Prashant Prashant Email & Phone Number

Calgary, Ab, Ca

Calgary, Ab, Ca

My role provides architecture and design expertise to the security work stream in the multi-year multi-million dollar ERP Program in Enbridge Inc.This is a key role to enable business transformation by elaborating security architecture and design components to meet security requirements from an end to end process perspective. Working with Oracle Identity Management Cloud Service, Sailpoint, Okta SSO, QRadar, Carbon Black EDR, Venafi PKI, Palo Alto FWs are key to this role as well as other security related technologies such as Active Directory in a Hybrid Cloud Model. My role also act as a liaison between Systems Integrator resources (Accenture), Oracle and in-house Enbridge technical experts. The ERP Program is critical to achieve centralized enterprise resource planning, synergy targets and strategic goals for the company.

Edmonton, Ab, Ca

As a member of the Cyber Security Advisory Committee at NAIT, I have been involved in part time computer training and education for industry professionals and students who come at NAIT for weekend computer classes in following domains:1) Linux classes from fundamentals to advanced concepts2) Information Security classes on topics like Intrusion detection, Vulnerability Assessment, Digital Forensics and Ethical Hacking3) Help prepare course curriculum for future IT Governance courses like COBIT, ITIL, ISO27001, Health Information Act and IT Security Management4) Prepared the curriculum for Enterprise Security Certificate course certificate for Continuing Education Department of NAIT5) Deliver Windows Fundamentals (7,8,10 versions) courses, PC Servicing Support Courses to students

1) Taught Masters of Information Systems Assurance Management (MISAM) Program for IT Audit II course over winter terms (2017, 2018). Firewall Fundamentals course over winter term 2020 to class of 35 students.2) Regularly speak to students on Information Security career opportunities and how to best position for it.

Edmonton, Alberta, Ca

• Responsible for security architecture and design reviews of IT projects and RFPs• Team lead managing 2 security analysts in dotted line fashion and reporting to Director, Information Security Management at AHS• Senior Cyber Security Advisor role in promoting IT Risk management methodologies within AHS• Responsible for IT Security standards writing and implementation, extensive knowledge of COBIT, ITIL, ISO 27001 and SABSA models of IT Security Architecture• Involved in OAG audits for AHS and external and internal audits by Big 4 Consulting firms like Deloitte, E&Y, KPMG, MNP• Providing IT security support for Health Information Act related guidance to IT functions• Involved in big ticket projects of Privileged Password Management and File Permissions project• Involved in Cloud Computing (Office 365), IoT Security, Big Data Hadoop Analytics projects for AHS as the cutting edge of technology and providing security inputs to those initiatives.

Edmonton, Alberta, Ca

I was responsible for overall analysis of IT Security related issues in the business and industrial IT networks and work closely with various teams to identify, analyze, recommend and mitigate risk in the IT environment of the company.• Reporting to Senior Manager of IT Operations and working closely with Planning & Architecture, Internal Audit, Corporate Security, Industrial IT Control business units• Extensive experience with Threat Risk Assessment in projects, penetration testing, vulnerability assessment and mitigating IT risk exposure areas. Experience in presenting security risks to senior management. Cyber Security experience with design, analysis, risk mitigation in SCADA and Industrial IT systems in power plants in PLCs, HMIs via the NERC CIP standards.• Contributed to Edison Electric Institute Conference in 2012 in policy influencing to US Congress. This led to Cyber Security Bill which was promulgated as an Executive Order(EO) and Presidential Policy Directive(PPD) by President Barack Obama for NERC/FERC regulated Electricity sector in North America. (http://www.whitehouse.gov/the-press-office/2013/02/12/executive-order-improving-critical-infrastructure-cybersecurity)• Member of Electricity Sector Information Sharing & Analysis Center (ES-ISAC) to protect Critical Infrastructure in North America as part of DOD, DHS and NERC initiatives.• Extensive experience and lead from IT for conducting Financial Statement Audits (FSA), External audits, internal CSOX audits for CEO/CFO certification, Bill C-198 & Multilateral Instrument 52-109 (MI 52-109) • Comprehensive IT Security, Compliance & Risk program for the whole company of 1000 employees with power plants in eastern USA, Ontario, Alberta, Chicago, San Diego.• Familiarity with IT security architecture principles, design, awareness, security & compliance policy creation and sign-off enterprise wide.

