Asia-Pacific Information Security Leadership Achievements - ISC

Khawaja Faisal Javed, CISA, CRISC, CBCPManager of Operations and ICT ProductsSGS Pakistan (Pvt.) LimitedPAKISTANSenior Information Security Professional CategoryShowcased Project: InfoSec-ISO Standards & Courseware Development,Mentoring, and AuditingMr. Khawaja Faisal Javed has been working as manager of operations & ICT productsfor SGS Pakistan (Pvt.) Limited (a Subsidiary of SGS S.A. based in Switzerland)since 1999. Responsible for controlling the day-to-day activities related to overallauditing and training operations in systems and services certification in Pakistan.And in addition, he is handling the management, execution, and development ofauditors and trainers in the ICT products (ISO27K, ISO20K and BS25999) divisionin Pakistan & other GCC countries. Previously, he served multinational and nationalorganizations in the field of ICT, financial derivative online trading, as well as trainingand consultancy.Mr. Khawaja possesses vast and extensive experience based on over twenty yearsin IT GRC, information security management systems, IS auditing/training/coaching/consultancy, IT service delivery/support, IT infrastructure, BCP/DRP, system analysisand design, and business process re-engineering (BPR). He has immense experiencein designing, developing, and delivering training courses, including approximately4,500 hours of training and around 700 third-party certification audits in nearly 30countries worldwide. He is one of the first in Pakistan to achieve IRCA, UK registeredLead Auditor for ISO 27001 Information Security Management System in 2005 andis currently the only itSMF, UK approved ISO20000-IT Service management-LeadAuditor in Pakistan. He is the only IRCA, UK approved Lead Trainer in Pakistan,for conducting BS 25999 BCMS & ISO 20000 ITSMS and ISO 27001 ISMS. Hewas part of a volunteer group that developed the first version of an InternationalStandard for Information Security Mgmt System Auditing Guidelines - ISO 27007,released by ISO/IEC in Nov 2011.About the Showcased ProjectMr. Khawaja has designed and conducted several certification courses on informationsecurity and related topics, training approximately 2,000 professionals from over300 organizations worldwide. Outside his job responsibilities, he has dedicated histime to serving the security community through voluntary research. Mr. Khawajais a member of the first release of an Information Security Management SystemAuditing Guideline Standard - ISO 27007. He also voluntarily contributed to thedevelopment of an ISO27K implementation toolkit on an online forum www.iso27001security.com, which aim is to help information security students, novices,professionals, and organizations willing to implement an effective ISO27001 project.”I have a passion for information security and wanted to achieve high standards not onlyfor myself, but also for community. Although this project involved a lot of traveling awayfrom my family, I gained a great deal of professional satisfaction. Now, in addition, I amrecognized for these contributions, which is a wonderful and unexpected bonus,” saidMr. Khawaja Faisal Javed.“Mr. Khawaja developed many foundational information security pillars in Pakistan. Hisperseverance in encouraging an open exchange of IT governance, IS audit, controls,and assurance approaches is highly commendable. He has also played a pivotal rolein expanding the knowledge and skills of his community in the interrelated fields of ITgovernance, IS audits, security, controls, and assurance. ”-Dr. Jae-Woo Lee, 2012 Nomination Review Committee MemberMr. Khawaja is a keynote speaker and presenter at international conferences oninformation security, BCM, and ITSM. He holds an MBA degree with specializationin management information systems. He is also the president of the ISACA LahoreChapter and a member of DRI.- 28 - - 29 -