Sha R.

Spearhead the ISMS programs, overseing the compliance and audit activities for Petron Malaysia. Review information security policies and guideline to ensure alignment with new ISO 27001 standards and other industry best practices. Perform IT compliance review for new and existing digital initiatives. Enhance the awareness program to ensure it is up to date and stay relevant to the current landscape.

Spearhead the implementation of information security management system across the groupwide. Establish policies pertaining to information security. Overseeing the implementation of information security policies for the groupwide to ensure alignment with ISO 27001 standard & requirement.

• Provide assurance & consulting services on the internal controls effectiveness, risk management, business operation and governance processes. • Assess business processes covering various scope such as financial, operational, information security and cyber resilience across the company and identify opportunities for refinement. • Review and assess policies and procedures to ensure its alignment with processes and standard best practices • Engage with stakeholders across the company on remediation of identified issues through follow-up.

• Implement & monitor IT risk and cyber security management programs. • Analyze IT risk KRIs and prepares risk management reports for risk update to the senior management. • Establish IT Risk Management Framework and IT Project Risk Guidelines. • Enhance RCSA for critical IT projects, IT infrastructure and processes. • Conduct IT risk assesment for projects and IT infrastructure. • Provide risk advisory for IT project and infrastructure implementation. • Develop and roll out IT risk awareness program to inculcate the risk culture within organization.

• Spearhead the Quality Assurance activities for all IT projects • Conduct risk based audit on IT operations & functions covering various scope to identify gaps for information security compliance & assurance. • Incharged in the ISO 27001 & ISO 9001 certification.

• Perform system analysis for development • Analyse and gather requirements from users • Develop test plan, test case and test script. • Conduct software testing which includes integration testing, user acceptance testing and functionality testing. • Provide user support for APAC clients

• Analyse and gather requirements from users to evaluate service and solution available • Propose solution based on user requirement. • Prepare technical specification, functional specification and system mapping document • Develop test plan, test case and test script. • Conduct software testing which includes integration testing, user acceptance testing and functionality testing. • Coordinate with project team and other stakeholders for system implementation and support.

• Research on certain project or technology. • Evaluate and analyse problem statement or change request from users. • Analyse and gather requirements from users and perform gap analysis. • Propose development solution with technical documentation. • Develop web application and portals using Liferay Content Management and J2EE platform. • Conduct integration testing, user acceptance testing and functionality testing. • Facilitate on communication related to bugs and change request from user. • Provide users support and conduct user training.