Worked with leading insurance firm - RSA Insurance- Leading access reconciliation process of clients internal and third party employees- Established regulatory requirement ofSarbanes-Oxley Act (SOX), ensuring compliance was met- Collaborated with internal and externalstakeholders as well as auditors to confirmcompliance with SOX Act- Investigated and documented all violations of compliance regulations to determine necessary improvements- Tracking every joiner, mover and leaver andgetting this documented for audit purposes- Identified gaps in existing compliance processes and recommended updates- Provisioning and de-provisioning user access privileges in well over 40 applications- Running reports on Sailpoint for identity and governance- Produced monthly reports using advanced Excel spreadsheet functions- Updating different stakeholders on progress of compliance reporting- Proven ability to learn quickly and adapt to new situations- Managed time efficiently in order to complete all tasks within deadlines.

Worked in Public Domain with UK Government Borough Council- Leading end to end SIEM delivery service for a government client- Conducted security audits to identify vulnerabilities in any systems- Educated and trained users on SIEM use cases and emerging threats to ensure L1/L2 analysts were meeting SLA guidelines- Enhanced security detection using the MITRE ATT&CK and Cyber Kill Chain frameworks- Investigated and resolved incidents ofunauthorized access to sensitive information using IBM Qradar SIEM - Analysed network traffic and system logs todetect malicious activities- Implementing new log sources from variousdifferent devices i.e Linux, Windows, firewall,Windows servers, EDR (Crowdstrike), Azure, IPS/IDS and undertaking improvements on existing broken log sources- Implementing, refining, and integrating new use cases and alerts to improve detection andreduce false positives- Performed risk analyses to identify appropriate security countermeasures.- Authored security incident reports, highlighting breaches, vulnerabilities, and remedial measures.- Administered and monitored firewalls, intrusion detection systems, and anti-virus software to detect risks- Acting as security point of contact from atechnical and business standpoint for anyconcerns i.e. SLA breaches by L1/L2 and creating weekly, monthly reports to present to client- Worked independently and collaborated withother security professionals, as well ascommunicated effectively with stakeholders across the organisation

• Joined a complex digital transformation project at a critical phase of delivery• Scheduled and facilitated meetings between project stakeholders to discuss deliverables, schedules and conflicts as well as change requests• Maintained open communication by presenting regular updates on project status to leaders• Monitored project progress, identified risks and took corrective action as needed i.e RAID report ensuring risks were monitored• Reported regularly to managers on project progress and technical problems.• Tracked project and team member performance closely to quickly intervene in mistakes or delays.• Analysed project performance data to identify areas of improvement.• Demonstrated excellent communication and interpersonal skills in a challenging environment

• Working in a shared domain; Managed Security Service provider (MSSP)• Started as L1 Analyst, responsible for owning initial offences that have triggered on the SIEM software to working as L2 Analyst which came with further responsibility• Authored security incident reports, highlighting breaches, vulnerabilities and having a critical eye for detail• Investigated and resolved incidents of unauthorized access to sensitive information.• Analysed network traffic and system logs to detect malicious activities and submitting the incidents within the SLA• Utilised Qradar SIEM to compare, correlate & analyse real time security alerts• Performed and undertook full incident closure in a timely manner, ensuring all is communicated with the client• Worked under pressure in a SOC, investigating priority incidents which have a tighter SLA• Aiding L1 Analysts with their initial investigations