Verizon

Distinguished Engineer

• Prepared Verizon managed security services platform for ISO 27001 certification making it available for sale ahead of schedule
• Identify, analyze, develop end-to-end risk assessment processes to mitigate business partner and third party risk (vendor risk management)
• Quantify risks based on scope and impact, create mitigation strategies, influence adoption and added them to risk register for monitoring 
• Analyzed systems, applications and project, operation risk and established security controls improvement initiatives resulting in $5 M upfront cost reduction 
• Lead cross-functional application and vendor reviews for technology, business process, Information security and regulatory risk collaborating with business, privacy and legal teams
• Evaluate cloud security posture, assessed risks  and designed controls to remediate audit deficiencies 
• Reporting status of key risk initiatives to management via dashboards
• Awarded two Spotlight Awards for contribution to a confidential project, and three Patent Awards

Principal Risk Management

Advisor and subject matter expert on technology, operational, financial, and/or information risks and control mechanisms to prevent fraud, abuse, strategic, reputational, and operational risks
Reviewed Gift Card and Credit Card projects for  Fraud, Credit and Payment Systems and suggested controls to mitigate / keep risk within acceptable limits for Bill To Cash.
Evaluated new products, processes and projects for fraud and credit risk, and suggested appropriate controls as needed.
Manage projects, provide requirements and testing support for Bill To Cash
Review and document root cause analysis of fraud issues. After analysis suggest mitigation. Monitor progress and report once issues are fixed.
Collaborate with Tax, IT Security, Legal and Compliance teams to ensure that risk is handled adequately for platforms, portals and infrastructure.

New Product Risk

Developed business requirements for new system and process implementations and enhancements that impacted data privacy, OFAC and other regulatory requirements
Collaborate with functional teams in developing business requirements and business controls in implementation plans
Drove process improvement and control implementation projects, while dealing with ambiguity
Developed documentation of processes, risks, and controls and worked with owners to assign accountability

Verizon Global Fraud Operations

• Lead the multiple audit planning, scoping, execution, and reporting based on identified risks for applications, systems and business processes
• Performed assessments and audits, suggested control improvements, documented technical issues to get multiple stakeholders to agree on recommendations  
• Audited against various frameworks, it audit and assurance standards like ISO 27001, SSAE 16, SSAE 18 SOC, CIS, NIST CSF, and others

Verizon Internal Audit

Rutgers University

• Lecturer for 400 level course in Information Security
• Rated 4.6 / 5.0 by students

Lecturer

Harman International

• Lead Foreign Corrupt Practices Act (FCPA) audits in Brazil and U.K. 
• Lead IT and integrated audits saving Harman International over twice our department budget for the year. 
• Evaluated purchase application and transactions, and detected double payments leading to the software vendor agreeing to return 1.5 million dollars during a Purchase Card audit.
• Prepared detailed documents, reports and observations supporting audit findings. 
• Design reports and data visualization dashboards for SOX audits.

Senior IT Auditor

Kershaw K. Khumbatta P.C

Associate

Open Information Systems Security Group

Vice President

Synerzy Software Solutions Inc.

Risk Assessment, Review and remediation of Systems and Processes.

Senior Consultant

Clayton Holdings Inc.

SOX IT Specialist

Prudential Financial and Management Services Ltd.

Managed engagements for IT Risk Assessments, Security Reviews, Pre- and Post-Implementation Reviews, Application Reviews  documentation and testing.

I am a risk management professional, leading system and process improvements with business owners to reduce risk. Guide business teams on Third-Party compliance and vendor assessment for risk mitigation to achieve business objectives. I anticipate bottlenecks and manage escalations. I use data to manage risk, quantify the impact, and translate risk metrics for business stakeholders. 
I help business owners execute cybersecurity strategies and accept risks appropriately based on quantified risk appetite.
With over 15 years of experience identifying, assessing, and driving remediation for information security professional risks in applications, I understand unique client challenges across multiple industries.
I am a sought-after resource to review risks in emerging tech like cloud security, blockchain, AWS security, and complex risk assessments.

Niloufer holds multiple certifications in IT Security (CISSP, CCSP), Risk (OPEN Fair), Privacy (CDPSE), Audit (CISA, CIA), and Fraud (CFE). She is a Certified Public Account licensed to practice in New Jersey. And a Chartered Global Management Accountant (CGMA).

Niloufer has authored two patents for System For And Method of Generating Visual Passwords (US 9,171,143 B2) and Establishing An Alternate Call Path Using Short-Range Wireless Technology (US 9,392,523).
Niloufer teaches part-time at Rutgers University, the state university of New Jersey, and is the organizer of the largest cybersecurity career MeetUp group and creator of the YouTube Channel "Cybersecurity Career Talks."

Niloufer co-founded two nonprofits Step Up Skill in 2020 and (ISC)2 New Jersey Chapter in 2012.

