Risk and controls professional with extensive experience in identity and access management, access governance, and regulatory compliance within large financial services environments. Strong background in IT General Controls, segregation of duties, and audit support, including SOX, and regulatory examinations. Proven ability to conduct risk assessments, support remediation initiatives, and maintain control effectiveness through structured processes, metrics, and documentation. Experienced in leading and mentoring teams, managing high-severity incidents, and collaborating with business, technology, and compliance stakeholders across locations. Recognized for disciplined execution, sound risk judgment, and consistent delivery in high-risk, regulated environments.
Overview
13
13
years of professional experience
1
1
Certification
Work History
Senior Analyst - IAM
Citicorp Financial Services India Limited
06.2018 - Current
Implement and maintain logical access controls through centralized IAM provisioning, ensuring adherence to internal IAM standards, policies, and regulatory requirements.
• Support IT General Controls by enforcing standardized access approvals, workflows, and segregation of duties, reducing access-related operational and compliance risks.
• Conduct preliminary risk assessments for access requests that introduce new vulnerabilities or deviate from standard security practices, enabling informed risk-based decisions. • Ensure joiner–mover–leaver access lifecycle is managed in line with least-privilege principles, including onboarding, access changes, and periodic access reviews.
• Manage end-to-end onboarding and migration of critical business applications into the IAM ecosystem, performing planning, risk assessment, and mitigation to support secure and compliant access.
• Work closely with business application owners and line-of-business stakeholders to understand requirements and guide them through the risk assessment lifecycle for compliance with organizational standards.
• Evaluate existing IAM processes and identify opportunities to improve efficiency, control effectiveness, and service quality; communicate assessment findings and recommendations to senior stakeholders. • Lead FRB-MRIA Level 1 remediation and segregation-of-duties governance initiatives by designing preventive access control frameworks aligned to RBAC and least-privilege models.
• Support SOX and internal audits by maintaining access governance documentation, preparing monthly KPIs and KRIs, conducting quality assessments, and demonstrating control effectiveness.
• Manage high-severity access incidents and escalations, including out-of-hours requests, ensuring timely resolution while maintaining governance and audit defensibility.
• Lead and mentor a team of 10 IAM analysts, overseeing prioritization, SLA adherence, escalation handling, and quality of delivery to ensure uninterrupted business operations.
• Collaborate with cross-functional teams across locations to support regulatory examinations, audit reviews, and ongoing compliance initiatives.
Senior Processing Associate
Bank of New York Mellon
05.2015 - 06.2016
Senior Team Member, Trade Finance Products
Bank of America
05.2014 - 05.2015
Trade Finance Officer
Standard Chartered Bank
09.2012 - 05.2014
Education
B.Tech - Information Technology
Tagore Engineering College
Chennai, TN, India
01.2011
Skills
IAM Risk Assessment & Mitigation
Access Governance & Control Implementation
IAM Project & Migration Delivery
Team Leadership & Incident Management
GRC, ITGC & Compliance Risk
Audit Documentation & Reporting
Stakeholder Engagement & Training
Certification
Certified Information Systems Auditor (CISA)
Certified in Risk and Information Systems Control (CRISC)
Business Intelligence - Power BI
Certified Project Management Professional (MSME)
Six-Sigma, Black Belt (Council for Six-Sigma Certifications)
Accomplishments
Crisis Access Enablement - Selected to lead enterprise-wide secure remote access enablement during pandemic scenario, supporting business users, vendors, and third parties while ensuring risk documentation, control reporting, and executive stakeholder communication.
Regulatory Cybersecurity Compliance - Contribution to Citi's efforts in complying with regulatory requirements from the Monetary authority of Singapore (MAS) in scope of MAS 655 Cyber Hygiene notice.
Wall of Fame - Nominated for an enterprise recognition program for cross-site collaboration and measurable contributions to business unit objectives.
Lead IAM Security Analyst at Medisys-Jamaica, Flushing & Melville Hospital Medical CentersLead IAM Security Analyst at Medisys-Jamaica, Flushing & Melville Hospital Medical Centers