MUHAMMAD ASAD SULTAN

Profile/Background:
A self-driven and goal-oriented individual, pursuing Certified Information Systems Auditor (CISA) from Information Systems Audit and
Control Association (ISACA) & Chartered Accountancy from the Institute of Chartered Accountants of Pakistan (ICAP), currently serving
in Risk Assurance Group of A. F. FERGUSON & CO., Chartered Accountants, a member firm of the PricewaterhouseCoopers network
(PwC Pakistan). Having experience of around four years in IT Audit across various industries, providing assurance services to a variety of
large and mid-tier clients (including listed companies and high-profile clients). Analytical and proven professional with extensive IS
Auditing experience with notable success in significantly improving internal processes. With a background in finance and technology, he
has an aptitude to leverage IT and business knowledge to analyze key challenges logically. Also proficient in managing and leading IT
audits; Information Technology General Controls ITGCs & Application Controls; managing engagements with multiple senior
stakeholders; evaluating and testing IT and business process controls; conducting detailed gap analysis; identifying and managing risk;
and advising clients from an Information Security standpoint.

Education & Professional Qualifications:

Particulars Institute Year of Passing Status
Certified Information Information Systems Audit In process In process
Systems Auditor (CISA) and Control Association
(ISACA)
Chartered Accountancy (CA) The Institute of Chartered In process In process
Accountants of Pakistan
(ICAP)
Bachelors in commerce Punjab University Lahore 2021 Passed
Certificate of Accountancy The Institute of Chartered 2018 Passed
and Finance (CAF) Accountants of Pakistan
(ICAP)
Higher Secondary School Board of Intermediate and 2013 Passed (A-1 Grade/85%)
Certificate Secondary Education
Secondary School Certificate Lahore Grammar School 2011 Passed (A-1 Grade/92%)
(LGS)

Experience at PwC Pakistan (4 years):

- April 2021 – till date:
IT/Digital Audit Associate – II
- November 2019 – March 2021:
IT/Digital Audit Associate – I
- June 2019 – October 2019:
IT/Digital Transformation Intern
- June 2018 – July 2018:
IT/Digital Audit Intern

Roles and Responsibilities:

- Coordinating with engagement partner and manager for planning, budgeting, execution, timelines, and deliverables. Assisting audit
team for identifying key risks and controls, knowledge of IT application, configuration, and manual controls within complex IT
environments;
- Expertise in auditing Information Technology controls in different industry sectors, in depth understanding of IT general controls,
IT automated controls, information security management, risk management/internal controls, IT compliance audits, international
standards and business process controls;
- Work closely with core assurance team to facilitate them in the Financial services audits
- Resourceful, creative thinker and analytical problem solver with proven ability to independently manage tasks from planning
through execution in dynamic, fast-paced, and time-sensitive environments;
- Leadership, communication and collaboration skills developed in a progressively responsible career;
- Assessment of entity's business, environment and internal control risks;
- Understanding of entity’s business processes (mainly financial reporting process), analysis and review of design and effectiveness of
internal controls implemented by management, identification of significant weaknesses and recommending improvements therein;
- Working effectively in different teams for varying periods of time, building good working relationships with both: colleagues and
clients’ personnel at all levels.
Professional Development:
- Consistently been awarded ‘Outstanding’ and ‘High Performer’ ratings during regular performance appraisals;
- Also attended PwC Pakistan session relating to ITGCs and Application Controls;
- Completed ISO 27001 and CMMI Level 5 trainings;
- Completed various mandatory training sessions organized by PwC Pakistan, such as Assurance 1, Assurance 2 and Assurance 3
- Completed 80 hours Communication & Skills Development Course;
- Completed 50 hours Presentation & Communication Skills Course (PCSC-I)
- Completed Digi Skills Freelancing and Digital Marketing Course.
- Knowledge of Industry Standard Frameworks COBIT, COSO, ISO27001, NIST, International Professional Practices Framework
(IPPF).

Trainings:

- Attended various in-house workshops & training sessions and cleared various internal tests about PwC audit methodology; and
- Passed various E-learns (internal tests) as devised PwC for its assurance personnel.

