Verizon

Distinguished Engineer

• Prepared Verizon managed security services platform for ISO 27001 certification making it available for sale ahead of schedule
• Identify, analyze, develop end-to-end risk assessment processes to mitigate business partner and third party risk (vendor risk management)
• Quantify risks based on scope and impact, create mitigation strategies, influence adoption and added them to risk register for monitoring 
• Analyzed systems, applications and project, operation risk and established security controls improvement initiatives resulting in $5 M upfront cost reduction 
• Lead cross-functional application and vendor reviews for technology, business process, Information security and regulatory risk collaborating with business, privacy and legal teams
• Evaluate cloud security posture, assessed risks  and designed controls to remediate audit deficiencies 
• Reporting status of key risk initiatives to management via dashboards
• Awarded two Spotlight Awards for contribution to a confidential project, and three Patent Awards

Principal Risk Management

Advisor and subject matter expert on technology, operational, financial, and/or information risks and control mechanisms to prevent fraud, abuse, strategic, reputational, and operational risks
Reviewed Gift Card and Credit Card projects for  Fraud, Credit and Payment Systems and suggested controls to mitigate / keep risk within acceptable limits for Bill To Cash.
Evaluated new products, processes and projects for fraud and credit risk, and suggested appropriate controls as needed.
Manage projects, provide requirements and testing support for Bill To Cash
Review and document root cause analysis of fraud issues. After analysis suggest mitigation. Monitor progress and report once issues are fixed.
Collaborate with Tax, IT Security, Legal and Compliance teams to ensure that risk is handled adequately for platforms, portals and infrastructure.

New Product Risk

Developed business requirements for new system and process implementations and enhancements that impacted data privacy, OFAC and other regulatory requirements
Collaborate with functional teams in developing business requirements and business controls in implementation plans
Drove process improvement and control implementation projects, while dealing with ambiguity
Developed documentation of processes, risks, and controls and worked with owners to assign accountability

Verizon Global Fraud Operations

• Lead the multiple audit planning, scoping, execution, and reporting based on identified risks for applications, systems and business processes
• Performed assessments and audits, suggested control improvements, documented technical issues to get multiple stakeholders to agree on recommendations  
• Audited against various frameworks, it audit and assurance standards like ISO 27001, SSAE 16, SSAE 18 SOC, CIS, NIST CSF, and others

Verizon Internal Audit

Rutgers University

• Lecturer for 400 level course in Information Security
• Rated 4.6 / 5.0 by students

Lecturer

Harman International

• Lead Foreign Corrupt Practices Act (FCPA) audits in Brazil and U.K. 
• Lead IT and integrated audits saving Harman International over twice our department budget for the year. 
• Evaluated purchase application and transactions, and detected double payments leading to the software vendor agreeing to return 1.5 million dollars during a Purchase Card audit.
• Prepared detailed documents, reports and observations supporting audit findings. 
• Design reports and data visualization dashboards for SOX audits.

Senior IT Auditor

Kershaw K. Khumbatta P.C

Associate

Open Information Systems Security Group

Vice President

Synerzy Software Solutions Inc.

Risk Assessment, Review and remediation of Systems and Processes.

Senior Consultant

Clayton Holdings Inc.

SOX IT Specialist

Prudential Financial and Management Services Ltd.

Managed engagements for IT Risk Assessments, Security Reviews, Pre- and Post-Implementation Reviews, Application Reviews  documentation and testing.

I am a risk management professional, leading system and process improvements with business owners to reduce risk. Guide business teams on Third-Party compliance and vendor assessment for risk mitigation to achieve business objectives. I anticipate bottlenecks and manage escalations. I use data to manage risk, quantify the impact, and translate risk metrics for business stakeholders. 
I help business owners execute cybersecurity strategies and accept risks appropriately based on quantified risk appetite.
With over 15 years of experience identifying, assessing, and driving remediation for information security professional risks in applications, I understand unique client challenges across multiple industries.
I am a sought-after resource to review risks in emerging tech like cloud security, blockchain, AWS security, and complex risk assessments.

Niloufer holds multiple certifications in IT Security (CISSP, CCSP), Risk (OPEN Fair), Privacy (CDPSE), Audit (CISA, CIA), and Fraud (CFE). She is a Certified Public Account licensed to practice in New Jersey. And a Chartered Global Management Accountant (CGMA).

Niloufer has authored two patents for System For And Method of Generating Visual Passwords (US 9,171,143 B2) and Establishing An Alternate Call Path Using Short-Range Wireless Technology (US 9,392,523).
Niloufer teaches part-time at Rutgers University, the state university of New Jersey, and is the organizer of the largest cybersecurity career MeetUp group and creator of the YouTube Channel "Cybersecurity Career Talks."

Niloufer co-founded two nonprofits Step Up Skill in 2020 and (ISC)2 New Jersey Chapter in 2012.

