👋 Hey there — I'm Shuaib, an internal auditor based in Dubai (CIA, CISA, CRISC). I work on technology and business audits in a group internal audit function, and I'm drawn to the ambiguous end of the work: unfamiliar systems, difficult data, incomplete populations, and processes that different teams run in different ways.

What I do differently is build the tooling an audit function runs on. I would rather test a full population than a sample, and when the right answer is a system — management action follow-up, recurring segregation-of-duties analysis, a data extraction layer — I build it and keep it running rather than wait for someone else to.

This site is where I write up what I am learning: risk and governance, the technical guides I wish had existed when I was solving the problem, and experiments with AI tooling. Use the search to see whether I have written about something you care about.

Get in touch on LinkedIn.