Information Security Analyst Resume
3.00/5 (Submit Your Rating)
Phoenix, AZ
SUMMARY:
- A highly motivated self - starter with substantial Identity and Access Management (IAM) knowledge and experience seeking a challenging position within Information Security.
- Mastered a steep learning curve quickly in a complex discipline, in a fast-paced environment.
- CISM certification (Certified Information Security Manager) in progress.
- Technical Project Management background. Strengths include: requirements development, service engineering and integration, driving results, delivery, technical and analytic capabilities, detail-oriented approach, and customer focus.
TECHNICAL SKILLS:
- Identity and Access Management (IAM)
- IAM Information Security Assessments
- Privileged Access Management
- Secure File Transfer (SFT) Transmitter Profiles
- Information Access Policies and Standards
- Access Lifecycle Management Controls
- Group and Service ID core attributes
- SharePoint Content Publishing
PROFESSIONAL EXPERIENCE:
Confidential, Phoenix, AZ
Information Security Analyst
- Operated the High Risk Application Attestation control for over 875 applications to document, track and monitor Access Controls across the Enterprise; year over year results: 100% response, 0 audit deficiencies.
- Assessed application authentication and authorization methodologies and access review control compliance relative to Information Security Policies and Standards; application integration disposition outcome result.
- Created an automated process via RSA Archer for the manual HRAA control that saved 100’s of man hours.
- Integrated over 100 separate Information Security applications into SailPoint IdentityIQ (IIQ).
- Created and conducted information security assessments and consultations based on established IAM policies and standards; documented application owner’s operation of Access Lifecycle Management Controls.
- Engaged with 200+ application and security teams to verify or update Active Directory groups and Service IDs conformed to established best practices minimum quality standards; strengthens entitlement access control.
- Analyzed IAM applications for compliance with Active Directory groups and Service IDs data quality standards, adoption of PowerBroker for Windows or Unix & Linux Privilege Management coverage, and implementation of CyberArk Enterprise Password Vault (EPV); identified gaps to reduce overall InfoSec risk.
- Created and maintained over 100+ Secure File Transfer (SFT) Transmitter Profiles for user accounts and entitlements aggregation in a timely and accurate manner to support disconnected application integrations.
- Certified SharePoint Content Publisher obtained in support of multiple team SharePoint sites.
Application Architect
- Delivered Configuration Items Package File data form; a more user-friendly artifact with less complexity, improved usability, increased functionality and flexibility reducing deploy services cycle time by days.
- Enhanced Midrange Services and processes to reduce the cycle time of provision services.
- Designed service solutions for Reference Architecture (RA) Patterns for the vCloud Computing platforms.
- Analyzed services and processes to reduce delivery cycle time and increase customer satisfaction.
- Demonstrated expertise in Midrange environments provided by IBM, vCloud, and Storage service providers.
Lead Infrastructure Engineer
- Delivered six to eight Reference Architecture (RA) ITSC releases per year.
- Designed technical solutions for 41 integrated Midrange RA services for consistent end-to-end experience.
- Processed 10 releases in 2012; Updated 125 services; 100 requirements documents and 470 deliverables.
- Developed processes and capabilities to reduce service delivery cycle times.
- Ensured technical solutions adhered to standards and met business requirements.
- Planned strategies and service transformation requirements for rapid adoption of new technologies.
Project Manager
- Engineered one service offering in to 28 integrated Provision, Modify and Deploy services.
- Developed requirements for 76 service updates; collaborating with the business and service provider teams.
- Delivered six to eight Midrange Services releases per year; engineered multiple service integrations.
- Managed project risks and issues, with mitigation plans in place to ensure delivery.
- Facilitated quarterly process training and provided ongoing advisory consultations.
Confidential, Phoenix, AZ
Project Manager
- Delivered four to six large releases per year for tier 1 applications according to Scope, Schedule and Cost.
- Delivered four infrastructure uplift and re-platform initiatives successfully and on time.