About

What a time we live in. 2024 - truly the dawn of a new era. Smart phones, smart cars, smart locks, smart homes. Tech certainly came a far way from calculators and Intel 80386 computers clocking a max of 40Mhz. Now, we have surrenderred our entire lives, safety, security, and even healthcare to technology and artificial intelligence. This holds true - not just for data, but for fully operational functions that the world of cyber has taken over for us. However, along with its benefit, an era of new threat arises.

What's stopping someone from listening into your conversation from your smart home speaker?

What's stopping someone from accessing your camera in your laptop for a view of your home?

What's stopping someone from stealing your personal information including health records, bank credentials, passwords, credit card numbers, or social security numbers?

Sounds scary right? That's because it is. And this is just the start of it. With an 'internet of things' i.e. interconnect devices such as your thermostat, lights, security alarms, door locks, and in the near future - self driving cars, there's a lot at stake.

This is where I come in. I assess IT and Cyber Risk, perform end to end business and technology audits, identify vulnerabilities, recommend fixes or improvements, implement where necessary, and protect us. This is what I live and breathe. This is me, and I love what I do. This well written article I came across, summarizes today's trends. If you find this interesting, check this article that shows the thought process of drawing a Risk Heat Map.

Information
Contact:
Message me on LinkedIn
Address:
Tampa, FL, U.S.A
Languages:
English, Urdu
Certifications:

Certified Information Security Auditor (CISA)

Harvard Business School Leadership Essentials

Harvard Business School Management Essentials
Professional Skills
IT Audit
100%
IT SOX Risk Assessment
100%
Access Security
100%
Change Management
100%
Data Center & Network Operations
100%
Interface Controls
100%
Completeness & Accuracy
100%
Computer Operations and Disaster Recovery
100%
Systems Logging and Event Monitoring
100%
Physical IT Security
100%
SQL
85%
SAS
80%
Tableau
85%
C
90%
UI Path
85%
Java
90%
Work Experience

Oct 21 - Present

Pricewaterhouse Coopers
Global Manager of Application Security Risk - Network Information Systems

• Review, identify, and assess firmwide application security

• Perform application readiness assessments for software utilized internally at PwC or by their clients

• Lead cyber risk reviews on over 400 MS Connectors

July 20 - Oct 21

Guidewell Mutual Holding Corporation
Program Manager of Systems Audit & Cyber Risk – Florida Blue

• Redesign, establish, and implement firm-wide IT and Cyber Risk audit & compliance framework focused on existing and potential risk; Preventative and detective controls

• Assemble, coach, set up, and lead Systems and Business Internal Audit teams at Florida Blue for agile and emergency adaptation to firmwide transition to remote operations due to COVID-19 pandemic

• Condense HIPAA, NIST, and COBIT industry standards for optimal firm-wide implementation

July 2016 - July 2020

Pricewaterhouse Coopers
Manager of Global IT Audit(Internal Firm Services) – Assurance (Engagement Performance and Quality)

• Study the global market and PwC member firms for cyber/business trends to proactively identify future risks; Gauge materiality and cost of exploitation to the firm; Present analysis to chief risk committee

• Pioneer, develop, and implement audit strategy for firm-wide IT, financial, operational projects to test internal controls, SOX audits, SOC1 reviews for PwC member firms e.g. US, Mexico, Germany, UK

• Analyze historical trends, mine & utilize real-time data to create/promote customized tools for higher efficiency, realization, budget savings as part of the Engagement Performance and Quality initiative

Sep 2013 - July 2016

Deloitte & Touché
Senior Consultant Technology Risk – Advisory Risk & Resilience

• Managed/supervised AICPA/PCAOB projects and budget (over $1m each) through planning, execution, filing for Energy, Healthcare, Hospitality, Leisure, Retail, and Financial Services clients

• Led global teams (IT/Business/Audit consultants in groups of 10) to perform IT, Business, Compliance, and Service Auditors Report SSAE16 (SOC1) risk assessments, testing, and complete audits

• Performed data mining using SAS and statistical analysis techniques to analyze, filter, extract information from data sets (over 1m. financial entries) to discuss analytical findings and carve solutions
Education

University of Florida
Information Systems and Operations Management; Supply Chain

Master of Science

• Graduated as the top 10% of class

• Inducted into the Beta Gamma Sigma honors society

• Inducted into the Alpha Iota Delta honors society

GIK Institute
Engineering Sciences; Electronics and Semi Conductors

Bachelor of Science

• Awarded 3rd place for best final year project and innovative design and implementation of the Portable Heart Attack Monitoring System

References
Contact Me
Reach out to me

LinkedIn

https://www.linkedin.com/in/apiracha

Email

ali.piracha@gmail.com