Doug Johnson Email & Phone Number

Lexington, Ky, Us

Pittsburgh, Pa, Us

In support of a major International bank I manage the compliance of privileged user accounts. Working with business leaders, application teams and CyberArk experts I ensure IDs across the business remain compliant. This work involves understanding the business metrics and working with people at many levels.

Boston, Ma, Us

As a Senior Security Specialist, I am well-versed in spearheading project leadership, overseeing task execution and adherence to established standards. My responsibilities included the design of Excel scripts for user review processing, vital for internal audit submissions. I automated the review process, streamlining user data input and script execution. Furthermore, I authored documentation encompassing Excel Add-In installation, spreadsheet navigation, script execution, and full-time employee file processing. My commitment to accuracy was evident in the examination of user files, spanning full-time, contractor, hourly, and terminated employees, resulting in the identification and correction of numerous misclassifications.Key Contributions during this tenure include:• Developed Excel scripts for increased functionality and speed.• Developed User Access Review program for quarterly application and active directory user reviews using Excel scripts.• Remedied internal audit failure through rapid completion of access reviews for four critical applications within two weeks.• Minimized human error and streamlined previously time-consuming process into one hour by developing scripts to address business requirements, including validation of current full-time employees and automated removal of terminated employees.

Greensboro, Nc, Us

As Identity & Access Management Specialist, I took the lead in mapping IAM tasks and ensuring their seamless alignment with organizational policies and processes. I spearheaded the development of a quarterly guide for privileged user review and user recertification, streamlining our compliance efforts. My efforts also optimized processes and resource allocation, empowering our analysts to efficiently manage technical recertifications. I drove forward an IAM transformation project, fostering productive collaboration between stakeholders involved in Single Sign-On (SSO) and SailPoint. I coordinated effective cooperation between SOC auditors, internal auditors, and the IAM team, ensuring swift responses to auditor requests and maintaining compliance with established standards.Key Contributions during this tenure include:• Addressed IAM risks, leading to closure of multiple issues.• Concluded SOC audit in collaboration with IAM team and auditors.• Remediated and closed 10% of risks in RSA Archer tool for new VP.• Drove process improvement by creating Excel application for data processing automation; saving two weeks of work per quarter and eliminating human errors.

Florham Park, New Jersey, Us

As an Information Security Engineer III, I took charge of the risk management process, which involved overseeing the assessment and approval of risks and exceptions within the RSAM GRC tool in collaboration with senior management and stakeholders. I coordinated the review and enhancement of 15 Standard Operating Procedures (SOPs), ensuring their alignment with Conduent policies during the transition from Xerox. I led the effort to identify control gaps and establish new procedures for endpoint systems in alignment with NIST 800-53 controls. I spearheaded the development of Identity and Access Management (IAM) compliance protocols and crafted training materials to strengthen our security infrastructure.Key Contributions during this tenure include:• Enhanced productivity and performance of new IAM team members by providing effective training and guidance.• Remediated and closed more than 30 risks, decreased risk profile by generating reports for CRO and engaging with stakeholders.• Administered Identity Management for 12,000 users and eliminated over 6,000 obsolete identities; fortifying corporate security and streamlining future reviews.

Norwalk, Connecticut, Us

As Information Security Manager, I had the privilege of overseeing security operations across 30 Xerox Business Units, where I spearheaded a variety of audits including PCI, SOC2, Internal Security Assessments, Customer Assessments, and Questionnaires. I conducted auditor site visits, orchestrated SME interviews, and participated in compliance discussions to ensure the timely fulfillment of data requests, resulting in consistently high customer satisfaction rates. I confirmed business unit compliance with NIST 800-53 standards and drove collaborative remediation efforts in close coordination with IT teams. I defined essential parameters related to antivirus (AV), patch management, and inventory data, using this data to generate insightful metrics reports for senior management.Key Contributions during this tenure include:• Enhanced business-wide endpoint compliance reporting; enabling oversight for CISO and effective control implementation.• Secured IS027001 certification for five Xerox data centers through teamwork and facilitation of cross-functional collaboration, while driving certification process forward.• Strengthened security posture by managing compliance for vulnerability scans and identity management across 20 domains.• Recognized company-wide and received monetary reward for automating Privilege Access Reviews using Excel VBA; saving 10 hours monthly.

Armonk, New York, Ny, Us

As an Information Security Advisor, I led a multitude of pivotal IT initiatives, providing invaluable support to the delivery project executive. I oversaw a high-performing Identity and Access Management (IAM) team, ensuring the on-time completion of user reviews and privileged access recertification, thus significantly bolstering compliance efforts and minimizing potential risks.Key Contributions during this tenure include:• Attained weekly time savings of two hours by optimizing PCI data analysis through Excel VBA automation.

Armonk, New York, Ny, Us

As Staff Analyst, I presented IBM's health check process to both internal corporate auditors and external auditors, showcasing our commitment to compliance and transparency. I played a pivotal role in enhancing security standards by identifying key performance indicators (KPIs) for server baseline configurations, ensuring the enforcement of rigorous security measures. My contributions extended to delivering monthly presentations highlighting critical issues to executive management, providing valuable insights for informed decision-making.Key Contributions during this tenure include:• Improved IAM and Patch compliance through creation of educational materials and training for IT teams.• Established guidelines and interface for health check tool; leading to 20% reduction in server non-compliance.• Attained reduction in IBM's quarterly manual data analysis workload by 300 hours through creation of Excel scripts.• Demonstrated abilities as subject matter expert; contributed to development IBM global services health check process.***ADDITIONAL EXPERIENCE***IBM – Tucson, AZ - Security Program Manager | Delivery Compliance Administrator

Armonk, New York, Ny, Us

As the SSO Health Check Process Owner I defined and maintained the process, delivered education, and represented the process to IBM Corporate audit. I Automated reporting for Security Self Assessment Workbook for 100+ accounts, Developed processes around weak security controls (e.g. OSR Access authorization)Received monetary reward for outstanding work on account

Armonk, New York, Ny, Us

Security Focal to Oversee Windows OS security for 5 IBM customers

* Manage Security Process execution for Internal IBM Servers in support of customer * Ensured deviations to process were managed to completion to protect IBM brand * Developed Health check process for department * Server support from soup to nuts* Hardening servers * Change management * Patching * Build servers to customer specifications * hardware support, on call

* Hardening servers * Change management * Patching * Build servers to customer specifications * hardware support, on call

* Plan, implement, and execute backup plan for Children's Hospital in Pittsburgh* Support several departments infrastructure and software, including Emergency room critical applications, and Collections users and critical application.* Public relations for disgruntled users* Key role in rolling out of new computers throughout Children's Hospital of Pittsburgh. This involved building an image and retaining user data* Key role in moving data center and assuring all servers were up and running.

• Built NT4 network and domains.• Built Oracle Financial Forms to overhaul USWA financial department and bring them from mainframe to Windows.• Built information systems to streamline key information for business operations.• Supported USWA executive offices for all computer needs.• Supported USWA end users for all computer needs such as building databases, education and fixing desktops.