About Me – My Portfoilio

IT operations & security professional with 19 years of experience across Risk / Audit and Compliance. My career spans hands-on system administration, problem management and IT service operations, with a strong focus on building stable, secure and compliant technology environments.

I have completed speclized courses and certifications in ITIL@4, ITSM, IT Risk & Audit Management, Information Security Management, Problem Management, Change Management. Strengthening my capability to manage complex IT challenges with structured, industry-standard approaches. I bring a blend of operational expertise and governance knowledge, ensuring seamless IT service delivery while supporting strong risk, audit and compliance.

I am an adaptable and well-organized professional who is quick to learn new skills. I can show initiative in solving problems and have worked independently or as part of a team. I have strong project management and IT skills, combined with a flexible attitude to task management. I get on well with people at all levels and easily establish good working relationships.

I spent my teenage years coming to terms with my disability and developing my ways of coping and solving problems. I believe that this attitude has contributed to my positive approach to life, an attitude that I have been able to bring to my various job roles.

Courses & Certifications

Information Security Manger

IT Risk & Audit Management

ITIL@4

ITSM Problem Management

ITSM Change Management

Service Now Administration

Cyber Security at Work

IT Service Desk Management

Pager Duty Management

My Education

1987 - 1997

S.S.C

B.I.S.E, Bannu

Math, Computer Science, Physics, Chemistry

1997 - 2000

F.A

B.I.S.E, Bannu

Math, Statistics, Economics

2002 - 2006

B.C.S (Hons)

Gomal University, D.I.Khan

Operating System, DBMS, Business Communications

My Skills

2007 till Date

IT Risk Management & Compliance

Root Cause–Linked Risk Identification – Skilled at identifying operational, technical, and compliance risks based on recurring incidents and problem trends.
Post-Incident Risk Evaluation – Performing in-depth reviews after major incidents to assess potential risks to system stability and service continuity.
Control Weakness Detection – Recognizing procedural or system vulnerabilities through proactive problem analysis and recommending preventive measures.
Vendor Dependency Risk Management – Assessing and documenting risks tied to third-party service providers and tracking remediation actions.
Risk Communication – Presenting technical and operational risks to stakeholders in a clear, actionable manner for decision-making.

Technical Risk Assessment – Evaluating risks in infrastructure, applications, network configurations, and cloud environments.
Security Control Validation – Reviewing firewall rules, access rights, patch management, and backup systems for compliance and effectiveness.
Vulnerability & Threat Analysis – Running scans, interpreting results, and collaborating with security teams to remediate findings.
Audit Readiness & Evidence Gathering – Maintaining accurate logs, system configurations, and compliance documentation for internal/external audits.
Change Impact Risk Analysis – Assessing risks before implementing system changes, upgrades, or migrations.

Process Compliance Monitoring – Ensuring administrative processes follow documented policies and procedures.
Audit Coordination – Assisting in scheduling, document collation, and communication between auditors and teams.
Data Accuracy & Record Keeping – Maintaining precise records to support audit trails and compliance checks.
Administrative Risk Assessment – Identifying potential gaps in office operations, documentation practices, and data handling.

Compliance Framework Alignment – Familiar with ITIL best practices.
Gap Analysis & Remediation Planning – Detecting and addressing deficiencies in processes, controls, or documentation.
Reporting & Documentation – Producing detailed risk registers, audit summaries, and compliance reports for management review.
Continuous Improvement – Implementing lessons learned from audits and risk assessments into process and system enhancements.

2023 till Date

Problem Manager ITSM

Root Cause–Linked Risk Identification – Skilled at identifying operational, technical, and compliance risks based on recurring incidents and problem trends.
Post-Incident Risk Evaluation – Performing in-depth reviews after major incidents to assess potential risks to system stability and service continuity.
Control Weakness Detection – Recognizing procedural or system vulnerabilities through proactive problem analysis and recommending preventive measures.
Vendor Dependency Risk Management – Assessing and documenting risks tied to third-party service providers and tracking remediation actions.
Risk Communication – Presenting technical and operational risks to stakeholders in a clear, actionable manner for decision-making.

Technical Risk Assessment – Evaluating risks in infrastructure, applications, network configurations, and cloud environments.
Security Control Validation – Reviewing firewall rules, access rights, patch management, and backup systems for compliance and effectiveness.
Vulnerability & Threat Analysis – Running scans, interpreting results, and collaborating with security teams to remediate findings.
Audit Readiness & Evidence Gathering – Maintaining accurate logs, system configurations, and compliance documentation for internal/external audits.
Change Impact Risk Analysis – Assessing risks before implementing system changes, upgrades, or migrations.

