for Automated Reconciliation Project (CheckFree RECON-Plus Project)

ˇ Assigned responsibilities members of QA team based on their strength and interests

ˇ Coached the QA team in testing eBusiness Applications with middleware/Mainframe

ˇ Managed all communication with line of business (LOB) and other functional departments.

Position: Sr. Project Manager (Asset Management Project)

ˇ Prepared Business Case and implementation roadmap for Asset Management (hard and soft assets) to cover asset inventory tracking and reporting

ˇ Guided Project Manager for rolling Asset Management in 3 phases. Phase-1 to cover simple asset inventory and license authentication, Phase-2 to cover integration with CRM application and Phase-3 to cover integration with HP OpenView, BMC Patrol and other applications.

Dec 2001 - Oct 2002

Fairfax Financial Holdings, Ontario

Position(s): Quality Assurance Manager / Change & Release Manager

Multiple Projects: Handled 3 projects (24/7/365) concurrently for Quality Assurance and Release and Change Management. (1) Metaportal Project: Online purchasing of insurance products i.e., Term Life Option, Critical Illness Option, Income Protector Option, Guaranteed Income Critical Illness. (2) RiskVault Project: Fully collaborative portal for claims and incident management. Production portal consists of 9 PIX and Raptor firewalls, 4 CISCO 4000 switches, 4 CISCO Content Switches, and 24 SUN servers in an iPlanet, WebLogic, Oracle clustered environment. (3) Insurance Products Re-Branding Project.

Change & Release Manager

ˇ Fully responsible for managing Production, Staging, Demo and QA environments for projects within Metaportal and RiskVault portals

ˇ Implemented Change, Release & Configuration Management based on ITIL framework

ˇ Successfully implemented security CERTIFICATION process before CRs implementing to Production

ˇ Chaired Change Advisory Board meetings to approve or reject proposed changes

ˇ Prepared Deployment Plans, Back-Out Plan and Release Notes

ˇ Managed Problem and Incident Management using I-Care service chain automation solution

ˇ Negotiated and approved the cost of Projects and CR enhancements proposals presented by the clients, vendors and internal IT teams

ˇ Held post implementation review meetings with the Implementation team to mature the process and increase client's satisfaction.

Quality Assurance Manager

ˇ Developed strategy, methodology and processes for addressing control weaknesses in Quality Assurance, Change & Release Management to position for CMM Level-2 (Repeatable) certification

ˇ Developed IT Security Audit Plan, executed the plan and prepared Assessment Report

ˇ Defined and implemented an accelerated 4 stage process encompassing requirement gathering, construction, software testing and implementation to control and manage the CRs

ˇ Managed and controlled the outsourcing contracts for RiskVault and Metaportal applications for all the development phases completely by third party vendors i.e., Tata Consulting Services and Millennium Care, to satisfy the business owners and end-clients

ˇ Guided QA team in developing test plans and test cases to perform Functional, Regression, Performance, Load, Stress, Security and User Acceptance Testing (UAT)

ˇ Introduced and implemented an Application & Infrastructure Performance Methodology to establish controls in Performance Benchmarking and Performance Enhancements

ˇ Installed used test tools i.e., LoadRunner, e-Load monitoring tools on the servers

ˇ Designed and performed end-to-end testing to test all the interfaces for both projects which include testing Cyber Source for payment, Cyber Cash, eNable (MIB), Calligo Document Management System (DMS) and Federated Insurance's Mainframe

ˇ Lead the B.A group in requirement gathering for re-branding one of our exiting products for a B2C initiative from application design, performance, security and usability aspects.

Infrastructure Migration Project: Helped create a new Production Environment to migrate all existing applications which provides robustness, performance, security and 99.9% availability.

ˇ Performed thorough testing of complete Infrastructure HW/SW/LAN/WAN & Security

ˇ Designed Test-Bed for performance testing Staging environment using Fineground accelerator (content server) gaining 50% increase in performance stats using LoadRunner

ˇ Lead the infrastructure team to perform security hardening of Web Servers and Solaris OS.

Apr 2001 - Nov 2001

SYMCOR/Worldinsure, Ontario

Position: Release Manager/ Production Support Manager

Project: Delivering online Intranet application in ASP (B2B) model for insurance carriers for automating the fulfillment process of insurance products and their insurance underwriting needs. SYMCOR won award for best performance on this project. Project costs over $20 Millions.

