It Audit And Risk Analyst Resume
Foster City, Ca
SUMMARY:
- 21 years of experience with various IT technologies, network security, various platforms, system authorization/authentication, application/architecture and frameworks
- 21 years of Active Directory, Group Policy, MS Windows solutions and Server provisioning
- 21 years of experience with many types of defense software and anti - viral support
- 5 years of experience with Oracle9i Forms/Reports developer functions
- 14 years of experience with supporting hardware/software installations, troubleshooting backup/recovery options, hard drives configuration, memory, controllers, protocols and resolving complex issues
- 16 years of experience in system performance and monitoring on a Business LAN/WAN
- 21 years of skill/ knowledge with various methodologies, tools and the ability successfully managing/set-up multiple projects simultaneously with a proven ability to add value to a company
TECHNICAL SKILLS:
LAN Security Firewalls ADUC Sun Java Desktop Imaging Virus/Network Scanning E - Business/GIS Voice Over IP VOIP Novell/Zen Works MS Windows/Office Endpoint Solutions Qualys Guard Citrix Server Lotus/MS Exchange RMAD Backup & Recovery Scripting/SQL Maximo/SAP McAfee/Sopho s Encryption QRadar SDLC Cloud Computing PHI/PII/PAI Data Solaris Unix Archer IT Audits Multi-Factor authentication PowerShell HARDWARE SKILLS Telecom/Nortel Tokens Routers Modems HUBS LAN Networks Network Scans Scanners VOIP Intel adapters Wireless LAN Mobile Computing Routers RAM Laptops PROTOCOLS NWLink IPX/SPX Telnet SSH TCP/IP/DHCP DNS/WINS SMTP LDAP FTP/SFTP POP Net BIOS
PROFESSIONAL EXPERIENCE:
Confidential
IT Audit and Risk Analyst
Responsibilities:
- Daily responsibilities includes enforcing IT Audit and Risk controls by proactively reporting, monitoring and identifying operational risk enterprise-wide
- Regularly evaluate internal/external technical security controls reviews, perform IT audit/risk advisory services for existing or prospective IT systems, technology, applications, medical and IT devices
- Perform Risk Assessments for current and/or previously engaged 3rd Party vendors, providing risk recommendations and mitigation based on regulatory compliance guidelines
- Assisted in Enterprise Risk Management and compliance initiatives for future state decisions concerning system-wide technologies
- Play key role in leading the Social Engineering/Penetration testing programs which also includes the RFP vendor selection process, reducing exposure to the current evolving threats and vulnerabilities
- Effective communication and coordination of legal contracts such as BAA, DUA, MSA and other business related agreements
- Assisted in the development/modification of internal risk, security policies, processes and procedures
- Regularly promote IT security and compliance based on regulatory, legal standards and frameworks such as NIST, HIPAA, OCR, PCI COBIT and ITIL
- Demonstrate forward-thinking, analytical and problem solving skills
- Collaboration with various cross-functional teams such as IT, HR, Finance, C-level /executive leadership to address the current and emerging risk, threat landscape and security trends
- Regularly report and track data breaches within a Data Loss Prevention (Vault/File)
- Work with various IT tools such as ADUC, SharePoint, Service Now, RSAM GRC and File Share administration
Confidential, Foster City, Ca.
