Jennifer Bakowski, Gsec Email & Phone Number

Leader on the ETS Governance & Controls team responsible for providing audit support to the Enterprise Technology tower. Standardized the Corrective Action Plan program, brought visibility and consistency to the program, including weekly status reporting to key stakeholders, process improvements, collaboration with segments and PMO team. Responsible for reporting weekly and monthly executive reports, CIO, MOR and Quarterly L2 reports. Team also develops custom PowerBI dashboards for risk and compliance partners, monitors team activities through Jira and Kanban task tracking to support risk and control workstreams.

Greater Boston Area

Global Access Compliance- US Division• Developed and documented the process for all privileged access attestations conducted by the US Division.• Developed and implemented the process for determining if there is a need for administrative access privileges on end user PC's. Also act as final approval prior to provisioning this level of access.• Maintain Sharepoint web site for all Global Access Compliance attestations completed by US Division• Support contact for the US Division Business Unit Security Officers on security matters including but not limited to the following• Policy and process changes• Privileged access inquiries• Risk acceptance criteria regarding end user accessProject Work- Global Division• Project tech lead and SME for Identity and Access Management Global solution to include the following activities • Vendor POC - Sailpoint, Aveksa and N8• Assisted in the creation Sailpoint attestation workflows• Currently working on RBAC and Proactive attestation capabilities within Sailpoint• Assist with the VPN replacement project by completing overall risk assessment of the project as well as identifying ownership of DAPs.Audit Coordination• Act as a single point of contact for internal and external auditors for Global Information Risk Management- Shared Services US Division• Responsible for submitting management response for audit findings and following them to closure.Senior Management Support• Provide management with Service Line statics • Provide management with Privileged Access Lifecycle Management statics to help measure the risk posture of the Division

Greater Boston Area

US Division Technology Office Security Team• Review Symantec End Point Protection and Encryption logs.• Ensure all mobile end points were encrypted• Ensure all end points had virus protection turned on and working properly• BCP/DR coordinator• Distributed hard and soft RSA tokens• Developed and documented the process for all privileged access attestations conducted by the US Division.• Developed and implemented the process for determining if there is a need for administrative access privileges on end user PC's. Also act as final approval prior to provisioning this level of access.• Maintain Sharepoint web site for all US Compliance attestations completed by US Division• Support contact for the US Division Business Unit Security Officers on security matters including but not limited to the following• Policy and process changes• Privileged access inquiries• Risk acceptance criteria regarding end user access

Greater Boston Area

Administrative Access Reviews• Quarterly Reconciliation of the Local Administrators groups on NT and W2K Servers. Review any new additions, and ensure that all members of these groups possess current business needs to require this level of access and that all required manager approvals have been obtained.• Responsible for quality control checks for internal and external access requests. SEI and Investport- 120 requests verified monthly• Completes bi weekly employee transfer review. Review id’s to determine if access is still required to the FACTS system• 4500 employees, over 100,000 ids and role level access verified semi-annually• Monitor password violations within the ACF2 mainframe• Monitor firewall rule baseRemote Access Monitoring (RSA/VPN)• Daily review of RSA logs to observe any logging trends, including potential brute force log-in attempts.• Follow up with account owners if any suspicious activity is noted on their accounts.• Report any findings in the Daily ITS Dashboard• Report monthly statistics to the IT Security Subweb and security reports • Distributor of all RSA secure ids. Shipping is done via the UPS on-line systemAnti-Virus Compliance• Daily checks of the SAVCE architecture – checking for up to date virus definitions, any potential infections, or anything out of the ordinary. This information is reported in the ITS Daily Dashboard• Reconciliation of all Windows Desktops and Servers to all machines listed in the Symantec Anti-Virus Console to ensure all machines have SAV software running• Research of any unusual activity identified in the above listed checks• Ad-hoc scanning of desktops when Virus related help desk tickets are assigned.• Document any Virus Related activity to occur.• Monitor for any new virus threats and ensure IBT has proper blocking in place to prevent infection.