Summary
Overview
Work History
Education
Skills
Websites
Affiliations
Certification
Publications
Additional Information
Timeline
AccountManager
Hany Eskarous

Hany Eskarous

16 Merton Road, St Johns, Auckland, New Zealand,Auckland

Summary

Project Management: Proactive Project Manager well-versed in IT infrastructure and security projects. Forward-thinking and strategic leader with over 20 years in the IT industry. Skilled in guiding navigation of modern technology. Accustomed to driving efficiency and effectiveness by developing, delivering and supporting strategic plans. Demonstrated skills in translating business requirements into technical requirements and finally to business solutions. Successful 7 years in building positive relationships with internal and external stakeholders, and leading exercises such as sprint planning and team stand-ups. Ability to keep the team on track to meet project deadlines on budget. Communicated with management and clients to keep them updated on the status of projects.

Information Security:

Trusted Cyber Security Engineer & IT Auditor with over 5 years protecting organisations against both internal and external threats. Talented at pre-emptively detecting unidentified threat vectors and applying preventive measures to mitigate security flaws. Employs technological solutions and personnel training to harden both people and machines against malicious actors.

Objective: To seek and maintain full-time position that offers professional challenges utilizing interpersonal skills, excellent time management and problem-solving skills.

Overview

22
22

Years of professional IT experience

11
11
Certification
6
6

Years of Project Management experience

5
5

Years of IT Audit experience

15
15

Successful projects deliveries

2
2

Successful Programs deliveries

Work History

Group Cyber Security Manager

ACommerce Thailand Group
Bangkok
Jul.2022 - Aug.2022
  • Created cybersecurity best practice communications to educate staff against known threats and potential vectors of attack.
  • Participated in creation of device hardening techniques and protocols.
  • Developed and maintained incident response protocols to mitigate damage and liability during security breaches.
  • Managed relationships with third-party intrusion detection system providers.
  • Lead the Cyber Security Engineering team throughout BAU and projects
  • Perform IT security assessments for clients (e.g. security risk assessments, IT network infrastructure reviews, system technical configurations review, information security policies and processes/procedures review etc.)
  • Work on IT security design and analysis, and business continuity management, SOC 2 assessment and implementation of CIS top 18 Controls measurement.
  • Evaluate and analyze threat and vulnerability; impact and risk of security issues discovered from security assessments
  • Advise clients on security matters; including explanation on the technical details and remediation of vulnerabilities.
  • Review IT projects to ensure alignment of IT/IS initiatives

Senior IT Audit Manager – Assistant Vice President

Attijariwafa Bank (AWB) – (Previously Barclys UK)
Cairo
Mar.2022 - Jun.2022
  • Collaborate and support the Chief Internal Auditor (Audit Director) to define the appropriate coverage strategy and audit plan for Information Technology according to ISACA guidelines, IPPF and ISO 27001 standards
  • Supervise audit work to ensure that relevant Information Technology risks and controls have been identified and appropriately assessed.
  • Lead IT Audit Missions in different stages, starting by assessment of risks and controls within planning and scoping phase.
  • Support testing during Audit Field work and maintain the necessary quality and evidences including evaluation of the design and operating effectiveness of controls within the Audit working papers.
  • Review IT Audits Working papers and documentation including planning, fieldwork, and reporting.
  • To ensure that Findings, recommendations and final audit ratings are objective and not biased in line with AWB methodology.
  • Continue to update awareness of risk Findings and changes across relevant business units and use this knowledge to update audit approach/multiyear audit plan where necessary.
  • Supervise and oversee the progress of the Information Technology recommendations follow up and take appropriate action if needed.

Senior Infrastructure Project Manager – AVP

Attijariwafa Bank (AWB) – (Previously Barclays UK)
Cairo
Jan.2018 - Mar.2022
  • Complete and autonomous management over the Information Technology Operations (ITO)’ projects portfolio (with budget of US$ 20 million) as well as Microsoft’s Programme from design to implementation and successfully deliver a planned business change in line with the bank’s goals and objectives according to PRINCE2 methodology, PMBOK waterfall (IPM), Agile, or Hybrid.
  • Assisting with the migration of Attijariwafa core banking systems from ITO’s perspective. The migration was from the United Kingdom to Cairo, Egypt as well as Casablanca, Morocco.
  • Lead small to medium portfolio Programs that comprise multiple projects under the same organizational objective such as Microsoft’s Programme and the Tier 3 Diaster Recovery Site.
  • Run project steering committees, responding appropriately to all questions and queries through a thorough understanding of stakeholder requirements and how these translate into IT priorities within Enterprise Solutions
  • Track and report timelines, budgets, scope, risk and quality during the entire life of the project from inception to delivery – and manage issues and risks as they occur.
  • Evaluate project priorities as the business environment evolves, recommending adjustments to the road-map as new priorities emerge.
  • Provide project management expertise to Business Sponsors