ˇ Project Managed the completion of Worldinsure Platform's final development from SYMCOR by managing work from 22 developers and 5 QA resources

ˇ Managed Production and Staging environment by implementing controls for maximum uptime

ˇ Developed QA & Release Management strategy, criteria and guidelines for targeting SW-CMM Level-2

ˇ Performed audit of physical and logical security at CO-LO hosted environment at Exodus Communications which includes VPNs, firewalls, Sun Servers, DB, biometrics, remote access controls

ˇ Successfully led the test team and prepared test strategy, test plans, performance metrics, test cases and project plan for Integration, Load, Stress, Performance, Failover, Scalability, Security and UAT

ˇ Performed testing of the new Stage environment - testing Apache Web Server, WebLogic Application Server, Oracle, Veritas Cluster, Email Exchange Server, FTP Server and PDF generating server

ˇ Lead the team of Build Engineer and Developers and other technical roles to streamline the code release mechanism and improve Configuration Management processes

ˇ Recommended RUP and evaluated Rational tools ClearCase (Configuration Management) and ClearQuest (Change Management) for integration with the IT processes

Position: Project Lead (Professional Services Team)

ˇ Prepared security compliance documentation per Royal Bank's requirements which encompasses documented security procedures and technology infrastructure design

ˇ Prepared Risk Management Plan, Disaster Recovery Plan (DRP), Deployment Management Plan, SLA

ˇ Prepared Project Plan, Work Breakdown Structure Dictionary (WBS) and Project Charter for Royal Bank (RBC Insurance) implementation - to be rolled out in 3 distinct stages

ˇ Incorporated all technical details from Statement of Work (SOW) in the project plan and managed the scope creep to update all planning aspects

ˇ Designed Billing Tool for Royal Bank's implementation of Worldinsure Platform for the Subscription Enterprise Licensing model by interfacing with VP of RBC and CFO of Worldinsure

ˇ Interfaced with Program Management and Engineering to facilitate development of core platform

ˇ Prepared Change Management and Risk Management Plan for Royal Bank initiative (RBC Insurance)

Nov 2000 - Apr 2001

Lucent Technologies, North Carolina

Position: Consultant/Sr. QA Analyst

Project: Delivering Contact Assist R1.0 for ASCC (Advanced Software Construction Center) at Lucent Technologies. The Contact Assist (CA) service has been developed as part of Lucent Technologies' Packet Intelligent Networks (PacketIN) product for the global market. Lucent's CA is an online Decision Support System that can be applied to provide automated, real- time web intervention. Project over $5 Million.

ˇ Developed and implemented SQA strategy (Macro and micro) for testing Contact Assist

ˇ Defined proper controls after assessing risks related to deployment processes of OA&M

ˇ During the design review phase - analyzed functional and performance requirements against design documents of different modules to bring alignment in the objectives for the product

ˇ Analyzed and evaluated the third party Customer Relationship Management (CRM) applications (VoIP-H.323, text chat and collaborative browsing) to fit with Contact Assist (Companies sought for the evaluation were Bell Labs, Hearme, Seibel and other vendors)

ˇ Analyzed and evaluated testing tools for functionality, integration, GUI, Load, stress and performance

ˇ Analyzed and tested security controls of CA R1 Application and deployment procedures

ˇ Used Silk for functional testing, SABLIME for bug reporting, ClearCase for configuration management and Rational Rose as CASE tool

ˇ Created test plans and test cases for different modules of the system

ˇ Establish the QA Lab (hardware, software and network topology) to facilitate all kind of testing

ˇ Performed tests using both Windows (Intel) and Sun Solaris (Ultra 10 UltraSPARC) based client machines for reliability, performance, Operation, Administration and Maintenance of system Tested service execution environment and platform

Nov 1999 - Nov 2000

Kasadel, New York

Position: Lead Performance and Security Analyst

Project: Delivering a state of the art Intranet website for ordering computing systems online. This application will allow inside and outside sales team to custom-configure the system and order and process that order in real time. The new Web site was developed with many user friendly features to help users with vast amount of information such as online registration, product availability, price, order entry, shipping charges, delivery status, account status, billing and contact information.

