Haani Khan

About Haani Khan

For the past 16 years, I have been spearheading technical projects and leading…

Experience

1. Client Technology Manager (Dedicate at Investment Bank)

   ECI

   Apr 2018 — Present

   Client Security Manager, Investment Bank Users) • Architect enterprise security solutions such as Privilege Access Management (PAM), workload protection, data leakage prevention, secure web gateway and authentication solutions to improve company’s security posture. • Collaborate with infrastructure and project teams to embed security into solutions before they are productionalized to reduce attack surface area. • Collaborate with risk management, developers, project, and infrastructure teams to review and remediate findings from application assessments and vulnerability scans to protect against common vulnerabilities and exposures. • Review circumstances surrounding security gaps and providing recommendations on corrective actions and define risk to the business information assets. • Redesign access management process to employ least privilege model for access to core infrastructure services such as domain controllers and mail servers by implementing role-based access (RBAC). • Design and implement processes to enforce new, stricter password policies and multifactor authentication (MFA) as a prerequisite to access the company’s resources thereby improving the authentication mechanism. • Segment the network into different functional zones to prevent mac spoofing and unauthorized access on the network to protect confidentiality. • Architect applications to comply with three tier model while leveraging global load balancers (GSLB) to protect confidentiality and ensure High Availability (HA). • Interface regularly with C-level executives, high-profile clients and auditors to provide support and consulting services.