Md Abdul Quddus

 To conduct IT Audit at Branches/Head Office IT Division as per approved IT audit Plan & Guidelines.  To prepare IT Audit Guideline and obtain approval from the Management.  To prepare IT Audit Checklist in the light of approved Guideline.  To conduct special Audit on IT based System as per direction of the Management.  Conducted comprehensive Audit as & when required as a Team Leader.  Periodical review of DC/DR Center operations.  To identify the inherent risk and vulnerabilities associated with Information Systems and provide recommendation for improvements in controls for reducing/mitigating the risks at acceptable level.  Examine the controls within an Information Technology Infrastructure to determine whether Information Systems and the environment safeguards assets, maintains data & system integrity, provide relevant & reliable information and operate effectively to achieve the bank’s goals/objectives.  To ensure changes made to any systems conforms to the Bank’s Change Control/Change Management policy.  To ensure software systems deployed conforms to the Bank’s software purchase/development/ banking & other application usage policy.  Check & review IT network & infrastructure security.  Analysis & recommendation for IS security policy followed by ISO27001  Follow- up on audit findings to ensure adequacy and timeliness of corrective actions.

 To identify the inherent risk and vulnerabilities associated with the use of Information Technology and Core Banking System (Finacle 7.0.18), suggest implementing controls to mitigate the risks and provides recommendations for the improvement in controls for reducing risks.  To provide an objective means of reviewing the risks faced by the bank in relation to use of Information Technology and assess whether they are being controlled /mitigated in an effective and efficient manner; provides an assessment of the Bank’s IT control by means of Guideline on IT for scheduled Banks and Financial Institutions of Bangladesh bank, IT Security Policy, Strategic policy, IT Process Manual and IT Audit Guidelines of the City Bank Limited.  Collecting and evaluating evidence to determine whether an information system safeguards assets, maintains data integrity, achieve organizational goals effectively and consumes resources efficiently. • Plan IT audit work by identifying and assessing risks and exposures in systems and IT processes. • Identify and assess the adequacy of IT controls. • Develop appropriate test steps and perform audits to evaluate the effectiveness of controls. • Ensure work papers are accurate and support audit conclusions, identifying areas for improvement, preparing audit reports. • Follow- up on audit findings to ensure adequacy and timeliness of corrective actions.  Formulate an IT Audit Guidelines in line with ISO and IEC security standards i.e. 17799:2005, and Information System Audit & Control Association (ISACA) Guideline  Conduct IT Audit at ATM Booths and related operations of Card Department  Prepared an IT Audit Guidelines which was approved by the Board of Directors on 03/09/2009

 Participate in IT projects as required.  Actively worked for preparation of Request for Proposal (RFP) for Integrated Core Banking System (CBS).  Prepared Evaluation matrix criterion to shortlist of vendors, which is duly approved by the Management.  Engaged to evaluate submitted documents on EOI from reputed vendors as per the approved evaluation criterion matrix.  Prepared Expression of Interest (EOI) for the supply, implementation and maintenance of an Integrated Core Banking System (CBS) for publication of the same in the daily newspapers in view of short listing of vendors who would later be invited to submit detailed technical and financial tenders for a Core Banking System (CBS) that supports both the functional and technical requirements of the Bank.  Prepared gap analysis report on the bank’s website in comparison with that of other local banks as well as reputed foreign bank to make the website more interactive.  Worked as Admin, IT Security & Compliance of the Bank as per Management authorization.  Prepared Information and Communication Technology (ICT) Policy for Southeast Bank Limited as per suggestion of ICT Guideline of Bangladesh Bank and accordingly obtained the Board of Directors approval on the same.  Provide technical support for internal & External Audit on ICT operations.  Prepared Business Continuity Plan (BCP) and Disaster Recovery (DR) Plan and obtained necessary management approval.  Adequate knowledge on Guideline on Information & Communication Technology for scheduled Banks and Financial Institutions initiated by Bangladesh Bank.

• Installed A2ZBS Branch Banking software and ABNGL General Ledger module about more than 40 Branches of Uttara Bank Limited across the country. • Provided logistics support to the Computerized Branches across the country towards smooth operations of A2ZBS Branch Banking software. • Pioneer of conversion A2Z Branch Banking System to bank developed Bank System (UIBS). Also involved in conversion of ABNGL (DOS based General Ledger Module Program) to bank developed General Ledger Module (UIBSGL) software. • Provide logistics support to the Computerized Branches across the country towards smooth operations of our Branch Banking Software i.e. Customer Service Module (UIBS) & General Ledger Module (UIBSGL), Backup Module for both Customer Service Module & General Ledger Module. • Provide logistics support on Foreign Exchange Software duly installed at Five Branches. • Imparting training to organization’s concerned personnel.