Casual Lecturer

North Metropolitan TAFE , Western Australia
Joondalup, Western Australia
May.2015 - May.2017
  • Teaching and assisting Diploma students achieve the required assessment including but not limited to;
    - Designing, deploy, and operate Microsoft Active Directory for local and remote sites.
    - Integrate their solutions with Microsoft Exchange 2013 and Lync 2013
    - Develop contingency plans (DRP, IRP, and BCP) for that solution
    - Designing and implementing network and security monitoring solutions
    - Provide real-time support and problem resolution throughout the entire project work using ITIL practice.
  • Developing a new unit outline, marking, and mapping documentation
  • Make presentations to assist students understand the project and the products relevant to the solution
  • Prepare simulations for learners to demonstrate their skills
  • Thinking outside the box to perceive patterns that are not obvious, and devise new ways to carry out tasks, solve problems, and meet challenges.

Systems Administrator

Department Of Health, Western Australia
Perth, Western Australia
Jan.2016 - Dec.2016
  • Systems planning, implementations, maintenance, fault resolution, recovery of Microsoft operating systems in a large scale enterprise ICT environment (40 000 users)
  • Backup administration using assorted versions of applications and utilities
  • Liaising with users, departmental staff and external suppliers in the maintenance and support of the Department of Health’s information and information technology environment
  • Hardware, software, capacity and fault monitoring using Nagios, HPSIM, and SCOM
  • Administration infrastructure components such as (Clusters, Active Directory, DHCP, DNS, and GPOs)
  • Change management using ITIL practice and management procedures

Systems Engineer

Kinetic IT, Western Australia
Perth, Western Australia
Jun.2015 - Dec.2015
  • Administration of the INPEX virtual servers (800+ VMs) around the world
  • Install, configure and maintain servers, applications, and networking infrastructure components
  • Monitoring the network infrastructure using third party tools
  • Supporting infrastructure services such as DHCP, DNS, IIS, GPOs, File and Print services, and Active Directory
  • Administration of the messaging and collaboration environment using Microsoft Exchange 2010 and Lync 2010
  • Monitoring VSphere clusters using the VMware Operation Manager Centre (VCOPS)
  • Incident, problems, and change management using ITIL compliant products Service Now
  • Deployment, administration, and maintenance of the virtual application environment using Citrix XenApp 6.5

Senior Network & Security Administrator

North Metropolitan TAFE, Western Australia
Joondalup, Western Australia
Jul.2013 - Apr.2015
  • Manage projects or participate in project teams focused on the delivery of new or improved ICT services
  • Participate in the activities of the Information Systems Security Group
  • Analysis of the ICT infrastructure to identify and mitigate associated risks to the Institute’s business operations
  • Contribute to the design of Information Security Policy, processes, standards, and guidelines
  • Perform event analysis and problem resolution for the ICT infrastructure, including documentation of the implemented resolution
  • Manage the Change Management process for the IT services and infrastructure
  • Mentor and provide assistance to the Technology Services team members (Team of three)
  • Contribute to the formulation of IT strategy, operational, and service continuity plans
  • Assist in the design, review and improvement of network infrastructure and services to meet service-security, capacity, availability, and continuity requirements in a cost effective and timely manner