Niloufer Tamboly

BeyondID

• Leading Zero Trust Security Assessments and delivering report presentation with Best Practices for client's Okta tenants, conducting Okta tenant walkthrough, setup for clients as a part of Okta smart start service.
•Provided trusted and reliable direction as a Technical Consultant to help customers integrate, deploy and maintain their Okta and other SaaS Services, eg. AD - Okta federation, Policies review, tenant health checkup, MFA.
• Performed Single Sign-On implementation for Apps using authentication protocols like SAML, SWA.
• Leading India Identity VSOC team as escalation SPOC and assisting to build strong team with focus on upskilling, getting them certified in Industry neutral ISC2 CC certification, proactively identified the areas of the improvement in VSOC and helped to streamline the people, process, technology by leveraging your past experience.
• Proactively delivered enablement sessions to create awareness on variety of cybersecurity topics like 1. MITRE ATT&CK and EDR, 2. India's Digital Personal Data Protection Act-2023, 3. Future of IAM with rise of GenAI

IAM Engineer

Capgemini

• Configured, debugged, monitored, troubleshot issues related to data pipeline’s google cloud 
platform infrastructure on timely basis to achieve 95% uptime. 
• Components involved were cloud storage, compute engine, cloud SQL, cloud function, cloud 
logging and monitoring, Cloud IAM

Google Cloud Platform Operations Engineer

HCL Technologies

• Configured gcp cloud infrastructure like vpc, subnet, compute instances, load balancer, firewall rules. 
• Assigned IAM policies for various GCP resources as per requirements. 
• Created customized dashboards to monitor various service parameters

Technical Analyst

Saint Mary's University

• Provided extended support for SSL VPN setup with effective team collaboration for secure remote work 
option during COVID-19 crisis for virtual operation of around 200+ University faculty and staff 
members. 
• Improved wireless network availability from 95% to 100% with replacement of faulty hospitality access 
points across university campus. 
• Maintained high availability of wired network and services with firewalls in Active-Passive mode.

Technology Analyst

Dalhousie University

Classroom Technology Support Technician

Tata Communications Transformation Services (TCTS)

• Monitored system alerts, analyzed system logs and restored its underlying cause to achieve 95%+ network 
uptime. 
• Responded to customer complaints and provided timely resolution to achieve Service Level Agreement in 
accordance with ITIL framework, thus achieved highest team CSAT score. 
• Troubleshot link related issues for LAN/WAN environment for clients.

Telecom Support Engineer

Bharat Sanchar Nigam Limited

The internship was given on the Merit basis to the top 5 students of the college of our discipline.
Course work was focused on Digital Switching System, Optical Fiber Technology, Broadband Technology,Mobile Communication and Cyber security importance.
This enriched my inclination towards in Networking and Telecom domain.

Telecom intern

Rohit is a positive energizer, resilient, curious Cybersecurity professional with Master’s degree in Computer Networks specialization from Dalhousie University, Halifax, Canada.
He started his professional work journey from telecom and network operations background and currently seeking a keen interest to evolve into vast domains of cybersecurity.

He is an experienced IT professional with 6 years of technical work experience in GCP + Infrastructure Operations field with Indian and Canadian firms looking forward to using transferrable skills like analytical, problem-solving, and organizational skills in cybersecurity domain.

He firmly believes the quote that:
“KEY ROLE OF A LEADER IS TO GROOM LEADERS OF TOMORROW.”

He is adept at maintaining strong interpersonal communication skills and demonstrated analytical, problem-solving, and organizational skills in a deadline-driven environment.

Technical Skills:
Identity and Access Management: Okta
Google Cloud Platform (GCP) services: Cloud storage, Compute engine, Cloud SQL, Cloud function, Cloud Logging, Monitoring, Cloud Source Repository
Cloud Networking: Hybrid Networking, VPC, Cloud DNS, VPN, Peering, IAM
Basic knowledge of Linux, python scripting 
Networking protocols: TCP, UDP, OSPF, BGP, STP, NAT, DHCP, VPN
Tools: Terraform, Nagios, Aruba Airwave, HP IMC, Wireshark, Jira, BMC Remedy

Certifications: 
Okta Certified Developer, Consultant, Administrator, Professional
OneTrust Certified Privacy Professional
CCNA R&S, Security, ITILv3 Foundation, 
GOOGLE CLOUD CERTIFIED ASSOCIATE CLOUD ENGINEER
Fortinet Certified Fundamentals in Cybersecurity, 
Qualys Certified Specialist- Vulnerability Management Detection and Response

Trainings attended: Terraform, Fortinet NSE4, Autopsy Digital Forensics Platform,

If you find his profile suitable for a role and interested to have a word with him, send him a personalized invite or email rohit391ss@gmail.com and he will be happy to take it forward.

taplio

The Battle

Niloufer Tamboly

Rohit Shivarkar

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?