Information Security Analyst
Responsibilities:
- Accountable for day to day IT operations within a global organization, duties include application/system support, provisioning, authentication and network security within a fast pace environment
- Analysis with implementing Identity Management and Role Based Access Control projects utilizing OIM (Oracle Identity Management)
- Perform complex BI-Annual attestations /remediation process for all (Local Windows Servers), which includes extensive data collection, (process) documentation, certification, exception processing, data mining/gathering and collaboration with Executive management
- Hands-On experience MS Excel - data analysis, data mining, manipulation, pivot tables-charts, V-Lookups
- Administration and provisioning for Web Servers, Appliances, MS Windows Sever Turnovers, Server Decommission and technical troubleshooting and support within various domains
- In-depth knowledge of IT process, documentation, privileged access, logical Security defense and badging
- Support with email Digital Certificate Authorities, PKI/token Encryption, Bluecoat Proxy and McAfee suites
- Maintenance and administration for trusted Digital Certificate Authority which includes the issuance, training and documentation
- Research, alleviate potential/actual risk in efforts to identify areas that may require new measures or policy change based on best practices
- Support and analysis with tools such as Quest compliance suite, ADUC, Active ID Client, RMAD, RPM, Vlookup, MS Windows, Office, SharePoint, PowerShell, & scripting, SDLC and File Share administration
- Operational Security Support with Firewalls, Proxy Services and Secure File Transports
- Proficient technical/non-technical communication, reporting, analysis, One-on-One training and education for end users
- Consistently conveying a follow through approach for project deadlines, streamlining process while demonstrating proper resolution with a degree of creativity
- Proven ability to collaboration with internal/external teams working as an integral part of the team, independently with minimal coaching, a self-learner
- Experience with compliance projects, TSR security exceptions /specifications, assessments and CRQ-Change management request
- Request management and resolution via BMC Remedy ticketing system, consistently meeting or above SLA obligations, thereby increasing overall company productivity
Confidential
IT Security Specialist
Responsibilities:
- Daily responsibilities include support for 6000 BCBSM employees, ensuring proper business system access, IT roles, approval flow, utilizing Confidential -IAM automated provisioning services based on end-user profile
- Oracle- Identity & Access Management administration within a fast-pace Health Care environment
- Security analysis and support within multiple environments, such as Windows 2007, UNIX, Citrix Server on an enterprise-wide network infrastructure
- System administration/provisioning with industry most trusted vulnerability management with intrusion protection systems, such as Check Point Dashboard-R7540, Archer, Qualys Guard and Q - Radar in efforts to find, capture and track network risk/vulnerabilities
- Conduct assessment on various IT network resources including SIEM (Security Information and Event Management) to review/respond based on information and reports obtained
- Active Directory administration, provisioning/de-provisioning access, conversions, migrations, LAN ID’s/service accounts, in house scripting & deployments, secured access and File Shares/Folder level, volumes permissions
- Perform maintenance with inter-office Mailboxes, Distribution List, Resource Scheduler (RSOE) DB and MS Outlook accounts utilizing Exchange Management Console 3.0
- Custom access rights for specialized security groups, Webinars, Web Ex, Social Media, LDAP-Sun 5.2, FTP Integrator Developer rights and insuring valid domain authentication for Access Controls
- Device exceptions administration, Local Group Policy, including Microsoft Management Console (MMC)
- Reduce vulnerability while providing support within an developing IT environment
- Minimize vulnerabilities for Protected Health Information (PHI) data sets based on HIPAA regulations
- Ensure accuracy within s oftware deployment lifecycles such as development, production, Q & A
- Internet/Intranet Administration, RSA/tokenless authentication, SharePoint 2010 and wireless LAN
- Clear verbal/written communication skills for internal stakeholders and end users
- Incident management utilizing HP Service Manager to investigate, respond, follow-up, resolve, or escalate IT security related request
- Review of weekly production logs, non-usage reports for security audit/compliance purposes
- System support with (BCBSM ) Blue Unite migration project
- Utilize SharePoint 3.0 for ccontent s haring, instructions, operating procedures & reference tools
- Encouraged best practices based on policy, procedures, ITsecurity standards and good governance
Confidential
Active Directory/Exchange Support Engineer
Responsibilities:
- Migration of MS Windows XP to Windows 2007 engineering, maintenance and support on “ISSAC” project
- Active Directory 3.0 support, enabling automatic provision for users on specific network access to a new centralized system
- Extensive troubleshooting MS Windows desktops, resolving hardware, software and networking issues
- Active Directory Administration based on MS Group Policy, to perform and/or coordinate moves, adds, and changes onto the network
- Administration of Windows 2007 servers in Active Directory network environment
- Migration between Windows domains, workstations, troubleshooting user profile/software related issues
