Farhan Ali

IT Audit | Technology Risk | Cybersecurity | Digital Transformation | IT Project Management | Technology Governance

Dubai, United Arab Emirates

About

Experienced and results-driven professional specializing in Technology Risk, IT Audits, Cybersecurity, Digital Transformation and Technology Governance with over a decade of international career exposure across the UAE, Bahrain, and Afghanistan. Throughout my journey, I've collaborated with diverse organizations spanning Government and Semi-Government entities, Marine/Maritime, EPC, Banking, Telecom, Oil & Gas, Manufacturing, Media Houses, and various trading concerns. Passionate about leveraging technology to drive operational excellence and strategic growth. My expertise includes developing robust audit frameworks, strengthening cybersecurity measures, establishing effective governance practices, and guiding impactful digital initiatives.

Experience

  • Digital Risk and Cybersecurity Advisor at Confidential @ UAE & KSA
    Sep 2024 - Present · 1 yr 10 mos

    Responsible for leading the Digital Risk and Cybersecurity domain within the company across the UAE and KSA, ensuring robust digital resilience and security frameworks. In this capacity, I provide strategic advisory on Digital Transformation initiatives, guiding organizations in adopting secure and scalable technologies while mitigating cybersecurity risks.

  • Senior Manager - Digital Transformation at EY
    Aug 2022 - Sep 2024 · 2 yrs 2 mos

    I successfully led a Digital Transformation project for the Government of Khyber Pakhtunkhwa (GoKP) in Pakistan, deploying an enterprise-wide Document and Workflow Management System. The project encompassed Business Process Review, System Implementation, Technology Governance, Cybersecurity, IT Infrastructure, and Change Management. Additionally, I played a pivotal role in designing and implementing the Enterprise Architecture (EA) Framework for GoKP, standardizing technology and solution adoption across the province. This initiative addressed previous challenges related to technology inconsistencies, data management, security, and system integrations.

  • IS Auditor / IS Consultant at NMDC Group, UAE
    Nov 2016 - Jul 2022 · 5 yrs 9 mos

    Member of the "Internal Audit and Compliance Department" of NMDC group where I lead various IT Audits and Cybersecurity Audits of the group entities primarily for National Marine Dredging Company (NMDC) and National Petroleum Construction Company (NPCC). Overall, I look after the IT audits over core ERP, cloud services, in-house developed business applications, digital business processes, SCADA environment and related IT infrastructure. With NMDC Group, I am able to add value through; • Introducing data analytics in internal audit working through tools like Power BI and Arbutus. • Deploying the audit management systems (AMS) to digitize internal audit activities • Development of continuous monitoring framework over key IT processes and supply chain function • Implementing the automation of internal audit follow-up tracker system through in-housed developed application

  • Manager (IT Risk & Assurance and IT Advisory) at Ernst & Young
    Oct 2013 - Oct 2016 · 3 yrs 1 mo

    ► I looked after the IT Risk and Consultancy services of firm in Bahrain, UAE, Afghanistan and Pakistan. ► Actively involved in the Business Development activities in Afghanistan to explore new clients / business opportunities in areas of IT risk and IT consultancy services. ► Gained good working experience to offer IT risk and consultancy services in various sectors like Banking, Telecommunication, Oil and Gas, Manufacturing Industry, Media Houses and other retail groups.

  • Information Technology Specialist at Afghanistan International Bank
    Jan 2011 - Oct 2013 · 2 yrs 10 mos

    ► Managed smooth operations of Core Banking Applications like FlexCube UBS, FlexBranch and CAMS (Customer & Account Management System) ► Implemented centralized IT Service Desk by deployment of tools like “Manage Engine Service Desk Plus” ► Developed IT Operational Policies and Procedures