Niloufer Tamboly

Toastmasters International

Pallikaranai Toastmasters Club
Club Number: 28678120, District 120, Area C05

Club President

HCL Technologies

Experience in Information Risk Management/Information Security or auditing.
Excellent understanding of the IT Control framework, in particular risk assessment and control selection
Working experience in any two of the compliance programs (PCI DSS,HIPPA,ISO 27001,SOC2, SOX,NIST,FISMA,COBIT)
Lead teams and efforts to ensure effective execution of periodic risk assessments and drive integration of remediation efforts with the risk management process
Lead and perform activities to help measure and monitor compliance with contractual security requirements, company policies and procedures to ensure the account is compliant and audit ready
Lead different compliance & audit testing programs and support successful completion of various external compliance certification programs and internal compliance assessments
Proven ability to lead small teams dedicated to the performance of risk management and assessment responsibilities.
Ability to provide effective management of junior employees.
Develops and provides appropriate guidance on solutions to mitigate risks and enhance system security
Coordinates with other DCA and Delivery Compliance representatives to build out world class compliance program components to include processes, procedures, and technologies.
Deep understanding of privacy and business continuity requirements and support R&C Privacy and BCM teams in execution of their respective program
Demonstrates ability to handle conflicting situation & should have strong verbal, written communication & analytical skills
Have a good technical awareness and the aptitude to remain up to date with information security and IT developments
Ability to communicate Risk to non IT business owners and support function such as delivery, HR, Admin, Legal, Contracting and others

Manager

BUDDI.AI

As an IT manager, overseen and managed the technology systems and infrastructure within an organisation and ensuring the smooth operation of the organisation's technology resources, including computer networks, hardware, software, and other related systems.
Leadership and Strategy:
     ◦ Developed and implemented an IT strategy aligned with the organisation's goals and objectives.
     ◦ Provided leadership and guidance to the IT team, fostering a collaborative and productive work environment.
Infrastructure Management:
      ◦ Planned, implemented, and maintained the organization's technology infrastructure, including servers, networks, and telecommunications systems.
      ◦ Ensuring the availability, security, and scalability of the infrastructure to meet business needs.
      ◦ Monitor system performance, troubleshoot issues, and implement solutions to minimize downtime and disruptions.

Application and Software Management:
       ◦ Overseen the selection, deployment, and management of software applications and systems used within the organisation.
       ◦ Collaborate with various departments to identify software needs, evaluate options, and make recommendations.
       ◦ Manage software licenses and ensure compliance with licensing agreements.

Data Security:
         ◦ Developed and enforced security policies and procedures to protect the organization's data and information systems.
        ◦ Implemented measures to safeguard against unauthorized access, data breaches, and other cybersecurity threats.
        ◦ Stay informed about current security threats and vulnerabilities and take appropriate actions to mitigate risks.

Team Management and Development:
  ◦ Recruited, trained, and mentored IT staff members, ensuring they have the necessary skills and resources to perform their roles effectively.
   ◦ Conducted performance evaluations, provide feedback, and facilitate professional development opportunities.

IT Manager

Visionary RCM Infotech

◦  Lead the analysis and investigation of information security events (SIEM) in a SOC environment
to immediately detect, verify, and respond swiftly to cyber threats and remove false positive.
◦  Creating and fine tuning the alerts in SIEM tool. (Manage Engine Log360)
◦  Exposure to different Use cases.
◦  Provide Incident Response (IR) support when analysis confirms actionable incident
◦  Perform vulnerability assessment (Tripwire) vulnerability management.
◦  Responsible for Patch deployments.
◦  Serving as a technical point and provide mentoring for Security Operations Center (SOC)
◦  Maintains baselines for the secure configuration and operations
◦  Maintaining familiarity with industry trends and security best practices (HIPPA, CIS).
◦  Perform Poc to evaluate third party solutions.
◦ Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.

Team Lead - IT

Mulli Brothers pvt Ltd.

IT Administrator 

Nebula computers Pvt Ltd

FM Engineer

HCL Infosystems Ltd.

OJT Engineer 

With over 13 years of experience in IT operations and information security management, I am a CISA and CISSP certified manager at HCL Technologies, one of the leading global IT services providers. My core competencies include information risk assessment, control selection, compliance testing, and incident response.

I have successfully implemented and maintained robust security measures, mitigating risks and protecting organisations from evolving cyber threats. I have in-depth knowledge of industry frameworks, such as ISO 27001, HIPAA, PCI DSS, and have proven experience leading successful audits and assessments. I also possess a strong technical background in IT operations, enabling me to bridge the gap between technology and security, ensuring seamless integration and optimal protection. I am committed to continuous learning and professional growth, and passionate about sharing my knowledge. My goal is to ensure the protection of critical assets, drive compliance, and promote a culture

taplio

The Battle

Niloufer Tamboly

Guru Ramasamy

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?