Jahangir Khan Email & Phone Number

Remediation of High Priority Cyber Security Vulnerability and RiskPrivileged Access Request Lifecycle and Management of 3rd Party SuppliersPrivileged Access User Audit Process EngineeringIDAM JML Lifecycle Process Re-engineering System Admin access review and risk remediation

• Working on the following Projects where Business analysis lifecycle tasks were required from discovery through to implementing operational capability.
• Identity and Access Management and Joiner, Mover, Leaver Process
• XDR (Extended detection and response) and EDR (Endpoint Detection and Response)
• Cloud Native Application Protection
• SAP Security
• SAP into Sentinel Integration

• Data Centre discovery of applications.
• Network Segmentation of critical applications.
• Determination of the applications landscape for CMDB formation.

• Nessus/ Tenable Vulnerability scanning of infrastructure and process management.
• Risk reporting of Information security assessments.
• Forcepoint Data Loss Prevention Global Security Administrator for Data/ Super Admin for DLP Web.
• Monitoring and management of web-based transactions, user identification, alerting, reporting and troubleshooting.
• Mimecast email administration based on threat analysis.
• Enforcing cyber protection policies for internet, client machines, networks directory, category filters for URLs protocol filters for managing cloud apps.

• Appointed Deloittes Cyber Acceleration Programme to create a new Centralised Penetration Testing process and reporting for the 13 countries of Deloitte North & South Europe.
• Mapping of Deloittes Information Security, Deloitte Business Services, Deloitte Quality Assurance Policies and standards to roles and responsibilities for the 3 lines of defence model.
• To develop a brand-new Service catalogue for Deloittes internal Information Security organisation and Partner Teams for First Line of Defence (1LoD).
• Develop a new Information Security Risk Assurance process for Deloitte UK and revise existing processes.
• AWS requirements gathering and approval.
• Identification of PAM accounts in the CyberArk solution.

Bracknell, England, United Kingdom

• Business analysis delivery for the Client Virtualisation and AD Data Validation Project streams.
• Key outputs being the data analysis and data validation for integrity of employee data via Active directory.
• Producing the implementation approach for Citrix Client Virtualisation platform migration of applications.
• Application rationalisation.
• ServiceNow Incident management.

London, England, United Kingdom

• Identity and Access ManagementTasked on the IAM Programme for Colt implementing
• Application Onboarding to a new IAM tool
• Access recertification process development and artefacts with the dependency of defining the Joiner/Mover/Leaver process.
• Test Case preparation for testing of IAM tool.
• Governance –Operating Model and supporting processes.Designed the ArcSight SIEM Process:
• Real-Time Monitoring: Observe activity at the exact moment it occurs within the network environment.

London, England, United Kingdom

• Assigned to perform Business Analysis on the HSBC Digital Cyber Defence Programme for service resilience against cybersecurity attacks. The programme followed the NIST Cybersecurity Framework to deliver risk mitigation.
• Technical and Disaster recovery procedure and plans for business continuity.
• Prepared the DLP uses cases to enable successful vendor selection and implementation of data loss prevention for the bank.
• Supported IT Project Managers and their business stakeholders to develop a successful Target Operating Model to protect the Cyber landscape and mitigate risk of malicious attacks.
• Investigated, classification and analysis information risk associated with IT systems.
• Worked closely with architects and a variety of end users to ensure technical and operational compatibility for agreed solutions.

London, England, United Kingdom

• I was assigned on a global IT Security ‘Infrastructure Hardening Programme’ required to meet the objective prescribed by the IT Security ‘Playbook’ of strengthening and securing the end to end IT landscape for SONY.
• Business Analysis of the Implementation of a Vulnerability and Patch Management solution to enable efficient scanning and continuous monitoring of Internet-exposed systems and protect all IT assets. This continuous.
• The working practice was in accordance with a ‘Quality Management Framework’ which ensures that Task force aligned projects required to meet the global programme remain compliant by producing the mandated artefacts.
• Providing subject matter expertise and insight to enable the successful delivery of these project streams.
• My main achievement was having revised the existing functional and non-functional requirements which enabled the programme to revisit the solution architecture, enhance it and approve for implementation.
• Provided processes and subject matter expertise to shape the Business Analysis function for IT Projects and implementing processes based on experience and industry best practice.