- Support with Microsoft Office, Outlook, Microsoft Exchange Client and Confidential Norton products
- End Users and Desk support with remote tool Dame Ware 6.0
- Utilize SharePoint 3.0 to monitor, collaborate, content management, sharing and distributing data
- Excellent communication skills, written/verbal, reports and technical documentation
- Coordinate and maintain multiple projects simultaneously with effective implementation by exhibiting leadership skills with timely results
- Altiris Reports/Console 6.0, network management, troubleshooting and configuration
- Sarbanes-Oxley compliance, auditing and reporting
Confidential
LAN Manager
Responsibilities:
- IT technical support for DTE employees on a large business WAN, multiple Platforms such as MS Windows XP, Novell 7 Linux, UNIX (Solaris) and NAS Servers
- Confidential -Veritas tools utilized for ghost-ware Desktop imaging, backup and recovery
- Utilize Secure Desktop tools, Citrix management console Citrix Servers, Sun Java - Identity Manger, MS Active Directory, LDAP user administration/security, Novell Netware-Clients, MS security patches updates, new releases, ActiveX and Sun Java
- Software administration for deployment tools such as Marimba Tuner, MS Active Directory, Group Policy
- Proficient in MS-Remote Assistance, Dame Ware ticketing system, Wireless LAN, FTP/SFTP and PeopleSoft (Workforce Monitoring)
- Experience with protocols such as TCP/IP, DNS/WINS, LDAP DHCP and static IP’s
- Ensure accuracy while collaborating with procurement teams/vendors during the procurement process
- Support with IT SLA, SOX & ITIL compliance related projects
- Effective communication with DTE Executive management teams to ensure adherence with proper approval authority
- Wyse/Kiosk Thin devices, Dell Desktop/Laptops, MDT - Tough books, deployment & End-of-life support
- Technical support for Local/Network printers faxes and other multifunctional devices
- Desktop Support/Configuration for all Adobe products, MS Office, MS Visio, FTP, Online Learning, Confidential Antivirus Software, Internet protection
- Firewall intrusion support, troubleshoot and resolving software issues
- Troubleshoot Confidential email Lotus Notes Desktop/Web Access Notes 6.5 configuration/administration
- Assist with remote dialing-in procedures/process via Mobile Authentication, VPN and Secure ID cards
- Provided professional, verbal, written communication skills during technical training for new hires
- Support for AIX Boxes, I2R, Mainframe, HP-Unix, Solaris, Oracle DB 9i and database administration
- Assist in initial deployment of Maximo and SAP modules enterprise-wide support
- PointSec protection software, hard disk Encryption and Decryptions
Confidential
Migration/Systems Support
Responsibilities:
- Novell Netware 6.5 system migration project deploying Novell I-Manager & MS Windows XP
- Support for Active Directory objects, schema, partitions, replicas and other network systems
- Network troubleshooting, client support utilizing various tools such as Novell, MS Windows, Console1, CITRIX Client, Sharpoint and MS Active Directory group policy deployment
- Consistent verbal/written communication with an understanding of IT processes & procedures
- Daily responsibilities include NALL associations utilize technical tools with various Novell applications
- Administration & configuration Lotus Notes/Mail and Domino 7 Web version
- Collaboration daily on a basis with teammates/clients in efforts to provide accurate, timely status reporting, maintained ticket request generated via Workbench Help Desk ticketing system
- Excellent ability to demonstrated time management, precise communication while on technical projects, to prioritize according to the team objectives
Confidential
Network Support Analyst
Responsibilities:
- IT support for Ombudsman Employees/Executives, resolving complex issues and technical development
- Pre-Research for IT purchases based on technical needs and specifications of the Office Ombudsman Office
- Maintenance and troubleshooting for MS Office, Corel Suite applications, Internet Explorer 6.0, e-Business suites, GIS, Photoshop, HTML, Lotus 123, FrontPage 2003, Flowcharts and Adobe Reader/Acrobat 8
- Installation/configuration for hardware/software, resolving complex issues including wireless devices, HP/Compaq Desktops, Laptops,, Macintosh, telecommunication/Nortel VOIP, Intel/PCI-Adapters, RAM, mobile computing, analog/ISDN modems, Hubs, Printer deployment and Confidential Server administration
- Utilized Windows NT User Manager for Domains to administer Adding/Removal of end-users onto the system, managing Log-On scripts, directory settings and User Access Controls
- IT Administration/networking with protocols such as NWLink IPX/SPX, WINS, Net BIOS and DHCP
- System monitoring, IT security protection, review of real-time breaches and reducing vulnerabilities
- Ensure enforcement of IT standards for desktop security, MS Service Packs, Backup & Recovery options
- Oracle 9i database developments functions, installation configuration and maintaining all SQL/PL, TNSNAMES, Global Names, IP PING’s and database updates/insert operations
- Support for Internet Explorer 6.0, proxy servers, completed inquires pertaining to E-Business and Geographic Information Systems completed research and resolve various complex issues
- Support with the installation of Oracle 8i database conversion from Mainframe/Windows within a test/production environment, provided training courseware, development for End Users
- In conjunction with this IT role my responsibilities included leading various IT and compliance related projects, to ensured accuracy of statistical analysis publications for the Ombudsman complaints and inquiries on an annual basis