Skills:
- Expert level knowledge of ITGCs, Application Controls, IFRSs, ISAs, Corporate and Tax Laws;
- Strong grip on Microsoft Office required for business, financial and statistical analysis;
- Hands on practical experience of using PwC Audit Software ‘Aura’;
- Implementation & User-level experience of ERP Software, such as SAP, Oracle, Microsoft Dynamics;
- Compliance Testing and Reporting; and
- Accountable and Deadline Oriented.

Extra-curricular Activities/Achievements:
- Member of Student Council at Lahore Grammar School.
- Attended LUMS Summer School.
- Got certificates for outstanding performance in mathematics at School.
- Part of winning team at annual inter branch Basketball competition.
- Worked as a volunteer for Sundas Foundation for encouraging blood donations among students at College Level.
- Organized a Cycling Event 2023 for PwC Pakistan (A.F.Ferguson & Co. Lahore, Pakistan).

Significant Engagements:

Department Sector Client Year/Period Key Roles and

Responsibilities
PakArab Fertilizers Year ended December 31, - Execution of IT audit
Limited 2021 per International
Fertilizer Year ended December 31, Standards on Auditing
2022 and PwC IT Audit
Techlogix (Private) Year ended December 31, Methodology in support
Limited 2021 of financial statement
IT Year ended December 31, audits and reporting on
2022 internal controls over
Systems Limited Year ended December 31, financial reporting;
IT/Digital Audit 2022
Dairy & Agriculture Nishat Dairy (Private) Year ended June 30, 2021 - Regulatory and
Limited Compliance Reviews;
Leatherware (Private) Year ended December 31,
Manufacturing Limited 2021 - IT Governance & Risk
Bata Pakistan Limited Year ended June 30, 2018 Assessment;
Education Ali Institute of Year ended June 30, 2021
Education - Designing and Review
of IT Policies and
Procedures; and

- ITGC & CSR Reporting;

 MCB Bank Limited Year Ended December 31, - In-depth experience in
2022 reviewing IT General
controls & Application
Banking MCB Islamic Bank Year Ended December 31, Controls that are
Limited 2022 embedded within IT
processes that provide a
Bank Of Punjab Limited Year Ended December 31, reliable operating
2022 environment and
support the effective
operation of the
business;

- Keeping key internal

and external
IT/ Digital Audit Real Estate Packages Real Estate Year Ended December 31, stakeholders up to date
(Pvt) Limited 2022 with status, findings, and
Shaukat Khanum Year Ended December 31, the implications of the IT
Trust/ NPO Hospital 2022 audit work. Escalating
Karandaaz Year Ended June 30, 2022 finding at the right time
Pakistan ensuring challenges are
Bulleh Shah Packaging Year Ended December 31, dealt with early.
Limited 2022 Designing and testing
Manufacturing compensation controls to
Fatima Packaging Year Ended December 31, mitigate the impact of
Limited 2022 the identified controls
deficiencies.
Rousch (Pakistan)
Power Limited Year Ended June 30, 2022 - IT External Audits;
Power Altern Energy
Limited - IT Internal Audits;

Banking Bank Alfalah Limited System Automation - Implementation of GL

(General Ledger Mass Allocation and
Customization) Fixed Assets
Oil Marketing ZIC Lubricants (Private) Financials Implementation Customization.
Companies Limited (Receivables Module) - Instigated change
management projects,
Business Process
Enhancement & Re-
engineering, Business
Process Optimization,
Digital Transformation ERP control and system
Implementation of Oracle GAP review.
Manufacturing HSNDS (UNICEF) Discrete Manufacturing - Performed Risk
Assessments &
Requirements
Gathering, Gap Analysis,
Business Process
Analysis, User Training,
Post Implementation
Support and Post
Implementation
Application Review of
Oracle Discrete
Manufacturing.

References: Will be furnished upon request.

Personal Details:
Contact number: +923111510149
Email: [email protected]
Gender: Male
Nationality: Pakistani
Marital status: Single
Geographical preference: Willing to relocate and can travel for official
Assignments
Languages: English and Urdu