Wintel Servers Engineer

Alphawest Services Pty Ltd., Western Australia
Perth, Western Australia
Jun.2012 - Jun.2013
  • Performing the day-to-day administration tasks and investigating incidents and problems
  • Incident, problems, and change management using ITIL compliant HP SM7 Service Desk system
  • Operation of the client’s backup environment on a daily basis
  • Network hosts’ management using HP Systems Insight Manager
  • Administration of the TCP/IP services [IIS, DNS, DHCP, file and print services and Active Directory]
  • Sustaining the load balanced Microsoft SQL 2005 database environment for production applications
  • Administration of the messaging and collaboration environment using Microsoft Exchange
  • Administration of the messaging and collaboration environment using Microsoft Exchange
  • Administration of the messaging and collaboration environment using Microsoft Exchange
  • Monitoring the Test, Development, and Production environments using PRTG Network Monitor
  • Monitoring vSphere clusters using VMware Operation Manager Centre (VCOPS)
  • Administration of the antivirus enterprise security suite for all hosts (servers and desktops)
  • Administration of the TrendMicro Security Suite appliances using (IMSVA & IWSVA)
  • Administration of Microsoft Exchange ScanMail antivirus
  • Reviewing and applying Intrusion Detection, Firewall (IDF) rules to protect the production environment
  • Administration of the virtual server environment using VMware vSphere 5.1
  • Access control management, according to ISO 27002 using the RBAC model.
  • Basic administration of NETAAPP SAN FAS3210 7-Mode
  • Ensuing the compliance with The PCI Security Standards Council
  • Administration of the Citrix XenApp 4.5 Test, Development, and Production environments
  • Administration of the Citrix load balanced edge security using The Citrix Secure Gateway

Systems Administrator

Department Of Mines & Petroleum, Western Australia
Perth, Western Australia
Apr.2012 - Jun.2012
  • Designing and migrating the department’s anti-virus system for servers and workstation
  • Designing and Implementing the Department’s Host-Based Intrusion Defense System (HIDS)
  • Administration of the Infrastructure Services ( Exchange 2003, Antivirus suites, Galaxy Commvault backup, Vsphere, DHCP, DNS, IIS applications
  • Assist in the development and ongoing maintenance of documentation standards and procedures

Systems/Network Administrator

Office Of The Director Of Public Prosecutions
Perth, Western Australia
Jul.2008 - Dec.2011
  • Active Directory 2003, backup operations, systems health monitoring, and performance optimization
  • Implementing RBAC security model to accommodate the organization’s information security needs
  • Performing risk management, threat identification, and vulnerability assessment of the infrastructure
  • Assisting in the preparation of the Office’s information systems contingency plans (BIA, IRP, DRP, and BCP) to be aligned with the information security standard ISO/IEC 17799:2005
  • Operating the Office’s EMC NX4 fibre and iScsi NUS “Network Unified Storage”
  • Designing and applying the server rationalization plan using Microsoft Windows 2008 R2 Hyper-V and Microsoft System Centre Virtual Machine Manager 2008
  • Planning and migrating the existing virtualization environment from Microsoft VS2005 R2 to Hyper-V
  • Implementing Data Protection Manager 2010 for continuous backup protection on key services such as SQL 2005 and 2008, file-services, and Windows 2008 Hyper-V Virtual Machines
  • Supporting infrastructure services (AD, DHCP, DNS, Exchange 2007, WINS, GPOs, etc.)

Senior Systems Engineer

Computer Sciences Corporation (CSC), Currently DXC
Subiaco, Western Australia
Apr.2005 - Jul.2008
  • Maintaining the Wintel server security and advising on the required adjustments of the servers’ build
  • Assisting Woodside security team in performing vulnerability assessment and share the responsibility in;
    Performing threat mitigation along with patch deployments using Microsoft WSUS Server and other tools.
  • Operating several third party tools to perform the required security assessments
  • Maintaining the security configurations on the Wintel environment, including but not limited to;
    Hardening the servers’ security, designing security templates, and maintaining Group Policy Objects
  • Assisting with auditing of all Woodside-Shell extranet access point according to Shell’s security policies
  • Administering the Internet access point and web filtering using Microsoft ISA Enterprise Server 2004 and SurfControl for Woodside, Australia, USA, UK, Mauritania, Kenya, Dubai, China, and Korea
  • Administering and monitoring the enterprise antivirus environment using TrendMicro Office-Scan,
    Server Protect, Symantec corporate edition and Clear Swift MIMEsweeper
  • Administering the Internet access point and web filtering using Microsoft ISA Server 2004 and
    SurfControl for The Department of Justice in Western Australia, State Solicitors Office (SSO), Parliamentary Counsel Office, and The Director of Public Prosecutions (DPP) for the state of Western Australia
  • Operating the infrastructure Wintel servers for the Department of Justice around Western Australia
  • Providing remote and on-site support for the Department’s servers and adhering to the SLA
  • Assessing and escalating security incidents to the Global Security Team.
  • Assisting in performing vulnerabilities assessment and infrastructure Risk Assessment.
  • Applying the required security/critical updates as per Microsoft requirements using WSUS server