Process Compliance Monitoring – Ensuring administrative processes follow documented policies and procedures.
Audit Coordination – Assisting in scheduling, document collation, and communication between auditors and teams.
Data Accuracy & Record Keeping – Maintaining precise records to support audit trails and compliance checks.
Administrative Risk Assessment – Identifying potential gaps in office operations, documentation practices, and data handling.

Compliance Framework Alignment – Familiar with ITIL best practices.
Gap Analysis & Remediation Planning – Detecting and addressing deficiencies in processes, controls, or documentation.
Reporting & Documentation – Producing detailed risk registers, audit summaries, and compliance reports for management review.
Continuous Improvement – Implementing lessons learned from audits and risk assessments into process and system enhancements.

2023 till Date

ServiceNow

Root Cause–Linked Risk Identification – Skilled at identifying operational, technical, and compliance risks based on recurring incidents and problem trends.
Post-Incident Risk Evaluation – Performing in-depth reviews after major incidents to assess potential risks to system stability and service continuity.
Control Weakness Detection – Recognizing procedural or system vulnerabilities through proactive problem analysis and recommending preventive measures.
Vendor Dependency Risk Management – Assessing and documenting risks tied to third-party service providers and tracking remediation actions.
Risk Communication – Presenting technical and operational risks to stakeholders in a clear, actionable manner for decision-making.

Technical Risk Assessment – Evaluating risks in infrastructure, applications, network configurations, and cloud environments.
Security Control Validation – Reviewing firewall rules, access rights, patch management, and backup systems for compliance and effectiveness.
Vulnerability & Threat Analysis – Running scans, interpreting results, and collaborating with security teams to remediate findings.
Audit Readiness & Evidence Gathering – Maintaining accurate logs, system configurations, and compliance documentation for internal/external audits.
Change Impact Risk Analysis – Assessing risks before implementing system changes, upgrades, or migrations.

Process Compliance Monitoring – Ensuring administrative processes follow documented policies and procedures.
Audit Coordination – Assisting in scheduling, document collation, and communication between auditors and teams.
Data Accuracy & Record Keeping – Maintaining precise records to support audit trails and compliance checks.
Administrative Risk Assessment – Identifying potential gaps in office operations, documentation practices, and data handling.

Compliance Framework Alignment – Familiar with ITIL best practices.
Gap Analysis & Remediation Planning – Detecting and addressing deficiencies in processes, controls, or documentation.
Reporting & Documentation – Producing detailed risk registers, audit summaries, and compliance reports for management review.
Continuous Improvement – Implementing lessons learned from audits and risk assessments into process and system enhancements.

2023 till Date

Power BI Dashboard Designer

Dashboard Planning & Requirements Gathering – Working with stakeholders to identify KPIs, metrics, and visualization needs.
Data Modeling & Preparation – Building optimized data models and preparing datasets using Power Query (M) and DAX.
Interactive Dashboard Creation – Designing user-friendly dashboards with slicers, filters, bookmarks, drill-through, and dynamic visuals.
Data Visualization Best Practices – Applying design principles for clarity, accessibility, and impactful storytelling.
Custom Visuals & Theming – Utilizing Power BI marketplace visuals and creating consistent layouts, branding, and themes.
Multi-source Integration – Connecting dashboards to SQL, Excel, APIs, SharePoint, and cloud platforms.
Performance Optimization – Reducing load times through model tuning, query folding, and efficient calculations.
Publishing & User Access Management – Deploying dashboards to Power BI Service, setting permissions, and scheduling refreshes.
Data Storytelling & Insights Presentation – Turning data into actionable insights through narrative-driven dashboard design.

2020 - 2023

Website Designer – Elementor Skills

Drag-and-Drop Page Building – Creating custom, responsive website layouts efficiently using Elementor’s visual editor.
WordPress Integration – Designing and customizing WordPress sites leveraging Elementor’s widgets, templates, and theme builder.
Responsive Design – Ensuring websites are fully responsive across desktop, tablet, and mobile devices using Elementor’s responsive controls.
Custom Styling & Branding – Applying custom CSS, typography, and brand colors to align with client requirements.
Plugin & Widget Management – Utilizing and configuring Elementor add-ons and third-party widgets to extend website functionality.
SEO Best Practices – Building SEO-friendly pages with optimized loading speed and structured content.
Performance Optimization – Managing site speed and user experience through image optimization and clean layout design.
Collaboration & Client Support – Working with clients to gather requirements, provide updates, and offer training on Elementor features.