SUMMARY

• Over 8+ years of experience in Software analysis, involved in Business Process Flows, Software Development Life Cycle, Process design, Business and functional requirements, testing and experience with RSA archer.
• 5 year’s expert experience with RSA Archer eGRC platform v 5.x/6.x with good understanding of eGRC concepts and architecture.
• Strong Understanding ofArcherData Feeds, questionnaires, calculated fields, workflow, reports, dashboards, I - views, Packaging.
• Extensive knowledge of back-end/server side maintenance of Archer, Archer Version upgrades, Archer Control Panel, IIS, Archer RSA Services.
• Experience in all stages of the Software Development Life Cycle (SDLC) and Software Testing Life Cycle (STLC) and worked on Waterfall and Agile project environment.
• BuiltArchersolution/functional architecture and rapid prototypes which hinge upon well planned integrations, supportability, and data structures, overarching goals and vision and strong implementation.
• Perform risk assessment of new IT projects, identify areas of potential technical and process vulnerability, recommend compensating controls and maintain the IT risk register
• Experience in unit testing, functional testing, user acceptance testing, integration testing, system testing, performance testing, sanity testing, exception testing, compatibility testing & security testing of client/server and web-based applications.
• Dedicated team player, a self-motivated individual, and has demonstrated leadership skills in a matrix organization, with the ability to build an effective cross-functional team and develop the individuals on the team.
• Exposure to different types of testing like Automation testing, System testing, Functional testing, Regression testing, Integration testing, Smoke testing, Database testing, GUI testing and User Acceptance Testing.
• Develop and maintain a formalized GRC frame work with business specific threats standards.
• Extensive experience in designing Test Cases, Test Scenarios, Test Scripts and Test reports of manual and automated tests.
• Responsible for security incident management solution that will be used to automate incident management process in Archer 5.x/6.x environment.
• Developed customized and maintained multiple solution applications, questionnaires, notifications and formulas to fit the needs of business group.
• Solutions worked for Vendor Management, Risk Management, Enterprise Management solutions, Polity Management Solutions, Business Continuity Solutions.
• Worked for on demand applications to create applications as required.
• To create user specific dashboards to deliver the right information to the right people at the right time.
• To integrate data using data feeds like, Network and asset discovery data, Vulnerability scan results, Performance score cards, Incident reports, Audit results and recommendations.
• Worked on Compliance Management to document the control framework, access design and operational effectiveness and respond to policy and regulatory compliance issues with remediation or waivers.

TECHNICAL SKILLS

GRC Tools: RSA Archer eGRC Suite 5.x/6.x, IBM OpenPages

Database: MS SQL Server, MySQL

Languages: JavaScript, .NET

Web Technologies: HTML, JavaScript, XML, CSS

Operating Systems: Windows 2000/2003/XP/VISTA/7/8, Linux

PROFESSIONAL EXPERIENCE

Confidential, Dearborn, MI

Sr. Archer Developer/Consultant

Responsibilities:

• Experience in installing, configuring and maintained multiple on premise instances of theArcherprogram version 6.2 and 5.5 which include a development, test and production instance.
• Experience in developing, implementing maintaining and monitoring a formalized eGRC framework, utilizing standards based controls aligned to business specific threats.
• Ability to enforce risk management policies and controls and standardize the vendor risk assessment and performance process to lower reputational risk, ensure regulatory compliance and review performance levels.
• Managing access control of the users on Archer. Adding new users to the platform rapid application development tools, vendor relationships, contacts, facilities, MSAs, contracts, engagements, certificates of insurance and financial viability assessments in a web-based repository.
• Worked for on demand applications to create applications as required.
• Involved in migrating Archer platform from v 5.5 to v 6.2.
• Responsible for requirements gathering and analysis, business process modeling, workflow development, system customization, software upgrades, maintenance, and documentation.
• Developed, customized and maintained multiple solutions, applications, questionnaires, notifications and formulas to fit the needs of the business group.
• Created, customized and maintained multiple user roles and groups to ensure the security of the information in theArcherprogram.
• Configured a flat file data feed from a third-party application for reporting onArcher.
• To integrate data using data feeds like network and assets discovery data, Vulnerability scan results, performance score cards, Incident reports, Audit results &recommendations.
• Developed and maintained Workspaces, Dashboards and iView's, Personal and Global reports.
• Implemented workflows for various core applications.
• Created and installedArcherpackages.
• Created an ETL (SSIS) solution with ASP.net web services to pull files from archer.
• Experience in involving testing the MS SQL database and data validation using SQL Queries.
• Managed RSA Archer for compliance, operations, SOX management and exception management.
• Responsible for Production Support for Issue and audit management.
• Working on SQL queries to get data from application outside of archer.
• Creation of SQL and Java scripts to push data out to downstream systems.
• Worked on a complex module- mass update which is used to update many fields for many tasks at once and making sure all functionalities are taken care.
• Implemented the data driven frame in SOAP UI and Java
• Tested various functions in web services with different sets of data.
• Provided extensive support for production issues during weekends and outside of working hours.
• Analyzing requirements and seeking Functional Clarifications.
• Design and Development ofArcheron Demand application.
• Involved in the testing of the UI Interface and cross browser testing.
• Responsible for developing the security incident management solution that will be used to automate incident management process in the organization inArcher 5.5 and 6.2.
• Evaluate and maintain up-to-date knowledge of the effectiveness of GRC standards and compensating controls in mitigating IT risk.
• Assist with maintenance activities, troubleshooting and resolving production issues, and maintaining content through regular vendor releases.
• To create user specific dashboards to deliver the right information to the right people at right time.

Confidential, San Jose, CA

Sr. Archer Consultant/Developer

Responsibilities:

• Worked as RSA Archer eGRC Developer to Manage Users and Groups, Manage Roles and Access Permissions.
• Also, worked on Risk Management applications including Administration, Policy Management, Compliance Management, Enterprise Management, Audit Management and other enhancements
• Evaluate and maintain up-to-date knowledge of the effectiveness of GRC standards and compensating controls in mitigating IT risk.
• Assist with maintenance activities, troubleshooting and resolving production issues, and maintaining content through regular vendor releases.
• Performed troubleshooting for problems with data feeds and determined root cause.
• Supported Enterprise and Business continuity workflows through the Archer tool while integrating the Issues Management module.
• Review existing systems and processes against the GRC framework and prioritize remediation plans based on business risk.
• Identifying all the risks through the risk management and register the related management measures and report.
• Working in a critical environment to reduce the risks and managing those risks in the system more effectively with access control.
• Working on the process control component of GRC suite which is basically used and maintain business processes at high level using master data.
• Used RSA Archer Rest API's extensively to work with files in archer.
• Experience in supporting of .net applications in a Windows hosting environment.
• Worked on standard data feeds to bring the data from an external source into an application or questionnaire.
• Worked on transport only data feeds on locating a separate data file that contains additional instructions for launching subsequent standard data feeds.
• Used to integrate the data using data feeds like Incident reports, audit results and recommendations, Vulnerability scan results, network and asset discovery data, performance score cards.
• Configuring the data feed to run on a set schedule, after the initial configuration the data feed executes automatically with no need to intervene.
• Created an ETL (SSIS) solution with ASP.net web services.
• Building a transport path between the platform and an external source and then map the data from that source to an existing target application or questionnaires in the platform.
• Involved in the development of Test plan, Scenarios and Test scripts for manual, automation and performance testing of the various applications.
• Interacted with Business Analysts on regular basis to understand the Business Requirements.
• Designed High Level Test Cases or Scenarios that map back to High Level Requirements and Use Cases.
• Performed Back-End Testing, database table manipulations of relational database systems by writing complex SQL queries manually.
• Created SQL Statements and UNIX/Linux Shell scripts to perform ETL testing on the oracle database.
• Also, responsible for security incident management solution that will be used to automate incident management process in archer 5.5 environment.