Education

Postgraduate Diploma - Computer Security

Edith Cowan University
Perth, Western Australia
Feb.2008 - Sep.2012

Bachelor of Science - Accounting And Computer Science

Abbasiya Institute of Computers And Commerce
Cairo
Sep.1995 - Jun.2000

Skills

  • Change management
  • Cyber Security
  • IT Operations
  • Effective team leading
  • Project management
  • Critical and strategic thinking
  • Analytical and Critical Thinking
  • Excellent Communication
  • Interpersonal Communication
  • Active Listening
  • Decision-Making
  • Self-Motivated
  • Excellent Communication
  • Analytical and Critical Thinking
  • Interpersonal Communication
  • Organization and Time Management
  • Excellent Communication
  • Analytical and Critical Thinking
  • Interpersonal Communication
  • Organization and Time Management

Affiliations

  • Project Management Institute - CAPM
  • Axelos - PRINCE2 Practitioner
  • Australian Computer Society (Member - Certified Professional - SFIA Grade 5)

Certification

  • Certified Associate in Project Management (CAPM)
  • PRINCE2® 2017 Certified Practitioner
  • Microsoft Certified Solutions Expert – Server Infrastructure
  • Microsoft Certified Solutions Expert – Cloud Platform and Infrastructure
  • Microsoft Certified Systems Engineer + Security
  • Microsoft Certified Technology Specialist
  • Microsoft Certified Trainer since 2002
  • Cisco Certified Network Associate – Routing and Switching [expired 26 August 2016]
  • VMware Certified Professional [expired 8 May 2015]
  • Citrix Certified Administrator
  • EC-Council Certified Ethical Hacker

Publications

· Published in 2013 with The Australian Computer Society : Anti-forensics: an analysis of popular
file-shredding tools.

http://bit.ly/HanyEskarousArticle01

· Published in 2019 with PMI’s ProjectManagement.com : 12-Tips-for-Managing-a-Successful-Project

https://www.projectmanagement.com/articles/548035/12-Tips-for-Managing-a-Successful-Project

Complete article URL: https://bit.ly/3QYHIfT

Additional Information

Right to work status: Australian Citizen, eligible to work and live in New Zealand indefinitely

Notice: One week

Employment readiness: Available New Zealand Bank Account, Driver License, and IRD number

Timeline

Group Cyber Security Manager

ACommerce Thailand Group
Jul.2022 - Aug.2022

Senior IT Audit Manager – Assistant Vice President

Attijariwafa Bank (AWB) – (Previously Barclys UK)
Mar.2022 - Jun.2022

Senior Infrastructure Project Manager – AVP

Attijariwafa Bank (AWB) – (Previously Barclays UK)
Jan.2018 - Mar.2022

Systems Administrator

Department Of Health, Western Australia
Jan.2016 - Dec.2016

Systems Engineer

Kinetic IT, Western Australia
Jun.2015 - Dec.2015

Casual Lecturer

North Metropolitan TAFE , Western Australia
May.2015 - May.2017

Senior Network & Security Administrator

North Metropolitan TAFE, Western Australia
Jul.2013 - Apr.2015

Wintel Servers Engineer

Alphawest Services Pty Ltd., Western Australia
Jun.2012 - Jun.2013

Systems Administrator

Department Of Mines & Petroleum, Western Australia
Apr.2012 - Jun.2012

Systems/Network Administrator

Office Of The Director Of Public Prosecutions
Jul.2008 - Dec.2011

Postgraduate Diploma - Computer Security

Edith Cowan University
Feb.2008 - Sep.2012

Senior Systems Engineer

Computer Sciences Corporation (CSC), Currently DXC
Apr.2005 - Jul.2008

Bachelor of Science - Accounting And Computer Science

Abbasiya Institute of Computers And Commerce
Sep.1995 - Jun.2000
Hany Eskarous