Irfan Ullah

Senior Supervisor – Risk Advisory

RSM Allied Accountants • Fulltime

Oct 2025 - Present • 7 mos

Senior Supervisor in the Risk Advisory practice at RSM Saudi Arabia, leading risk, internal audit, and regulatory compliance engagements for clients across Saudi Arabia. - Lead risk-based internal audits, including planning, execution, reporting, and follow-up - Oversee internal control and ICFR reviews, including design, testing, and remediation support - Deliver regulatory and compliance advisory aligned with CMA, ZATCA, and local regulations - Perform operational, financial, and governance reviews to strengthen control environments - Develop and enhance policies, procedures, and governance frameworks - Supervise engagement teams, review deliverables, and ensure quality and timely issuance - Act as key client contact and present findings to senior management - Support AML/CFT advisory engagements and business development activities

Assistant Manager – Risk Advisory / FAAS

EY • Fulltime

Dec 2022 - Oct 2025 • 2 yrs 10 mos

Irfan Ullah is an Assistant Manager within EY MENA, providing Risk Advisory and Financial Accounting Advisory Services to clients across the MENA region. In this role, he manages multi-location engagements, supports senior stakeholders, and delivers high-impact advisory solutions in complex regulatory and operational environments. During his tenure at EY, Irfan has led and delivered a broad portfolio of engagements, including: - Managing and executing internal audit and internal control reviews for listed and non-listed entities. - Leading ICFR / COSO and SOX-aligned control design, documentation, testing, and remediation. - Delivering regulatory and independent assurance engagements, including ISAE 3000 and ISAE 3410. - Conducting risk-based internal audits, including audit planning, risk assessments, execution, and reporting. - Performing operational, financial, and regulatory compliance reviews in line with regulations. - Leading engagements, including enterprise-control evaluations, and transaction monitoring reviews - Supporting clients with reporting advisory, accounting policy and remediation for reporting gaps. - Designing policies, procedures, and governance frameworks to strengthen controls. Key responsibilities and leadership contributions include: - Managing teams, deliverables, and ensuring quality and time management. - Acting as the primary point of contact for client management. - Coaching and mentoring team members to enhance technical capability and delivery efficiency. - Supporting business development activities, including proposal preparation and client presentations. Core competencies at EY include: Risk Management | GRC | Regulatory & Assurance Services | ICFR / SOX | Internal Audit | AML/CFT | Financial Reporting Advisory | Policies & Procedures

Experienced Risk & Advisory Professional – Deloitte Pakistan (2018–2022)

Deloitte • Fulltime

May 2018 - Dec 2022 • 4 yrs 7 mos

Irfan Ullah is a Risk and Advisory professional with extensive experience gained at Deloitte Pakistan between 2018 and 2022, where he worked on a wide range of Risk Advisory and Financial Accounting Advisory Services (FAAS) engagements across multiple industries. He is an Associate Member of the Institute of Chartered Accountants of Pakistan (ICAP) and a Certified Internal Auditor (CIA) accredited by the Institute of Internal Auditors (IIA). He also holds a Bachelor’s degree in Accounting and Finance. During his tenure at Deloitte, Irfan led and contributed to complex assurance and advisory engagements, including: - Internal audits and internal control reviews - ICFR and COSO-based control design, documentation, and validation - SOX compliance and control testing engagements - Independent assurance and regulatory audits (ISAE 3000 and ISAE 3410) - Risk-based internal audit planning and execution - Operational, financial, and regulatory compliance reviews - AML/CFT engagements, including risk assessments and transaction monitoring reviews His core areas of expertise developed at Deloitte include: - Risk Management - Governance, Risk, and Compliance (GRC) - Regulatory and assurance services - Financial accounting and reporting advisory - Development and implementation of policies, procedures, and internal control frameworks