Ahmed Sohail
+92 333 224 5238 ◼ ahmed.sohail1493@gmail.com ◼ Karachi, Pakistan
OBJECTIVE:
To work as an Information Technology and Information Security Professional with a dynamic and
creative team in a professional environment where I can contribute and acquire/enhance skills that
will enable me to thrive towards a career in Information Security / IT Service Management. I consider
myself a strong team player and get motivated through continuous learning.
Qualification
▪ Certifications: ITIL, PRINCE 2
▪ BS (Computer Science) – FAST-NUCES – 2016
▪ A Levels – The City School – 2012
▪ O Levels – The City School – 2010
Work Experience
Information Security Manager – EFU Life
Assurance - Nov’2021 – Present
Currently serving as the Information Security Manager for
a leading Life Insurance provider in Pakistan. Managing the
implementation of the Cybersecurity Guideline provided
by the sector’s regulator (Securities and Exchange
Commission Pakistan) by devising a Cybersecurity
Management Framework. Devising Information Security
Policies and Procedures to spearhead the Governance
structure of Information Security. Leading the selection of
vendors for the implementation of multiple Information
Security tools and application to further safeguard the
organization.
Assistant Manager – IT Management
Consulting KPMG - Feb’2020 – Nov’2021
Project Lead for various projects pertaining to Information
Technology & Information Security Governance and
Project Management:
Pakistan Stock Exchange – Assisted the client in the
design and execution of a two-year Internal Audit Plan
that included the review of their Information Security, IT
Governance, Business Continuity Management, IT
Operations and IT Helpdesk functions. Managed the entire
engagement including drafting of List of Requirements and
the internal Audit Reports.
Bank of Azad Jammu and Kashmir – Assisted the client in
designing a long-term Digital Strategy that included the
implementation of their first Core-Banking application
implementation. Gathered client’s requirements for the
formulation of the Request for Proposal document of the
Core-Banking application and then executed the selection
of the appropriate vendor by quantitatively scoring them.
House Building & Finance Company – Designed and
Implemented the Information Technology and
Information Security Governance Framework to
transform the existing IT Department. Served as
PMO for the implementation of the selected Core
Banking application.
Kahramaa – Designed and Implemented a framework
using ITIL for IT Service Management. Assisted the client
in implementing the processes in the Service
Management Solution being used.
Served as PMO for the implementation of the BMC Suite
for IT Service Management and IT Operations
Management.
Senior Advisor – IT Consulting
Business Beam - Feb’2018 – Feb’2020
Provided IT GRC consultancy services to multiple clients
representing a diverse portfolio of sectors:
Al Watania Information Systems (Riyadh) – Implemented
ITIL for the creation of processes designed to support IT
Service Management.
Designed a Software Engineering methodology for the
entity based on Scrum.
Pakistan Petroleum Limited – Implemented ITIL for the
creation of processes designed to support IT Service
Management.
Assisted the entity in the development of Operation and
Service Level Agreements to align core and supporting
sections within Information Technology.
United Energy Pakistan – Performed a Gap Assessment
based on ISO 27001. Advised the client on the gap closure
roadmap and assisted the internal information security
team in closure of nonconformities.
State Bank of Pakistan – Designed and implemented an IT
Governance Framework using COBIT 5 as a best practice
benchmark. Conducted a Gap Assessment to identify areas
of improvement and then implemented mitigation
techniques to fill them.
Summit Bank Limited – Performed an Internal Audit for the
Internal Inspection Department to assess the current
capability of the IT Department against SBP ETGF
Framework, ITIL, ISO 27001 and COBIT.

Consultant – IT Audit and Advisory

Deloitte Touche, Nov’2016 – Feb’2018
Carried out and led both external and internal audit
assignments for a wide range of clients including:

● General IT Control Testing:

o Access Management
o Change Management
o Backup and Restoration Testing
● Application Control Testing
● Interface Testing
● Policy and Procedure Review

Specialized Skills
▪ Implementation of ITIL, ISO 27001 and COBIT
▪ Reviews based on ISO 27001
▪ Agile & Scrum
▪ Development of IT GRC Policy and Procedures
▪ Business process optimization