Objective -

Seasoned and passionate Information Security Professional with over 10 years experience, seeking a challenging position with a company that will fully utilize my vocational experiences and expertise.

EXPERIENCE -

Confidential

Sr. Information Security Analyst

• Key participant in creating and updating security policies, standards and procedures.
• Successfully installed, maintained and configured Email archiving solution: CryoServer
• Utilized Tenable Security Center/Nessus Vulnerability scanner to performed monthly patch management reports, processes and maintained Vulnerability Management Program.
• Use Tripwire Enterprise Server for agency change management processes and Incident Response tracking.
• Use Safend Protector for Data Loss Prevention DLP processes.
• Perform Websense TRITON: Web Security administration, reporting and monitoring.
• Conduct quarterly entitlement re-certification.
• CA Top Secret Mainframe administrator.
• Point of contact and provided documentation and evidence to internal and external auditors.
• Identified security violations and inefficiencies by conducting audit reviews utilizing ScriptLogic Active Administrator, Files System Auditor, Enterprise Reporter and Top Secret Daily violation reports.
• Monitored email spam and virus reports using CISCO Ironport Email Security Gateway with management appliance.
• Monitor IPS/IDS system logs utilizing CISCO Network Analyzer and Symantec Endpoint 12.1 protection for host based.
• Assist in developing and maintaining yearly Security awareness program.
• Conduct incident response for malware outbreaks, malicious activities and security violations.
• Performed yearly walkthrough desk inspections.
• Report violations, incidents and malicious physical/technical activities to higher management.

Confidential

Entitlements Management Analyst

• Performed account administrations and maintained Role Manager v4.0 and SiteMinder.
• Performed Entitlement recertification for AS400, Top Secret, Oracle EBS and other various Broadridge applications using Role Manager v4.0.
• Documented process workflow overview and created end user training and video guides.
• Performed application reviews and liaise with the Business and IT personnel to identified proper certifiable attributes to be loaded into Role Manager.
• Performed ad hoc reports using SQL.
• Performed UAT Testing prior to launching certifications.
• Ran Java scripts on the Production and QA Servers for launching Production and QA Certifications.
• Assist in Migrating Java Scripts from QA to Production on off hours.
• Created and identified unique mappings and performed data reconciliation for user accounts to be loaded to Role Manager.
• Compiled recertification results, HR daily reports and liaise with Help Desk to ensure proper action to be taken.
• Comply with SOX and SAS70 regulatory requirements.
• Interact and escalate issues to higher management.
• Collaborate with HR to ensure accurate information are being maintained on the HR Database.
• Maintained, monitored and resolved inquires from group mailbox.
• Supervised one outsource associate in India to perform off hours support for SiteMinder administration and other manual application recertification.

Confidential

Security Monitoring Analyst

• Supervised 2 Simeio Solutions individuals in upgrading Vauu RBACx v4.0 to SUN Role Manager v5.0 and launched 4 applications campaigns.
• Acted as the single point of contact for any recertification, inactivity and security violations on all applications.
• Maintained credibility of information on our employee referential database.
• Scheduled weekly meetings between SUN MicroSystem, Simeio Solutions and BNP to discuss weekly progress, task tackled, budget and expenses, recommendations and areas of improvement.
• Documented SRM user manual and video training materials for line managers and business sponsor.
• Trained business managers, area support managers, call center personnel and desktop support in preparation for SRM initial Certification launch.
• Performed UAT and quality assurance testing prior to launching certification campaigns.
• Successfully launched and completed 4 application user entitlement recertification covering 100 line mangers for Fixed Income, Equities and Corporate Banking.
• Loaded 120 applications feeds, covering various platforms into Sun Role Manager.
• Ensured data confidentiality and integrity of information on SRM database.
• 24/7 round robin on-call support assisting the IT Accounts Provisioning team.
• Performed 120 manual user entitlements recertification for Front Office, Equities and Corporate Banking covering US, Canada, South America, United Kingdom and Tokyo applications, database and various platforms on an annual basis based on sensitivity.
• Monitored and processed user transfers and updated/deleted application profiles based on their current job titles.
• Processed application, network and remote access terminations provided daily by Human Resources.
• Monitored and report continuous failed login for high sensitivity applications.
• Comply with SOX and SAS70 Regulatory requirements.
• Provided user entitlements recertification results to Business/application owners.
• Updated, deleted application profiles and entitlements based on recertification results and business owners requests.
• Provided recertification, inactivity results and documentations required by Paris Inspection General, Internal and Deliotte Auditors.
• Maintained Firecall application database for Business Continuity Plan and for off hours support.
• Ensured data confidentiality, integrity and availability of applications, profiles, cost centers, approvers and business owners information on our IT Security database.

Confidential

Data Security Analyst Consultant

• Create, update and delete system application access for employees and 3rd party vendors.
• Analyze, troubleshoot and resolve employee trouble tickets pertinent to system access, security and ID issues.
• Compile and process monthly audit data from the Northeast and Midwest business sectors.
• Conduct system testing utilizing System Test Environment document new I2K Macros and install to direct users.
• Maintain and audit I2K Standards and model IDs to ensure proper access to distinctive job titles.
• Assisted with the RBAC Project provided I2K model IDs and performed testing to verify the accuracy of I2K.
• Gained substantial knowledge in security administration applications such as AS400, I2K, RACF, Identity Manager, Action Request System Remedy, Active Directory and TSO.