Rana Mashud

Building Identity and Access Governance (IAG) solution for the organization based on Risk, Sustainability and Value.

Interview business stakeholders in order to define and document application Access Control Matrices and related documents to on-boarding into banks SailPoint Identity IQ platform. Helping organization to have solid governance process for unstructured data using SailPoint Security IQ platform. Providing oversight and advisory services over access such as re-certification, privileged access, toxic combinations (i.e. Separation of Duties) etc. for applications and platforms Establish strong working relationship with the various business partners among Canadian Banking, International Banking, Global Banking & Markets, Global Wealth & Insurance and internal IT&S teams to ensures access certification and access termination changes provides value and consistency added to the user and customer experience by on-boarding applications to the bank’s access governance platforms.

Implemented medium and high complexity application change requests on various platforms such as Windows, UNIX, Linux and AS400; ensuring that only authorized changes are accepted, executed and that all audit controls were met. Provided second level technical support to meet departmental service targets for all GWT Release Code Management issues and their components. Tasks included installing, configuring, testing, troubleshooting, and identifying the need for new policies and/or procedures to prevent, eliminate or minimize a re-occurrence of any problems. Implemented DevOps tools like Continuous Delivery System (CDS) and Continuous Integration and Delivery (CIAD) projects to make sure security controls are in place from Release Code Management (RCM) side.

Helped to identify banks high risk application and on-boarded into banks Logical Access Management process. Defined application roles and polices; identified all privileged IDs after carefully crafting application matrix and on boarded into SailPoint Identity IQ platform while working with the stakeholders in all the steps. Worked closely with application custodian for any changes in roles ownership and any other composition of application roles. Guided all employee managers, IT role and application owners to complete their Manger, IT Role Membership and Role Composition Certifications. Regularly analyzed application uncorrelated, Special Powerful & Privileged (SPP) and external accounts and worked with application custodian and SME to correlated to correct Identity or SPP buckets to mitigate risk of uncertified user access.

Provisioned user account in UNIX NIS domain and DMZ servers in PROD, UAT, DEV, IST, NFT following banks standard approval process and performed cleanup to comply with security and audit. Specialized in user level access for Windows and UNIX based trading applications such as MUREX, GMIS, FUND MANAGER, K2, ALGO, GTS/GBOS, FI/GPF Anvil, ION, Scotia FX, Wall Street and Money Market. Handled mission critical system and application access issue which required very quick resolution and often, resolution determination required interaction with IPM, BA, DBA and Developers to avoid disruption of traders access.