Shahzad Khalid
Riyadh
Summary
Results-oriented Internal Audit and GRC professional with over 6 years of experience in risk-based internal auditing, IT audit, governance, and regulatory compliance across diverse sectors. Led comprehensive internal audit engagements from planning to reporting, identifying control gaps and enhancing governance frameworks. Delivered insights that improve operational efficiency and ensure regulatory compliance.
Overview
6
6
years of professional experience
1
1
Certification
Work History
Semi Senior Consultant
RSM Saudi Arabia
Riyadh, Saudi Arabia
07.2025 - Current
- Developed and executed risk-based audit plans, audit programs, and RCEMs, improving audit coverage and consistency
- Led multiple end-to-end risk-based internal audit engagements, strengthening control environments and enhancing risk visibility across key business areas
- Identified high- and medium-risk control gaps, facilitating effective remediation and reinforcing internal controls
- Delivered internal audit reports that informed senior management decision-making and enhanced governance oversight
- Strengthened timely closure of audit observations through structured follow-up and effective tracking mechanisms
- Articulated findings and provided practical recommendations to strengthen risk awareness across functions
- Developed corporate governance frameworks, including ERM, compliance structures, Board/Committee Charters, and Policies & Procedures, enhancing governance and control effectiveness
Senior Risk Consultant – Risk Consulting
EY Ford Rhodes
Karachi, Pakistan
04.2025 - 06.2025
- Led risk-based internal audit engagements for public sector and donor-funded projects, including World Bank funded projects.
- Delivered high-quality internal audit reports and presented findings with actionable recommendations to senior stakeholders.
- Supervised audit teams and reviewed working papers, ensuring compliance with audit methodologies.
- Created Risk Control Evaluation Matrices (RCEMs) to assess design and operational effectiveness of internal controls.
- Conducted entity-level risk assessments, informing annual internal audit plans.
- Conducted regulatory reviews and developed 'As-Is' and 'To-Be' process flows for local government entities, incorporating business process reengineering techniques to identify and eliminate operational bottlenecks and improve service delivery efficiency.
Risk Consultant – Risk Consulting
EY Ford Rhodes
Karachi, Pakistan
04.2023 - 03.2025
- Designed risk-based audit programs and developed RCEMs tailored to client-specific risks and control environments.
- Conducted internal audits across sectors, overseeing planning, execution, and reporting phases to ensure compliance and identify risks.
- Reviewed internal controls and provided value-added recommendations based on industry best practices to enhance governance and operational practices.
- Delivered high-quality internal audit reports and presented findings with actionable recommendations to senior stakeholders.
- Documented comprehensive process flowcharts and narratives and led closing meetings with client management.
- Engaged stakeholders, facilitated interviews, and contributed to documentation and policy reform proposals, enhancing organisational governance.
- Supported World Bank initiatives, including the CLICK project, by evaluating institutional capacity in budgeting and taxation.
Senior Audit Associate – Risk Advisory Services
BDO Ebrahim Chartered Accountants
Karachi, Pakistan
04.2021 - 03.2023
- Conducted risk assessments and designed audit programs based on identified control gaps and business risks.
- Developed RCEMs and documented internal control environments, enhancing audit evidence quality.
- Delivered internal audit reports featuring critical observations, collaborating with clients to implement corrective actions and improve compliance.
- Led internal audit assignments for large commercial clients including Abbott, Sanofi, and Colgate-Palmolive.
- Conducted AML/CFT compliance audits and independent reviews of financial institutions, ensuring alignment with SECP and SBP regulations.
- Led eCIB data reviews for banks to ensure completeness, accuracy, and regulatory compliance.
- Developed RCEMs and risk registers in line with COSO ERM framework, contributing to strengthened governance structures.
- Participated in policy development and enhancement of internal compliance frameworks for asset management clients.
Semi-Senior Audit Associate – Assurance
Parker Russell A.J.S. Chartered Accountants
Karachi , Pakistan
02.2020 - 03.2021
- Executed statutory audit assignments, ensuring compliance with International Standards on Auditing (ISA) to enhance audit quality
- Performed substantive testing and analytical procedures, documenting audit evidence to support accurate financial reporting
- Evaluated internal controls, identifying financial reporting risks to strengthen the audit process and improve client confidence
- Assisted in preparation of financial statements and audit deliverables
Education
- Auditing, Accounting & Fiannce
ACCA
UK01-2023
Bachelor of Science -
Shah Abdul Latif University
Khairpur10-2015
Skills
- Risk-Based Internal Auditing
- Internal Audit Planning & Execution
- Control Design & Evaluation
- Regulatory compliance
- Enterprise risk management
- Risk Control Evaluation Matrices (RCEM)
- Report Writing & Issue Documentation
- Microsoft Office Tools including Power BI
Certification
- Data Integration - EY Bronze Learning Badge
- Internal Auditor Training - EY
- Enterprise Risk Management, EY
- General Data Protection Regulation (GDPR)
- EY Global Code of Conduct
Key Clients & Nature of Engagement
Real Estate & Construction:
- OSOOL Integrated Real Estate Company - Internal Audit
- Grey Construction Group - Internal Audit
- Prime Engineering Construction Group - Internal Audit
Financial Institutions & Asset Management:
- Faysal Bank Ltd. – eCIB Review, AML/CFT Audit
- Telenor Microfinance Bank – eCIB Review, AML/CFT Audit
- Pak Oman Asset Management – Regulatory & Compliance Review
Commercial & Healthcare Clients:
- Colgate-Palmolive Pakistan Ltd. - Internal Audit
- Sanofi Aventis Pakistan - Internal Audit
- Abbott Laboratories - Internal Audit
- DKT Pakistan - Internal Audit
- Holy Family Hospital - Internal Audit
Donor-Funded & Public Sector Projects:
- World Bank – SSPDSS, BHCIP, & CLICK - Internal Audit & Institutional Assessment
- Sindh Government Departments – Internal Audits & BPR
Languages
English
Urdu
Timeline
Semi Senior Consultant
RSM Saudi Arabia
07.2025 - Current
Senior Risk Consultant – Risk Consulting
EY Ford Rhodes
04.2025 - 06.2025
Risk Consultant – Risk Consulting
EY Ford Rhodes
04.2023 - 03.2025
Senior Audit Associate – Risk Advisory Services
BDO Ebrahim Chartered Accountants
04.2021 - 03.2023
Semi-Senior Audit Associate – Assurance
Parker Russell A.J.S. Chartered Accountants
02.2020 - 03.2021
- Auditing, Accounting & Fiannce
ACCA
Bachelor of Science -
Shah Abdul Latif University