Tiffany V. Murphy, Isa Email and Phone Number

Responsible for interpreting and understanding the interrelationships of the Identity and Access Management (IAM) Standard, the Third-Party Security Management (TPS) Standard, and the Service Providers Security Requirements Document (SPSRD) Responsible for understanding the internal IAM systems, tools, and capabilities that comprise the IAM ecosystem Responsible for understanding and communicating how the IAM ecosystem tools integrate to deliver access request management, entitlement management, access review and certification, and authentication services to clients Responsible for ensuring compliance with control mechanisms and consulting on process improvements for risk reduction Reporting of key performance indicators via Tableau Dashboard Entitlement Management Support (Provisioning, deprovisioning, Access Review) Separation of Duties of Privileged Access Entitlements Oversight Consult on Privileged Access Management (PAM) issues and share best practices.

• Develop and execute compliance reviews to evaluate the effectiveness of general controls and operating processes, including documentation, presentations, and action plan remediation assistance focusing on Data Privacy Regulations (GDPR, CCPA, LGPD, etc.)• Develop and deliver metrics to demonstrate compliance project progress to management• Validate all relevant Security Controls and/or applicable departmental policies for each IT process assigned.• Coordinate and monitor the effectiveness of the security awareness training program • Coordinate and participate in internal and external audits from discovery through remediation.• Facilitate user access reviews and ensure respective remediation is performed in a timely manner • Identify information system weaknesses and deficiencies (may combine with bullet below?)• Monitor and report the status of company vulnerabilities and open risk register items• Prioritize risk mitigation decisions and associated risk mitigation activities and confirm that identified weaknesses and deficiencies in the information system have been addressed• Complete Security Authorization packages, to include system security plans, security assessment reports, Plan of Actions & Milestones (POAM) summaries and a continuous monitoring plan/assessment schedule, and present to senior management• Ensure compliance with any applicable information security standards and regulations • Support Data Protection Program and ensure access to sensitive data is appropriately authorized • Participate in internal and external risk assessments and evaluate control effectiveness • Review and validate POAM for each non-compliant control for each managed IT System prior to authorizing closure. • Ensure compliance with written and verbal security-related policies and regulations

• Led for all requirements gathering sessions related to Privileged Access Management in the US• Partnered with a cross-functional team to test and onboard third-party vendors, contractors and employees into the Privileged Access Management Solution• Managed stakeholder communications• Served as Point of contact for all support issues related to Privileged Access Management• Developed interim and long-term processes to include Privileged Access Management into business as usual (BAU)• Creator of policy and standards documentation• Mentored and trained team members

• Serves as the Scrum Master for the Identity Access Management (IAM) – Dormancy Detection Project Team• Schedule and lead user requirements sessions with stakeholders; gather testable system requirements and translate them into use cases in Functional Specification Documents and user stories• Analyzes business requirements to understand the business needs and to determine how systems and applications can best functionally fulfill the needs of the Dormancy Team• Identifies, accesses, and documents business requirements, recommending business priorities and advising key stakeholders on risks, options to mitigate risks and control costs• Responsible for creating tests scripts and leading testing processes to ensure a quality end user product is delivered• Responsible for engaging LOB Application Managers regarding dormant access and to enforce IAM Control Standards

• Elicited and documented detailed business, functional and technical requirements for Cyber Security (internal threats) projects• Liaison between different lines of business to ensure communications are consistent and timely• Responsible for business process engineering to determine gaps in processes and recommend improvements• Partnered with key stakeholders for change management purposes• Provided weekly status report to management team relating to project status, goals and deadlines• Created SharePoint Dashboard to display project status• Developed Test Strategies, Test Plan, Test Scripts and Test Cases

• Partnered with Development to create and execute test cases (UAT)• Design and deployment of various reports for the End-User requests using Web Interface and SQL Server Reporting Service.• Requirements gathering to define scope of projects focused on EDI pre – implementation.• Perform Gap analysis between business entities.• Documented and communicated requirements for implementation.• Maintained documents, created weekly and monthly reports using SQL Server Reporting Service 2008 for Senior Management and end-users.• Developed various SSRS drill down and drill through chart based reports.• Deployed and monitored SSIS Packages for new ETL Processes.• Executed and maintained SSRS report deliveries through subscription service.• Responsible for ongoing maintenance, enhancements, and fixes for production clients

Serve as data SME to consult business leaders regarding most effective ways to increase performance.Develop business solutions through research and interpretation of data.Gather, analyze, review, forecast and trend complex data.Testing and validation of data.Data warehousing, data visualizations, unstructured data.Database design and data modeling.

Responsible for project initiation, planning, execution, monitoring and closure. Prepared project updates, milestones, and facilitated status meetings. Managed project teams of 15 cross functional members: developers, account managers, testers, trainers, and support analysts.Identified risks and created mitigation plans.Renegotiated priorities as demands changed with effective conflict resolution.Managed dashboards for regular audits, reporting, forecasting, analysis and remediation of issues. Analyzed relevant data and generated presentations providing actionable insights and identifying growth opportunities.Results - Increased social engagement by 15%, social reach by 91%, and first year customer retention by 20%.

Led team of 5 analysts.Performed quantitative and qualitative data analysis to develop statistical and visual presentations.Collaborative management of testing for new applications and changes to existing applications to ensure integrity and quality of data.Presented relevant data fluctuations for stakeholder management.Collaborated with and business analysts for problem remediation.Created, maintained, tracked project plans/schedules and problem logs throughout the life of the project.Results - Increased Net Promoter 10 points YOY Nominated and recognized for outstanding project analysis

Partnered with Human Resources to recruit, identify, hire, train and retain top talent utilizing PeopleSoft HCM (Talent Management)Developed new system administrative procedures required, resulting from systems changes (CRM, ERP)Built high performing teams(onsite/remote) of Service and Support representatives/specialists by utilizing coaching skills while balancing team and individual goalsManaged service delivery experience to our customers through a collection of support channels (phone, email, and chat), supporting social channels (community, Facebook and Twitter moderation), and self-help channels (FAQ & content creation)Aligned team with business goals and stakeholders (Employees, customers and shareholders) while owning planning, goal setting and achieving resultsCustomer Analytics, Reporting & Insights - Continuously gathered and collated customer insights from the support experience to provide actionable recommendations, that enabled fast, educated actions to eliminate customer painEffectively communicated and led change management initiatives cross functionally and inter-team