Edmonton, Ab, Ca

Position Overview:In my role as Security and Compliance Manager, directly reporting to Chief Information Officer(CIO) of Brick I was a member of the senior IT management team in planning, budgeting, implementing and executing on IT functions such as security policies, procedures and compliance programs such as PCI DSS, CSOX, Enterprise Risk Management using COSO.Primary Responsibilities:1. To define & maintain Security Policy and supporting management policies and procedures in compliance with IT best practices and company required regulations (Bill C-198, CSOX, MI 52-109, NI 52-109, PIPEDA, PCI and CEO/CFO Certification process for ICFR (Internal Controls over Financial Reporting) from IT perspective.2. Constituted and oversaw the implementation of a multi-year PCI DSS compliance program for The Brick as a Level 4 merchant with less that 1 million credit card transactions.3. Constituted and managed a 1 year Enterprise Risk Management program (COSO) as a point person of the CIO of Brick to work with different business functions to define, analyse and mitigate supply chain, information risk and reputation risk for Brick.4. Developed key KPIs and KRIs for identifying, reporting and trending on security risks for Brick in its various business functions.5. Comprehensive Business Continuity Planning for The Brick reporting directly to the Executive Team on its planning and execution using the COSO framework

Edmonton, Ab, Ca

I had worked as IT Security Analyst with The Brick Group, the largest volume retailer for furniture and home appliances in Canada. My responsibilities span across all 240 Brick stores:1. Directly reporting to CIO of The Brick Group and working closely with Internal Audit, Consumer Credit and other upper management executives.2. Enterprise Risk Management planning using COSO framework and helping complete CSOX audits.3. Comprehensive IT Security and Compliance program based on PCI DSS4. Overseeing PCI DSS, Bill C-198, Multilateral Instrument 52-109 (MI 52-109) Compliance issues5. Responsible for establishing a comprehensive IT General Controls Framework based on COBIT framework for IT Governance for quarterly CEO/CFO certification for ICFR reporting6. Conducting annual Penetration Testing engagements with Telus Security Solutions (TSS) on IT infrastructure

Edmonton, Alberta, Ca

1. Contributed on Business Continuity and Disaster Recovery project of Alberta Pensions Services including the implementation of Data De-Duplication technology using Data Domain product to create a "warm replication" site and successfully completed in project schedule.2. Data Center design, build, move and consolidation for Alberta Pensions Services from downtown Edmonton to south side and certification on Data Center practices from APC, USA.3 Worked on operational security and vulnerability scanning of Alberta Pensions IT infrastructure and online application such as Member Online and Employer Online System which supports 30,000 employees and members Alberta wide.4. Vulnerability Assessment and Network Penetration Testing tests for ensuring security of applications and network infrastructure using Nessus, Nmap and Open Source tools like BackTrack 4.0.5. Youngest IT professional on the board of Organizing Committee of ICE Conference (http://www.iceconference.com/), flagship IT conference in Edmonton in 2009 and 2010.6. 24/7 support of mission critical pension applications on Solaris 10 platforms and support of middleware application servers such as JBoss, Apache, Tomcat etc. using SOAP and HTTP concepts, SOA & ESB architecture and 3 Tier client server model with back end Oracle support.

I had worked as an over all IT manager/administrator for a small medium sized engineering company. I used to take care of all IT needs such as:1. Supporting a Switchvox/Asterix based 70 user VOIP network.2. Working with vendors and service providers such as Telus, Thinktel for network and voip support.3. Server management, firewall, networks, routers and desktop hardware/software support on Windows and Linux platforms including BSD, Solaris platforms.4. This position involved supporting engineers from all streams of electrical, mechanical, civil, structural, chemical industries with softwares like Microstation, Autodesk Inventor Pro, AutoCAD2008 network installs for construction designs etc.

I had been an IT Manager for Non-Governmental Organization, taking care of all the IT functions of the NGO in Greater Montreal area. I was instrumental in supporting networks, servers, workstations and domain and email services for the NGO and also liasoning with service and application vendors to promote and implement IT projects in the NGO.

Research Scholar, Computer Science

Masters, Information Technology