Azzam Shareef

Background

About Azzam Shareef

i2c Inc. is a global provider of highly configurable payment and banking solutions. Renowned for its innovation-driven culture, i2c empowers financial institutions, fintechs, and other enterprises with a unified platform that delivers flexibility, scalability, and speed to market. Working at i2c Inc. has significantly strengthened my expertise in IT governance, information security, and risk management. The company’s emphasis on global standards and complex audit frameworks has provided continuous learning, hands-on exposure to critical compliance processes, and valuable collaboration with cross-functional teams. Certifications and Compliance Experience: PCI-DSS (Payment Card Industry Data Security Standard) SSAE-18 (SOC 1 & SOC 2 Type II) ISO 18295 – Customer Contact Center Requirements ISO 27701 – Privacy Information Management ISO 27001 – Information Security Management ISO 22301 – Business Continuity Management Participation in comprehensive external audits and regulatory inspections. Core Competencies: A seasoned Information Technology Auditor with a strong foundation in: IT Risk Management Information Security Frameworks Regulatory and External Audits IT Governance & Compliance Risk Assessment and Analysis Possess hands-on experience in assessing internal IT controls for various organizations, with specialization in: Evaluation and review of critical business application controls Annual External IS Audits for leading telecom sector clients. Audit Engagements & Technical Review Areas IT Governance Review – ensuring IT strategy aligns with enterprise business strategy Compliance with IS security policies, operational standards, and change management processes Evaluation of IT Help Desk Operations and Physical Security & Environmental Controls General System Security Configuration Reviews: Password and Authentication Standards User Authorization, Creation, and Termination Processes Role-based Access Control and Privileged Access Monitoring Segregation of Duties (SoD) and Logical Access Reviews Additional Review Areas: IT Data Backup and Recovery Processes Incident and Problem Management Frameworks Business Impact Analysis (BIA) and Risk Assessments (RA) in Telecom Sector Site/Facility-level Risk Assessments through stakeholder engagements and workshops.