Michael Zagorsky Email & Phone Number

Tucson, Az, Us

Round Rock, Texas, Us

Spearheaded global IAM optimization across matrixed security, legal, insider threat, audit, and GRC efforts to ensure the delivery of complete and accurate identity lifecycle options encompassing 191 IAM controls, while aligning identity, authentication, and authorization with SOX, PCI, NIST 800 series, ISO, and other region-specific requirements for both corporate and federal government spaces. Lead compliance around IAM modernization spanning privileged session management, CyberArk secrets management, SailPoint Identity Now, continuous adaptive trust, and modern SSO technologies while reducing risk to the company.• Aligned polices, controls, and security posture with enterprise IAM roadmap and business objectives.• Coached and mentored junior staff on IAM compliance, documentation, process improvement/automation, testing, and quality; managed team’s efforts on Sarbanes-Oxley (SOX) control self-testing.• Created enterprise-wide role risk scoring methodology to drive visibility of user risk, reducing the number of access reviews required and enabling continuous adaptive trust implementation.• Reduced non-compliant service accounts from 250 to zero.• Created real-time leadership dashboards with innovative service account dashboard including dynamic risk scoring for 15K accounts.• Championed development of automated scanning of local accounts to ensure compliance for 150K+ accounts.• Owned IAM security standards, collaborating with business unit security leadership on new security practices.• Spearheaded root cause investigations, impact analyses, and communication with auditors.• Analyzed deviations from IAM standards, performing risk assessments and making risk acceptance recommendations to senior leadership.

Melbourne, Florida, Us

Identity Management: Served as the subject matter expert on implementation of Oracle Identity Governance (OIG) enterprise access management system. Documented system functional requirements, collaborated with implementation vender on approving technical requirements, developed and led user acceptance testing, planned go-live, and provided project updates to the CISO and IT senior leadership. • Developed 3-year CISO strategic growth plan for identity and access management.• Identified over $250K in cost savings by identifying no-cost product functionality for automated password synchronization.• Reduced the number of service catalog entries by over 40%.• Performed an analytical review of access request tickets to identify cost savings opportunities.• Implemented automated notification of preventative segregation of duties violations.• Automated termination of user’s privileged accounts and requests for US citizenship-controlled data. • Developed contingency plans for issues during go-live.Security Design & Implementation: Developed security requirements and design for roll out of enterprise applications spanning ERP, supply chain, manufacturing, and engineering for new locations. Liaised with application owners and business functional leadership to document system security standards, identify the new users to the environment, and provision their access. Implemented processes to manage these new locations in our common access management service delivery function and coordinated the access handoff from legacy operational security functions. Operational Security & Compliance: Analyzed and responded to identity management and access inquiries from audit team. Performed root cause analysis of security control issues and developed remediation plans. • Developed automated security monitoring tools to identify control breakdowns which resulted in zero audit issues being identified for these environments since implementation.

Melbourne, Florida, Us

IT Controls and Governance: Evaluated operational issues, scoped IT systems for Sarbanes-Oxley (SOX) testing and performed risk assessments of enterprise applications. Reported on IT issues for management and worked to define action plans to address findings. Identified tools and methods to reduce the manual efforts need to ensure compliance with policies. Satellite Teleport Security: Conducted international information security and operations reviews across five countries spanning APAC & EMEA focusing on customer facing satellite network infrastructure and consulting with in-country based support staff to identify unique risks and recommend security practices for satellite teleport facilities and remote customer deployed network equipment.SOX Compliance: Validated the completeness and accuracy of financial data conversion in support of acquisitions and reviewed implementations of new IT systems.Access Control Administration: Privileged and Service account management, monitoring, authentication controls.Perimeter Security: Firewall rule management; Network device and Wireless infrastructure configuration.Data Analytics: Reviewed transactional data and made recommendations regarding supply chain, expense reporting, purchasing, and procurement cards. Identified duplicate/unapproved payments, resulting in recovery of funds via complex SQL reports. Performed FCPA compliance procedures.

Milwaukee, Wi, Us

Analyzed internal and customer-facing SailPoint instances, developing process maps, recommending optimizations for development efforts, and interfacing with global staff and outsourced IT services in an Agile environment. • Implemented SailPoint Identity IQ Enterprise Reporting in Microsoft PowerBI. • Performed investigations and root cause analysis of SOX control issues to develop remediation plans. • Analyzed data in the identity lifecycle process to identify errors and assess potential impact. • Administered recertification campaigns for user access in Identity IQ.

Birmingham, Al, Us

Audit Management: Led audit engagements of up to three auditors, including performing risk assessment, identifying controls, developing test plans, reviewing workpapers, writing audit reports, tracking issues, and meeting with clients.Infrastructure: Network and Wireless Security, Vulnerability Scanning, Backup and Disaster Recovery, Active Directory, Unix, Windows patching, and Anti-Virus.Applications: PeopleSoft, Kronos, Oracle EBS, CCH Teammate, Tenable Networks Nessus Scanner, Microsoft SMS, IBM ClearQuest and TSRM.Business Process Analysis: Performed detailed assessment of system interfaces including security and validating reconciliation controls.Governance: IT Steering committee charter audit, policy and procedure structure, and change management processes.

Gb

IT Audit: Completed 9 Sarbanes-Oxley 404 assessments and SAS70 Audits, focusing on IT-related business processes and control activities. Performed Internal Audit assessments spanning purchasing, receiving, patch management, payroll, disaster recovery, business continuity, and segregation of duties. ERP: Evaluated PeopleSoft controls, security, and segregation of duties.Database and Operating System Security: Oracle and SQL Databases, Unix, Windows AD

Ms, Decision And Information Sciences

Bs, Entrepreneurial Management