ˇ Developed the Quality Assurance strategy and policies to meet business objectives for Confidentiality, Integrity, Availability (CIA)

ˇ Prepared information security policies, functional requirements and procedures (in Word and Visio) for LAN access, User-ID and Password Management, VPN, remote access, firewalls, hardening the Sun & Windows based servers, physical access

ˇ Created and executed test plans, test cases by manual testing to meet IS and UAT criteria

ˇ Performed testing tasks such as create, debug and run tests and view results and report defects using Silk

ˇ Used SABLIME as a bug tracking system

ˇ Performed GUI testing, Screen Navigation testing, White box testing, Integration testing, Performance testing, Data driven test and Functional testing on the application and the Test Environment

Aug 1997 - Oct 1999

Askiteck Computing Services, Ontario

Position: QA Analyst /Developer

Project: This application (Loan Management System) was developed to computerize all the activities related to loan management functions. This system consists of different modules (sub system) like tracking of the employee, loan information, loan policies information, interest rate information, outstanding loan information are some of the main high lights. It was developed in Visual Basic 4.0 running on Window NT as front end Oracle 7.3 database running on UNIX system as a back end.

ˇ Designed the GUI and program logic to meet functional and security specifications

ˇ Prepared Test plans using functional requirements to test functionality and security controls

ˇ Thoroughly tested the hierarchy of controls that manage authentication and authorization

ˇ Performed manual as well as automated testing record and playback application using WinRunner

ˇ Performed regression testing using WinRunner

ˇ Actively attended meetings with fellow testers to evaluate the progress and performance of the application

Sep 1994 - Jan 1997

Business Consultants, New Jersey

Position: Supervisor, IT Support

ˇ Responsible for providing technical input and logistics reviews on all RFIs, RFPs, RFQs for projects

ˇ Coordinated the delivery of third party solutions with outside vendors

ˇ Assisted in the contract procurement and vendor selection process

ˇ Executed all client (AT&T, Genesis Health Venture) on-site implementations and user training

Jul 1989 - Mar 1992

Construction Associates, Lahore

Position: Manager, Accounting and Financials

ˇ Managing the books (AP & AR) and interfacing with vendors and clients

ˇ Coordinated with Banks and Income Tax office for financial aspects

TECHNOLOGIES

ˇ Network/OS/Telecom: Win XP, Win 2000, Win 98, Win 95, Win NT 4.0, DOS, WIN 3.X, Novell 4.x, UNIX, HOST/Mainframe, Client-Server architecture, LAN/WAN Architecture, PIX & Raptor firewalls, VPN, T1, ISDN, Switch 56, DSL, IVR, CTI, Voice and Data networks

ˇ Languages: MS-Visual Basic, .NET, C/C++, Java, XML, VXML, HTML, SQL, TSL

ˇ Packages: MS-Office Pro 2000, 97, 95, MS-Project, Primavera TeamPlay, Visio Technical, Adobe Photo Shop, MS-Front Page, CorelDraw 8.0, ColdFusion 4.0, ERWIN, System Architecture 2000, Smart Draw

ˇ Protocols/Tools: TCP/IP, SNMP, Telnet, RAS, SSH, SSL, FTP, SFTP, DHCP, WINS, DNS, NetBEUI, H.323, H.320, SecureCRT, WebTrends

ˇ Server Technologies: WebLogic, WebSphere, WebSphere MQ, iPlanet, IBM HTTP Server, Apache, IIS, LDAP, Oracle, SAS, Lotus Notes, Stellent CMS, FineGround Performance Suite, DB2 UDB

ˇ Testing Tools: Silk, WinRunner, LoadRunner, Test Director, SABLIME, E-Tester, E-Load, Rational Robot, QA Wizard, Test Track Pro, Internet Explorer, AOL, Opera, Netscape (UNIX & Windows based)

ˇ Source Control: Visual Source Safe (VSS), Concurrent Versions System (CVS), CM Synergy, ChangeSynergy, Rational ClearCase and ClearQuest

ˇ Systems/Environments/Methodologies: J2EE/.NET, Business Intelligence (BI), Customer Relationship Management (CRM), Public Key Infrastructure (PKI), Enterprise Resource Planning (ERP), Decision Support Systems (DSS), Management Information Systems (MIS), Business Process Reengineering (PBR)

[ Top | CV | Skills ]

Categories & Skills

Engineering & Technical

Categories

Skills


Businesses: (Buyers)


To contact this Seller, or other freelancers, please register as a Buyer for FREE.

Register as buyer

Freelancers: (Sellers)


To sell your skills please Register as a Seller for FREE.

Register as seller