Tisha Martinez Email and Phone Number

• Lead a global team in the successful delivery and completion of access certifications for 320+ applications, including SOC1, SOC2, and DFS applications.• Manage the firm’s Role-Based Access Control (RBAC) program through the creation and review of Business and IT roles.• Define SoD policies and remediate policy violations.• Perform risk-based assessments during application onboarding. • Provide evidence packages to internal and external auditors for audit reviews and document required remediation plans. .• Support the global Security Coordinator (SC) program through security awareness training.• Evaluate and assist in the enhancements of SailPoint IIQ for certifications and its Lifecycle manager access provisioning.

Established role-based access control standards within the Firm in the distributed, internet and mainframe environments for 5500 employeesEvaluated and implemented an Identity Management and Provisioning toolParticipated and tested Role Engineering and Compliance tools (Sailpoint IdentityIQ) for purchase and implementationPerformed risk-based assessments of change requests to role-based standardsPerformed risk-based assessments of local departmental Security Coordinators’ performance Consulted in the security design of newly-developed high-risk ranked business applicationsManaged annual Application Entitlements certification program for over 100 high risk-ranked applications.Maintained the Division’s Application Inventory DatabaseManaged annual Business Unit Entitlements certification program Maintained website information for Firm’s departmental Security Coordinators portalTrained newly assigned departmental Security Coordinators Involved in the remediation of audit-related initiativesDocumented internal proceduresProvisioned users in CA-Top Secret Database, Active Directory, and internal web applications