Risk and controls include processes of procurement, contracts development, contract execution, finance, corporate & public relations, human resources, projects, information technology, production, marketing services, sales & logistics, ICOFR, inventory control, warehouse operations, maintenance planning, maintenance execution, repair workshop.
Health, Safety, Environment: Risk Assessment for assuring and review of employees and contractors compliance with HSE Code of Practices including HSE-site work permits and inspection of staff adherence to life saving rules (H2S precautions, in addition to covering industrial HSE aspects (I.e. reporting of flaring)), and also the processing of materials safety data sheets and utilization of SAP ERP for reporting of HSE requirements for governance of identified and relating safety hazards.
Information Technology: Ensuring data confidentiality, integrity and availability under IT general controls or IT application controls reviewing appropriateness of granted access rights based on pre-authorization and on need to know basis I.e. either (read, change and/or delete), data backups, maintain contractual rights with IT vendors including number of user license utilized compared to agreed including software updates and contract validity period, deploying and maintaining data protection measures against computer viruses, power outage and other threats, physical control for securing company’ servers against unauthorized access, theft, fire, destruction or during servers decommissioning, system development including IT project charter, pilot testing and user acceptance, data recovery plan against cyberattacks and other disruptive events.
Experience
No experience mentioned.
Education
-
Certified Information Systems Auditor (Dec, 2000–Apr, 2004) from Information Systems Audit and Control Association (ISACA), U.S.A.
-
Certified Internal Auditor (Jun, 1999–Nov, 2000) from IIA, USA
-
Bachelor in Accounting (Sep, 1995–Feb, 1999) from University of Jordan - Amman