Confidential, NYC, NY

Archer Consultant

Responsibilities:

• Reviewing the current policies of the organization and refining them in terms of structure and content.
• Configuration of the RSAArcherplatform, along with the solutions and applications that support a variety of business needs & to achieve organizational objectives
• RSAArcherSmartSuite configuration and administration tasks include:
• Building & managing Solutions & applications intoArcher
• Building & managing Questionnaire & aligning it with the application or solution
• Setting up various notification types
• Various Data driven and calculated field configurations
• Creating iView's, dashboard, and work-space.
• Analyzing requirements and seeking Functional Clarifications. Design and Development ofArcheron Demand application.
• Involved in testing the MS SQL database and data validation using SQL Queries.
• Experience withArchercore solutions, on-demand applications, and data feeds.
• Developed and maintained Workspaces, Dashboards and iView's, Personal and Global reports.
• Experience with a data feed setup and UAT.
• Worked Extensively with XML and different RSA Archer data types.
• Good knowledge of notification configuration and functionality.
• Extensive experience using calculated fields and Data Driven Events.
• Performed highly complex analysis and design with a good understanding of the methodologies used in requirements gathering, usability testing, and documentation.

Confidential

Business System Analyst

Responsibilities:

• Created enforcement and governance around Problem and Knowledge processes
• Validate and finalize test Cases with business team and got approval prior to the test execution cycle start.
• Involved in analyzing the requirements and making the test plans.
• Executed test cases manually and reported defects.
• Integrate with other processes such as Event, Incident, Change and Release
• Move towards Problem Management to prevent incident from happening, and to minimize the impact of Incident that cannot be prevent.
• Utilized SQL (queries) programming to understand the DB structure.
• Created enforcement and governance around Incident and Event processes
• Improve how Change Management is associated with problem procedures
• Move towards Events to proactively prevent Incidents
• Developed timelines for project delivery used MS Project and monitored progress and allocated resources for successful completion of the project.
• Ensure that requirements for Problem and Knowledge tooling meet the needs of the process
• Improve Event, Incident and Request Management.
• Improve the ability to manage Problem and Known error better by solving problem in early phase.
• Installed and configured VMware and created Virtual Machines to create more workstations.
• Build/update process, policy, procedure, guidance, governance, job aids as defined by Service Operations ITIL framework.
• Ensure that requirements for Event, Incident, and Request tooling meet the needs of the process
• Integration with other processes as Knowledge, Problem, Change and Release

Confidential

Business Analyst

Responsibilities:

• Gathered Requirements, Developed Process Model and detailed Business Policies.
• The SDLC Methodology used was Agile.
• Gathered functional business requirements from process owners and developed functional specifications for application enhancements.
• Insure member eligibility for DME services: both benefit and current Medicare guidelines.
• Worked with development / technical team members to ensure that the enhancements would meet the defined business requirements.
• Used Master Pages, Partial Views, Templates and HTML Helper Extension to render multiple views.
• Used UI design based on HTML5, CSS3, ASP.Net MVC 5, JavaScript, JQuery, KendoUI, Bootstrap.
• Implemented ASP.NET MVC Architecture to separate the business logic and data of the application from the presentation by creating views, controllers.
• Conferred with Business Users to Gather Requirements for the design and development teams.
• Involved in exporting data from the database to flat files.
• Facilitated Joint Application Development (JAD) sessions, as well as conducted interviews of appropriate business/technical stakeholders.
• Gathered and documented use cases, detailedbusinessrequirements and developed process flow.
• Also preparedBusinessRequirement documents (BRD), Functional Requirement Documents (FRD), Technical Requirement Document (URD), essential in bridging the gap betweenBusinessManagement and the Development Teams.
• Analyzed Business Requirements to produce System Requirements for the technical team using MS Visio.
• Conducted Business meetings for the claims adjudication process and its workflow.
• Identifying and documenting UML Use Cases.
• Work with business users to define Business, Process, and Data Models to understand the overall business.
• Interacted and assisted the entire team on the testing tools and processes.
• Involved in evaluation of the user request for new or modified program to determine feasibility, cost and compatibility with current system, and computer capabilities.