Summary
Overview
Work History
Education
Skills
Accomplishments
Personalassets
Certification
Timeline
Generic
Nutan Bhojja

Nutan Bhojja

Hyderabad

Summary

Detail-oriented risk manager improving safety performance and culture to promote sustainable value within the field. Demonstrates excellent time management techniques and organizational skills to meet business targets. Interacts effectively, utilizing good communication skills, cooperating purposefully and providing guidance to mitigate risks.

Overview

12
12
years of professional experience
1
1
Certification

Work History

Lead Risk Analyst (Information Security Governance, Risk & Compliance)

Bank of America
Hyderabad
06.2020 - Current
  • Implementing an overall risk management process for the organization, which includes an analysis of the financial impact on the company when risks occur
  • Identify control weakness in the system and use analytical skills to determine potential risks and impact which might bring business down and reputation
  • Coordinated with stakeholders to ensure alignment with business objectives.
  • Created detailed plans for implementing new systems or procedures.
  • Attending walk-through calls with process owners and business owners about process change for applications.
  • Developed strategies to ensure successful implementation of changes.
  • Raise any non-compliance and follow up on the corrective actions until closure.
  • Conducted gap analyses to identify areas of improvement in change processes.
  • Monitored progress of change initiatives and reported results to management team.
  • Contribute all relevant management information (KPIs/KRIs) to the various scope reports/dashboards
  • Ensure appropriate escalation to management and/or Permanent Control (or Compliance, as appropriate), as soon as an issue is identified.
  • The enforcement of Permanent Controls, providing ongoing risk controls self-assessment status of the control environment.
  • Managed relationships between internal teams and external vendors and partners involved in the change process.
  • Performing a risk assessment: Analyzing current risks and identifying potential risks that are affecting the company.
  • Establishing the level of risk, the company is willing to take
  • Conducting policy and compliance audits, which will include liaising with internal and external auditors. Building risk awareness amongst staff by providing support and training within the company.
  • Communicating with the internal teams regarding risk management steps and procedures.
  • Making sure all the major risks are identified and followed up with the respective application and technical teams
  • Ensure coordination with the stakeholders and all the third-party vendors whenever needed.
  • Maintaining the agreed SLA with the client to avoid deviation
  • Implemented procedures for monitoring and controlling operational risks.
  • Reviewed internal processes for identifying, measuring, monitoring and reporting risks.
  • Evaluated existing policies and procedures related to compliance with industry regulations.
  • Prepared reports highlighting key findings from risk assessment activities.
  • Constructed periodic surveys and inspections to comply with regulatory committees.
  • Resolved conflicts among stakeholders concerning proposed changes or implementations.

Application Support Lead for E-Commerce Platform

JD Sports fashion PLC India LLP
Hyderabad
09.2018 - 06.2020
  • Training team members on On-going alerts on New Relic/ Pingdom and issue trends using measurement tools (Grafana)
  • Ensuring Metrics & SLA’s are always met as per the firm’s Policy & agreement
  • Conducting regular workshops for Testing/ Dev’s team for creating awareness on Risk involved using Open Source Software’s and Repositories
  • Work allocation to the teams on a shift basis.
  • Make sure firm meets GDPR policy while handling customer information
  • Performing Review and Assessment through enterprise level to make sure all the functions are adhering to GDPR policy
  • Anchoring Major incident response team to facilitate swift and effective resolution of high severity incidents by creating an effective and efficient team through continuous communication, timely feedback, and appropriate supervisory practices
  • Work with team member to identify areas if focus, where training may improve team performance and improve incidents resolution
  • Responsible to conduct analysis of daily/monthly metrics to track performance of individual team members over time to evaluate performance, learning, and capability.
  • Engagement with business units and project teams to complete User Access Reviews and validations
  • Support RCA and Action planning on Observations / Recommendations
  • Make sure to review the incidents and provide the RCA to the LOB heads.
  • Attending daily client calls, setting up correct timeline for issues with the clients and resolving them
  • Experience with creating processes, procedures, and documentation relating to incident management.
  • Create and maintain documentation for production support activities and ticket triage knowledge base across the applications.
  • Responsible for monthly trainings for team in India and the UK.
  • Redrafting 'Standard operating procedures' (SOP) / process manual in accordance with Document control.

Risk Analyst (regional)

JPMorgan &Chase India Pvt Ltd
Hyderabad
06.2015 - 05.2018
  • Responsible for directing workload and operational standards for other satellites through partnership with regional executives, maintains BAU and drives strategy for request processing and risk management.
  • Onboarding/Offboarding Finance Applications within the given timelines.
  • Initiating regular KPI calls within the team to make sure all the SOPs are compliant with the Firm's policies.
  • Updating monthly Revocation Repository Reports to clear the Deceased IDs from Banking applications across all the sites.
  • Engagement with business units and project teams to complete User Access Reviews and validations( Access Certifications)
  • Initiating support of regulatory, audit, and IAM directives to ensure all approvals are being reviewed and in place for SOPs.
  • Participate in IT audits by providing information and documentation in a timely manner, where required.
  • Support RCA and Action planning on Observations/Recommendations.

Risk & Controls Analyst (Information Security Management)

Bank of America
Hyderabad
08.2012 - 06.2015
  • Performs user ID administration access provisioning/de-provisioning (additions, modifications, deletions) for in-house applications based on information contained on access.
  • Revocation Repository Certifications and reporting.
  • Identifying and evaluating potential threats and vulnerabilities in Access Provisioning.
  • Access provisioning for all banking users on 250 banking applications with RBAC profiles.
  • Monitoring revocation repository certifications across the LOB and communicating the outcome with LOB and Business heads on a monthly basis.
  • Handling calls with SOD teams for regular SOP reviews and Access Certifications.
  • Handling Access Certifications/Revocation Repository Calls with business teams for regular breaches and assisting the team with possible solutions within the SLA.

Education

Bachelor’s Degree in Computer Science & Mathematics -

Osmania University
Hyderabad
01.2012

Skills

  • Microsoft Excel
  • Risk Assessment
  • PAM (Privilege Access Management)
  • Internal Controls
  • Pega PRPC
  • Jira
  • Atlassian
  • Service Now
  • New Relic
  • Pingdom
  • Splunk
  • HPSM
  • Cyber Ark
  • SailPoint
  • Grafana
  • Confluence

Accomplishments

  • Implemented Vendor risk /Third-party vulnerabilities Detection Strategy for ERTS tower in Bank which prevents Data Leakage.
  • Created and implemented a process for Phishing emails issue which helps the firm to protect or avoids stealing firm’s sensitive data by malware targets.
  • Recognized with Gold award in December 2014 for eliminating the risk factor from Banking Centre Associates by revoking My-desk access to more than 5000 Banking Centre associates in US & On boarded ARS Platform to set up the Outlook with Secured Procedure.

Personalassets

  • Quick learning skills, effective communication and team working skills.
  • Skilled in teamwork, creative thinking.
  • Adapt to Job Challenges.
  • Zeal to learn new things and work innovatively.
  • Dedicated hard work with smartness.

Certification

  • CISA

Timeline

Lead Risk Analyst (Information Security Governance, Risk & Compliance)

Bank of America
06.2020 - Current

Application Support Lead for E-Commerce Platform

JD Sports fashion PLC India LLP
09.2018 - 06.2020

Risk Analyst (regional)

JPMorgan &Chase India Pvt Ltd
06.2015 - 05.2018

Risk & Controls Analyst (Information Security Management)

Bank of America
08.2012 - 06.2015

Bachelor’s Degree in Computer Science & Mathematics -

Osmania University
Nutan Bhojja