Prashant Kumar Singh Email and Phone Number

• Support internal and external audits through maintaining and updating the Document Request List and IT Compliance documentation repository including central IT Policies and Procedures.• Assist with the SOX, SOC1, GDPR, and Incident Response program• Assist with SOC reviews, access reviews, and security assessments• Collect, perform data analysis and support IT Security Education and Awareness initiatives.• Work with the infrastructure team to create audit reports in CyberArk.

• Review of the security configuration on SAP S/4HANA environment.• Support the different audit teams on obtaining, organizing, and providing documentation from the various program workstreams.• Testing the new control environment and support with the weekly work plan updates.• Troubleshoot SAP access issues faced by internal users and external clients by analyzing data from STAUTHTRACE and SU53 transaction codes.• Investigated risky user alerts and system security alerts generated by Microsoft Cloud App Security.• Created audit reports for IT Security and Compliance team in CyberArk.• Assisted the Network Security team in monitoring and investigating SIEM alarms.

1. Threat Management: Investigated suspicious and potentially malicious activities on the organizations’ network. Alerts for such potential issues were generated by the SIEM tool. When alerted, would respond to the incident, examine the alert, perform a triage, determine the scope of the threat and then investigate the threat depending on its severity level. Created actionable items for other teams after the investigations on its end is complete. Investigations of suspicious emails reported by the users of the organizations. 2. Vulnerability Management: Performed Vulnerability scans to discover and analyze vulnerabilities and characterize risks to networks, operating systems, applications, databases, and other information system components. Performed compliance scanning to analyze configurations and facilitate the implementation of configurations and hardening settings for networks, operating systems, applications, databases, and other information system components. Engaged with appropriate teams to resolve the vulnerabilities according to the agreed SLAs. Recommended appropriate remedial actions to mitigate risks where vulnerabilities cannot be patched immediately.3. Security Controls Compliance and Reporting: Ensured that the various teams of the organization comply with security controls set by the IT Security team. Reporting KRIs and security control compliance status to higher management.4. Documentation: Created documentation for all the security incidents identified by the SIEM tool.

Worked on a project to create a low-cost data storage option for hospitals in the USA which is compliant with HIPAA compliance rules by implementing HIPAA compliance rules on OpenStack Swift to make sure a patient's protected health information is kept safe by using OpenStack Keystone, Swift Storlets and Dockers.

Created a SIEM-like log analytics tool using Elasticsearch which created reports in visual form. The tool parsed logs in any format from any service of Amazon Web Services creates reports with appropriate visualization and send out an email warning to the concerned person if the logs depicted an issue with the system.