Mohammed Musthafa Sheriff

About Mohammed Musthafa Sheriff

IT Audit & Advisory, Gap Analysis, Compliance and Process Maturity Assessments IT Risk Management: Identification, Assessment, Treatment & Monitoring Information Security, Vulnerability Scans & Penetration Testing Vendor risk, privacy risk/impact assessments & SOC reviews IT Governance, Risk Management, Compliance & Assurance Frameworks: ISO 27001, BS 10012:2017, NIST, DAMA, PCI DSS, ITIL, COBIT & COSO Regulations: SOx, HIPAA, PCI DSS, GDPR Identity & Access Management, Regulate users logical access to IT assets RSA Archer, HP ALM, ServiceNow & ESM BI, Data Analytics & Cloud Security, Risk & Controls IT Policy Lifecycle Management Data governance, Data Quality & Reference Data Management Process improvement, optimization, innovation & automation Program & Project Management: Project planning, execution, monitoring, risk & budget management, resource & engagement management Business Analysis & Support

Experience

1. Corporate Vice President

   New York Life

   Feb 2023 — Present · New York, NY, US

   Strengthen Corporate Audit Department’s (CAD) relationships with key stakeholders in Technology & businesses. Help stakeholders better understand and manage technology risks and controls to protect and drive enterprise value.• Represent CAD on cross functional committees and working groups by providing valuable risk & control thought leadership around various technology topics.• Provide a strategic perspective by connecting information from across the organization and external thought leadership to drive risk assessment, provide context for audit outcomes and identify new opportunities for CAD to provide value to our stakeholders.• Work with Technology and Business stakeholders to assess, identify risk, advise, and consult on a wide variety of technology related topics, including major technology projects, cybersecurity, cloud, data, privacy, enterprise applications, DR, analytics & emerging technologies.• Collaborate with the I and II lines of defense to plan work efforts, reduce audit fatigue and drive productive outcomes for CAD projects.• Coach junior team members to develop their knowledge of audit methodology and technology related topics.• Lead ongoing departmental risk assessments, audit planning and complete planning deliverables in accordance with department standards. Risk-assess technology plan areas using gathered inputs and professional judgement.• Perform oversight of audit engagements performed by the IT Audit team, including oversight of audit managers leading engagements with clients, providing guidance and engaging with Technology and Business leaders on audit outcomes. • Assist departmental efforts around continuous audit improvement including data analytics, automation, continuous monitoring and other emerging tools and methods.• Manage third party relationships for the IT audit team and maintain oversight of spend and ROI.• Identify opportunities for continuous improvement in the department including talent, processes and tools.

Education

• St Peter's Engineering College

  B.E., Computer Science & Engineering

  1997 — 2001