Darshanie Sukhram Email & Phone Number

Florida, United States

New York, New York, United States

• Manage and support internal compliance security programs including Advisory projects and assessments for Control Design, SDLC, SWIFT, SOX, etc.
• Support examination of IT security controls, compliance reporting, and issue remediation identified in ITRegulatory Assessments (i.e. SSAE 18, Sarbanes Oxley (SOX), and SWIFT).
• Develop remediation response plans according to risk appetite, communicate requirements to IT asset owners, gather supporting artifacts, and close issues upon review of requested artifacts.
• Serve as liaison between External / Internal audit and internal stakeholders for audit related activities.
• Report metrics for compliance assessments, audit phases, and remediation status to Senior Leadership Teams.
• Develop and maintain standard operating procedures (SOP) and documentation around program management.

New York, New York, United States

• Manage and support internal compliance security programs including Advisory projects and assessments for Control Design, SDLC, SWIFT, SOX, etc.
• Support examination of IT security controls, compliance reporting, and issue remediation identified in ITRegulatory Assessments (i.e. SSAE 18, Sarbanes Oxley (SOX), and SWIFT).
• Develop remediation response plans according to risk appetite, communicate requirements to IT asset owners, gather supporting artifacts, and close issues upon review of requested artifacts.
• Serve as liaison between External / Internal audit and internal stakeholders for audit related activities.
• Design and maintain test plans, status trackers, and templates for internal assessments mapped to regulatory controls, internal IT security policies, and ISO / IEC 27002:2022 guidelines.
• Collaborate with peer teams for Vendor Risk Assessments, SSAE 18 reviews, SOC Investigations, IDAM GRC development, etc.

New York, New York, United States

• Perform control testing (i.e. user access reviews, password authentication, segregation of duties review, etc.) across applications, support tools, domains, database, and on-prem operating system environments.
• Collaborate with external audit teams in analyzing maturity of internal IT SOX self assessment process, and implement changes based on suggested best practices.
• Serve as liaison among external and internal audit teams as well as internal stakeholders.
• Support annual audits and IT SOX self assessments by performing walkthroughs, requesting and reviewing control evidence, communicating issues, and developing remediation response plans.
• Perform reassessments to validate controls were operating effectively after remediation.
• Perform monthly termination testing across Active Directory domains to ensure timely removal of access.

New York, New York, United States

• Design templates for internal compliance security assessments based on SOX regulations, internal IT security policies, and ISO / IEC 27002:2013 guidelines.
• Perform control testing (i.e. user access reviews, password authentication, segregation of duties review, etc.).
• Collaborate with external audit teams in analyzing maturity of internal IT SOX self assessment processes.
• Perform Active Directory reviews.
• Assist with incident response remediation.
• Craft phishing scenarios and launch simulated campaigns to educate users on IT best practices.

New York, New York, United States

• Contractor for HBO as Compliance Consultant.
• Design templates for internal compliance security assessments based on SOX regulations, internal IT security policies, and ISO / IEC 27002:2013 guidelines.
• Perform control testing (i.e. user access reviews, password authentication, segregation of duties review, etc.).
• Collaborate with external audit teams in analyzing maturity of internal IT SOX self assessment processes.
• Perform Active Directory reviews.
• Assist with incident response remediation.

New York, New York, United States

• Perform control testing (i.e. user access reviews, password authentication, etc.).
• Review Active Directory accounts to ensure compliance with internal policy requirements.
• Craft phishing scenarios and launch simulated campaigns to educate users on IT best practices.

Online

Online

Master Of Science (M.S.), Cybersecurity

Bachelor Of Business Administration (B.B.A.), Computer Information Systems, New Media Arts

Activities and Societies: Phi Eta Sigma National Honor Society, The National Society of Leadership and Success