Shashank Mathur Email & Phone Number

Gurugram, Hr, In

Gurugram, Haryana, India

India

• Working in an independent risk oversight team, responsible for designing, developing and implementing an independent, effective, data driven and externally aware function to ensure safety and soundness for the organization.• Successfully delivered independent review of data protection controls, including but not limited to cryptography, Web Application Firewalls (WAF), network firewalls and external data transfer channels.• Responsible for researching significant cyber incidents across the industry, understanding the underlying modus operandi of the incidents, and analyzing impact to American Express. • Created and successfully demonstrated a proof-of-concept Log4J attack simulation, enhancing the team’s understanding on the ease of attack and the potential impact.• Ensuring compliance with Enterprise Risk Management, Operational Risk Management, Risk Oversight, Third Party Security and Information Security policies and standards.• Participating in successful regulatory examinations.• Planning of a review on Enterprise Architecture design, implementation, and effectiveness across the enterprise. • Successfully delivered Risk Appetite Framework and Control and Compliance program refresh for Information Security and Information Technology risk pillars.• Delivering KRI / KPI / metric reporting for critical Information Security domains like Cyber Intelligence, Data Protection, Identity and Access Management and Third-party risk.• Communicating and presenting assessment identified gaps and risk metrics to senior leadership of the organization on a regular basis. • Member of the CTRRO VRO CEG Leadership Pillar and worked on E-GRC New Way of Working.

Noida Area, India

• Developed short-term goals and long-term strategic plans to improve risk control and mitigation for network vulnerabilities.• Performed and reviewed technical security assessments of firewalls with help of FireMon to identify points of vulnerability and non-compliance with established information security standards and recommend mitigation strategies.• Responsible for, the network security infrastructure governance handling worldwide financial transactions and payment processing.• Responsible for datacentre migration facilitation and security exceptions during migration to ensure no loss of connectivity or business while maintaining the security standards of the organization.• Responsible for providing advice and counsel to line of business management on security policies and practices.• Maintaining, updating and governing Firewall Change Approval Escalation Standard from a risk standpoint.• Promoted enterprise-level risk management practices and helped instil strong culture focused on protective policies and procedures.

Pune

• Managing network devices in FIS's datacentre at different locations of USA, EMEA and APAC regions.• Performing F5 LTM load balancer VIP creation and SSL certificate installation changes.• Juniper and Cisco firewall changes related to configuration of access policies.• Troubleshooting routing, switching and various other network issues caused by managed devices (Cisco routers, switches and Firewalls, Juniper Firewalls, F5 LTM Loadbalancer, Citrix Netscaler Loadbalancers).• IP assignment management using Infoblox.• Creating technical documents on troubleshooting of various complex issues which other team members can refer to resolve the faults quickly and efficiently.

Mumbai, Maharashtra, India

• Planning & Designing of FI network from inputs obtained by Application development users & bench-marking results. Key design aspects are data flow in the network, maximum number of calls be handled and information security etc.• Hardening of the network devices as per either TCS Hardening Policy or the Bank's Hardening Policy.• Setting up disaster recovery setup.• Audit compliance at client location for system installed.• Preparing plans for various change activities and their impacts on business.• Documenting and regular updating on every change in the client setup.• Gathering requirements and implementing open points for various security audits as PCI-DSS.

Mumbai, Maharashtra, India

• Understanding the principles and objective of the organization to build various internet media solutions.• Studying and getting information on the target audience of the website and blog.• Analysing the type and complexity of the website to be created.• Designing the website according to the analysis.• Coding the website as well as designing the blog.• Responsible for uploading the website and updating in case of changes on the hosting server.• Planning and implementing changes according to regular hotspot survey of the website.• Preparing technical design documents / artifacts documents for the project.