IAM manager, policy creation and enforcementOrganization: Global SecuritySupporting Pillar: Data ProtectionTeam: Access Assurance (Identity Access Management IAM)**Goal:**To design and implement a global access management program that meets data residency regulations and fine-grained, role-based access controls to support business needs while protecting data in accordance with contractual commitments, government agreements, and confidentiality requirements.**Value:**Help build sustainable world-class security capabilities, build customer trust, and transparency by providing data defense and access assurance.**My contributions:**- Led the design and implementation of a global access management program that obeyed data residency regulations and fine-grained, role-based access controls, aligned with business needs.- Designed and enforced the access review process to ensure regular reviews and management of privilege levels for all users.- Collaborated with cross-functional teams to build technical and functional requirements for in-house or external technologies supporting access management and assurance needs.- Interacted with business users to define access standards and policies to support data security standards.- Proactively monitored, responded, and reported on inappropriate data access events to improve access management and proactively reduce risk.- Designed key metrics and visualizations, reported regularly to multiple audiences, and provided support for findings for non-compliance with internal security policies.

Goal: Offer consulting and audit services relating to cybersecurity maturity, SaaS vendor management assessments, IT risk control, SOX and SOC 1/2/3 control testing, and business continuity assessment.Value: Assisted and led multiple client facing meetings with high level corporate partners. Worked to provide clear insight into the progression of each engagement and navigate difficult landscapes with strict deadlines. Performed assessments of current state environments and worked alongside multiple stakeholders to understand the needs of the company and to deliver quality work for their specific requirements.My Contribution:• Developed VM, IM, and IAM models for clients in the Banking, Capital, Insurance and Technology markets based off of industry standards such as NIST.• Completed a gap analysis to identify inadequate multi-factor authentication and user access levels on over 800 applications with more than 600 stakeholders.• Performed cyber security and SWIFT assessments for the Banking & Capital markets.• Worked with multiple billion-dollar market cap and international companies to perform financial systems auditing such as ITGC and SOX reports and independent review of controls for SOC 1/2/3 assessments.

Ty is based in Atlanta, GA, in the Cyber Security and Risk, Business Consulting department within EY's Financial Service Office (FSO). He joined the firm in July 2019 after graduating from The University of Alabama with a BS in Management Information Systems. Through work with multiple large clients, Ty has become acute with drafting business documents and gathering requirements, identifying and documenting strategy and acceptance criteria for cybersecurity applications in a range of different business models. Ty also has experience working on Service Organization Control Reporting (SOCR / SOX) engagements with global financial institution. Through this, Ty has developed experience in IT risk and controls (ITR&C) - specifically IT general control (ITGC) testing and IT application control (ITAC) testing. Ty is interested in leveraging his consulting and business analyst skills, documenting management’s criteria, assisting in development of documents and templates, and identifying integration points. Currently, Ty is studying for his Tech MBA. Ty has earned his Cyber Security badge issued by EY, his provisional CISA, and his CompTIA Security+ (plus) certifications.

Goal: Acting as a consultant to gather requirements, select, and implement a commercially available software product that will function in conjunction with the client's existing billing and conflict management software. Product to meet key functionalities in areas of document, email, and security. Value: Focused on key business processes and data to understand the underlying needs of the firm and ways the software would be utilized to increase efficiencies and ensure that proper security is in place. My Contribution: ● Creation of a customized RFI for software vendors. ● Lead contact with the client, drafting all outreach emails to involved parties. ● Research and requirements gathering, comparisons between software products. ● Establishment of sandbox environments to test finalist software options. ● Implementation and integration of selected software and data migration from the prior database.

Goal: Take an ambiguous project and break it down into multiple parts. Determine the best path of execution for the state government of Alabama to expand broadband to rural areas. Value: I worked to tackle various hurdles while finding out the underlying problem to what the CIO wanted. Presented him with a deliverable and a suggested course of action at the project end. My Contribution: ● Evaluated the potential of emerging technologies such as White Space. ● Educating and informing elected officials to the value of Dig Once Bill. ● Created a process for organizations applying for state funds, determined how multi-million dollar grants will be distributed on a points-based scale.