London, England, United Kingdom

• Tasked on multiple project streams adopting a ‘risk-based approach’ on a global 'Identity Access Management' programme in IT Security implementing a 2 Factor Authentication/multifactor authentication product for.
• Designed the Target Operating Model.
• Working closely with HR to define and map the JML (Joiner Mover Leaver Process).
• Agreeing SLAs to ensure the physical and logical access solution was working and supported as intended.
• System Integration activity involved supporting the project to understand the integration of the incoming solution with multi regional entitlement and provisioning systems as well as the system migration of RSA.
• Service Support Model was an integral part of the delivery with validation of business processes and ensuring the technicalservice support model is agreed and documented with Global Production Support and Engineering.

London Area, United Kingdom

• Business Analyst on the (Secret Information Protection Programme) SIP Programme in the IT&S Digital Security function at BP. Leading the project deliverables and working closely with the Programme Information Security.
• Stakeholder identification.
• Requirements gathering including functional and non-functional.
• Vendor Selection.
• RFP presentation.
• Terms of Reference.

London, England, United Kingdom

• Working as the Technical Business Analyst on the Protecting Customer Card Data Programme to help infrastructure projects achieve PCI DSS Regulatory compliance (Payment Card Industry - Data Security Standard)..
• Data migration of historic sensitive data to a new solution in a secure data centre environment including the use of removable USB devices encrypted via endpoint security.
• Application of compensating controls
• Business Analysis process flow such as-Gathering Business requirements and Business process change design and providing analysis to stakeholders.
• Working with the business to understand and document detailed functional requirements.
• Interaction with cross-functional teams and other programmes of work within Direct Line Group to ensure dependencies are identified, understood and met.

London Area, United Kingdom

• Responsible as the IT Business Analyst tasked to enable the delivery of an SAP ERP transformation programme.
• Documented business (user) requirements and met Project Management Office deliverables.
• Understood customer business processes and priorities by documenting the processes and how IT services support these customer processes.
• Data Network connectivity upgrade analysis for connectivity between South East Asia and the USA Ensure the accurate analysis of the number of virtual connections is carried out for remote users Presented IT proposal to.
• Mapped system process improvements and changes.
• Develop and communicate IT strategy for supported business processes

Slough, England, United Kingdom

• Working in Project Management Office in Prince2 environment to support the operation to successful ‘mission critical’ project realisation.
• Eliciting requirements using interviews, document analysis, requirements workshops, surveys, site visits, business process descriptions, use cases, scenarios, business analysis, task and workflow analysis for numerous.
• Managed Telco on-site builds and system integration for data connectivity and for internal and external projects with vendors for Corporate, Data centres and Manufacturing sites for Europe, Middle East, Africa and Asia.
• Provisioning projects of diverse voice circuits with a DDI range of 100 continuous numbers to provide all phones and other telecom functions a direct dial interface for Cisco VOIP phone systems, with focus on resiliency.
• Implemented a data network 23 site multinational EMEA site MPLS roll out in line with global network engineering strategy.SAP BW Systems Analyst – RIM Financial Planning and Reporting
• Supported the EMEA Corporate Finance team for SAP BW.

Feltham, England, United Kingdom

• Supported the organization by effectively providing e Business solutions and systems support to customers.
• Analysed customers’ current business processes and presented a logical solution which would improve systems automation.
• Implemented Electronic Data Communication (EDI) to investigate shipment volumes received.
• Managed the implementation process of technology targets to increase the number of business process integrations and ensure successful project achievement.
• Provided 1st line support, which incorporated problem resolution support and escalation issues to maintain a high customer satisfaction.
• Prioritised and organised workload to ensure that all customers’ needs are met in an efficient and timely manner.

Feltham, England, United Kingdom

- SAP Analyst in Sales and Distribution and Materials Management processing.- SAP Consultant in SD and MM for SME companies.

Postgraduate Diploma, Management Studies

Bsc. Economics, First