SUMMARY:

• An accomplished ITIL V3 foundation 2011 certified Senior Audit and Reporting Analyst with 13+ years of experience in ITES industry amongst which 10+ years in Information Security Audits, Access Reviews, Identity Access Management Administration and Banking Operations.

TECHNICAL SKILLS:

• Audits, Access Reviews; Security Awareness & Training.
• Identity & Access Management Administration on Active Directory, Mainframes and AS400.
• Cross - functional Coordination; Team & People Management
• Knowledge on SQL queries, preparing & analyzing reports, presentations.

WORK EXPERIENCE:

Confidential

Senior Audit and Reporting Analyst

Responsibilities:

• Work closely with Internal and external auditors(SOX, PCI DSS, OCC and KPMG), IAM team members and process owners to enable completion of audits per schedule
• Assist with execution and scoping of internal audit plan and timely completion of assigned audits
• Assess audit findings / gaps including control weaknesses and ensure processes comply with audit requirements; maintain sufficient documentation and evidences for audit and security standard requirements.
• Review the job aid for processes across the information security, work on updating Standard Operating Procedures and prepare process flow maps on Visio.
• Act as a POC for application owners & operational contacts and assist them for completing user access attestation effectively.
• Analyze the recertification data and monitor the progress to ensure recertification completion within the project timelines and assist to publish these data as part of recertification performance metrics.
• Perform walkthroughs in order to assist with process documentation, and develop system flow charts
• End-end reconciliation of Identity & Access Management procedures for various resources and partner with other teams
• Coordinate with IAM teams to identify and address issues on various Security requests and reconciliations and negotiate corrective action/remediation among relevant teams to address areas of concerns/defects
• Work on CDI ( Corporate Directory), daily and weekly application uploads into oracle database.
• Generate various reports using SQL for Audit and reconciliation. Responsible for ensuring data feeding into various reports is accurate and validation process in place for accuracy.Identity and Access Management
• Work extensively on day to day administration of systems and user IDs which include creation, password resets, modifications, deletion, user permissions and rights based on their identity and group membership for employees and contractors for several applications and servers.
• Perform access tasks in support of on-boarding, job change, leave of absence (LOA), return to work (RTW) and termination access management processes and ensures process compliance
• Perform quarterly security review of privileged accounts (application ids, user ids, local admin ids).
• Provide on-call support for Identity access management problems by working with internal and external teams
• Perform controlled resolution of Service now incidents and problems including prioritization and escalation to appropriate groups.
• Work on RBAC project (Role Based Access Control) for consolidating the User ID’s, Role Profiles and data cleanup; Creation of roles, role profiles, user ID's, and custom authorization objects based on the roles.
• Prepare and maintain procedural and training documentation for IAM processes.
• Train new hires and existing users in process, new updates, security operations and procedures; Train other IT and non-IT staff in security troubleshooting and problem solving as appropriate.
• Review weekly audit report and activity for applications which is part of weekly audit and log reviews

Confidential

Team Developer

Responsibilities:

• Responsible for day to day activities surrounding general user id administration and access controls on Shared Drives, Creating New shares.
• Work on Security Management - Configuring Account policy, Access rights & Password control. Active Directory Management including: user management, GPOs, building domains.
• Provide remote assistance and support on a regular basis to monitor and resolve user’s problems in the different regions.
• Ensure effective authentication methods are used to restrict system access to both users and applications. Performs periodic and on-demand system audits, including user accounts, application access, file system and system hardening to determine compliance with On Demands policies.
• Successfully trained 40 new hires and existing staff on SOP’s and new updates for different locations through classroom and video conferencing.
• Conduct internal audits and quarterly access reviews for all teams of Information Security department. Actively participated in Contingency planning and BCP Testing.
• Engaged in key audit and change management initiatives to ensure that operational risk exposure is considered and addressed.
• Run reports like the Ageing report/Out of SLA report to help manage queues efficiently without miss in SLA.
• Process data as per the e-Discovery SOP’s. Develop matters specific to litigation by loading a corpus of native electronic files from diverse media sets into E-Discovery systems.
• Monitor and provide comprehensive computer forensic investigations: Acquire, collect, document, and preserve evidence from various forms of electronic media and equipment.
• Conduct examination of digital media. Identify, document & prepare reports on relevant findings. Handle evidence in accordance with company policies and forensic lab best practices.
• Differentiate false positives from true intrusion attempts; track the latest in security vulnerabilities, advisories, incidents, and penetration techniques, review periodic vulnerability scan results
• Restrict access to Sensitive or Critical System resources or processes and have the capability to extend protection at the program, file, record, or field level depending on the sensitivity
• Manage issues resulting from investigation, work collaboratively with technical and business leads to follow up accordingly to security incident management procedures and processes, and assist in development and resolution of daily reports.
• Coordinate and negotiate corrective action/remediation timetables among relevant teams to address areas of concerns/defects
• Conduct quarterly Information Security Site Assessment Visits. Assist in facilitating compliance with established Information Security policies, procedures.
• Process account opening, assigning of services, removal of services (ACH, Wire Transfers etc.,) and account closures.
• Reconciling of checks issued by the customer for payments. Identifying fraudulent checks and informing the customer.
• Approval of Bank transfers.
• Research on accounts for missing deposits, missing items, fee reversals, encoding errors, item posted twice, miss posted Items, change orders, return item research, check research, cash vault research and backup documentation, address Maintenance etc and taking corrective actions as per findings.
• Call the Teller Services, Banking Centers, Cash Vaults, Return Item Processing Sites, Automated Clearing Houses (ACH) and various sites for adjustment, clarification and to collect supporting documentation.
• Develop checklist for auditing, perform team audits and feedback.
• Develop training plans for new associates on live production. Train new associates at the time of migration and mentored during soft live.
• Workflow coordinator for a team of 140 associates located at Hyderabad, Mumbai and Gurgaon.
• Prepare daily, weekly, monthly reports like: NRR (net resolution rate) Report, Allocation Report, TAT Report, Ageing Report, Volumes Reports, SLA Report, Audit reports, Dash Boards etc and project to Managers, LOB owners and different users through conference calls.
• Perform root cause analysis of errors and missing SLA cases.
• Actively participated in Contingency planning and BCP Testing.
• One of the core members of Green Belt project “Reducing SLA of Client Service Request.”

Confidential

Senior Associate Credit Card Quality

Responsibilities:

• Providing product information about Credit Card offers issued by the bank and capturing the client information and clarify Customer Queries.
• Analyze the payment history of the customer and taking the request for increase in credit limit, reversal of charges like late payment fee, interest and annual services charges etc.,.
• Taking Escalation calls, checking mails, updates and conducting meetings with team about them and how to achieve the set targets and goals.
• Audit of e-mails, letters processed by officers and monitoring the calls taken by them. Conducting feedback sessions on the audit done.
• Generate ACD Reports, Leads, and Barging Calls reports. Conduct team meetings and updating team with the new targets, festive offers on the product.
• Conduct review meetings with TL on Monthly Report of targets achieved, cross leads achieved, audits and feedbacks.