Michael Birjah

Experience

1. Fso - Technology Risk Consultant

   EY

   Sep 2014 — Present

   Led and managed multiple end-to-end assessments for both pre-deployment and post-deployment cloud migrations, including assessment of cloud service provider managed controls. Designed both pre-implementation and post-implementation risk and control assessments, and control design testing for both public and private cloud environments, such as: development and delivery tools, security solutions, orchestration and automation- Led and managed multiple cyber and cloud security assessments and internal audits for some of the largest public and private financial institutions globally- Performed risk, control and maturity assessments, and designed control testing strategies across critical cyber and cloud domains. Domains assessed include: identity and access management, cloud security (inclusive of access management, key and encryption management, container security, logging and monitoring, threat and vulnerability management, cloud access security brokers, and security solutions enablement), platform security logging and monitoring, security incident and event management (SIEM), SIEM tuning and use case development, digital forensics, independent and internal penetration testing (including red, blue and purple team exercises), endpoint security, platform and application vulnerability management, threat intelligence, insider threat, perimeter and network security (e.g, firewall, intrusion detection/prevention systems, DNS Security, network access controls), cyber resiliency, data protection, data privacy and third party risk management.