Detail-oriented risk manager improving safety performance and culture to promote sustainable value within the field. Demonstrates excellent time management techniques and organizational skills to meet business targets. Interacts effectively, utilizing good communication skills, cooperating purposefully and providing guidance to mitigate risks.
Overview
12
12
years of professional experience
1
1
Certification
Work History
Lead Risk Analyst (Information Security Governance, Risk & Compliance)
Bank of America
Hyderabad
06.2020 - Current
Implementing an overall risk management process for the organization, which includes an analysis of the financial impact on the company when risks occur
Identify control weakness in the system and use analytical skills to determine potential risks and impact which might bring business down and reputation
Coordinated with stakeholders to ensure alignment with business objectives.
Created detailed plans for implementing new systems or procedures.
Attending walk-through calls with process owners and business owners about process change for applications.
Developed strategies to ensure successful implementation of changes.
Raise any non-compliance and follow up on the corrective actions until closure.
Conducted gap analyses to identify areas of improvement in change processes.
Monitored progress of change initiatives and reported results to management team.
Contribute all relevant management information (KPIs/KRIs) to the various scope reports/dashboards
Ensure appropriate escalation to management and/or Permanent Control (or Compliance, as appropriate), as soon as an issue is identified.
The enforcement of Permanent Controls, providing ongoing risk controls self-assessment status of the control environment.
Managed relationships between internal teams and external vendors and partners involved in the change process.
Performing a risk assessment: Analyzing current risks and identifying potential risks that are affecting the company.
Establishing the level of risk, the company is willing to take
Conducting policy and compliance audits, which will include liaising with internal and external auditors. Building risk awareness amongst staff by providing support and training within the company.
Communicating with the internal teams regarding risk management steps and procedures.
Making sure all the major risks are identified and followed up with the respective application and technical teams
Ensure coordination with the stakeholders and all the third-party vendors whenever needed.
Maintaining the agreed SLA with the client to avoid deviation
Implemented procedures for monitoring and controlling operational risks.
Reviewed internal processes for identifying, measuring, monitoring and reporting risks.
Evaluated existing policies and procedures related to compliance with industry regulations.
Prepared reports highlighting key findings from risk assessment activities.
Constructed periodic surveys and inspections to comply with regulatory committees.
Resolved conflicts among stakeholders concerning proposed changes or implementations.
Application Support Lead for E-Commerce Platform
JD Sports fashion PLC India LLP
Hyderabad
09.2018 - 06.2020
Training team members on On-going alerts on New Relic/ Pingdom and issue trends using measurement tools (Grafana)
Ensuring Metrics & SLA’s are always met as per the firm’s Policy & agreement
Conducting regular workshops for Testing/ Dev’s team for creating awareness on Risk involved using Open Source Software’s and Repositories
Work allocation to the teams on a shift basis.
Make sure firm meets GDPR policy while handling customer information
Performing Review and Assessment through enterprise level to make sure all the functions are adhering to GDPR policy
Anchoring Major incident response team to facilitate swift and effective resolution of high severity incidents by creating an effective and efficient team through continuous communication, timely feedback, and appropriate supervisory practices
Work with team member to identify areas if focus, where training may improve team performance and improve incidents resolution
Responsible to conduct analysis of daily/monthly metrics to track performance of individual team members over time to evaluate performance, learning, and capability.
Engagement with business units and project teams to complete User Access Reviews and validations
Support RCA and Action planning on Observations / Recommendations
Make sure to review the incidents and provide the RCA to the LOB heads.
Attending daily client calls, setting up correct timeline for issues with the clients and resolving them
Experience with creating processes, procedures, and documentation relating to incident management.
Create and maintain documentation for production support activities and ticket triage knowledge base across the applications.
Responsible for monthly trainings for team in India and the UK.
Redrafting 'Standard operating procedures' (SOP) / process manual in accordance with Document control.
Risk Analyst (regional)
JPMorgan &Chase India Pvt Ltd
Hyderabad
06.2015 - 05.2018
Responsible for directing workload and operational standards for other satellites through partnership with regional executives, maintains BAU and drives strategy for request processing and risk management.
Onboarding/Offboarding Finance Applications within the given timelines.
Initiating regular KPI calls within the team to make sure all the SOPs are compliant with the Firm's policies.
Updating monthly Revocation Repository Reports to clear the Deceased IDs from Banking applications across all the sites.
Engagement with business units and project teams to complete User Access Reviews and validations( Access Certifications)
Initiating support of regulatory, audit, and IAM directives to ensure all approvals are being reviewed and in place for SOPs.
Participate in IT audits by providing information and documentation in a timely manner, where required.
Support RCA and Action planning on Observations/Recommendations.
Performs user ID administration access provisioning/de-provisioning (additions, modifications, deletions) for in-house applications based on information contained on access.
Revocation Repository Certifications and reporting.
Identifying and evaluating potential threats and vulnerabilities in Access Provisioning.
Access provisioning for all banking users on 250 banking applications with RBAC profiles.
Monitoring revocation repository certifications across the LOB and communicating the outcome with LOB and Business heads on a monthly basis.
Handling calls with SOD teams for regular SOP reviews and Access Certifications.
Handling Access Certifications/Revocation Repository Calls with business teams for regular breaches and assisting the team with possible solutions within the SLA.
Education
Bachelor’s Degree in Computer Science & Mathematics -
Osmania University
Hyderabad
01.2012
Skills
Microsoft Excel
Risk Assessment
PAM (Privilege Access Management)
Internal Controls
Pega PRPC
Jira
Atlassian
Service Now
New Relic
Pingdom
Splunk
HPSM
Cyber Ark
SailPoint
Grafana
Confluence
Accomplishments
Implemented Vendor risk /Third-party vulnerabilities Detection Strategy for ERTS tower in Bank which prevents Data Leakage.
Created and implemented a process for Phishing emails issue which helps the firm to protect or avoids stealing firm’s sensitive data by malware targets.
Recognized with Gold award in December 2014 for eliminating the risk factor from Banking Centre Associates by revoking My-desk access to more than 5000 Banking Centre associates in US & On boarded ARS Platform to set up the Outlook with Secured Procedure.
Personalassets
Quick learning skills, effective communication and team working skills.
Skilled in teamwork, creative thinking.
Adapt to Job Challenges.
Zeal to learn new things and work innovatively.
Dedicated hard work with smartness.
Certification
CISA
Timeline
Lead Risk Analyst (Information Security Governance, Risk & Compliance)