Nag H. Kosuru
IT Security Specialist Tech Risk Manager @Bank of America
Signup · Get unlimited contacts
WORK HISTORY
IT Security Specialist Tech Risk Manager @Bank of America
New York, NY, US
Technology Risk Manager responsible for managing the delivery of ADS (Applications and DB Services) Audit Issues. Collaborated with key Stakeholders, Risk Partners, Global InfoSec, Engineering, Infrastructure, and Operations teams to remediate large scale IAM, Monitoring Response and Forensics, Access reviews and revocations, and vulnerability Risk Management.• Managed and documented the evidence for the timely delivery and remediation of Self-Identified Audit Issues (SIAI), Risk-Identified Audit Issues (RIAI), and Audit-Identified Audit issues (AIAI) and sustainability of implemented solution. This evidence is critical to RLOB (Return to Line of Business) review and approval by Risk Auditors so teams can conduct BAU of their DB, Middleware, and Messaging systems.• ADS RISE (Risk Issue Support Environment) Manager responsible for collaboration with Risk Partners, IAM, DB Engineering, and OPS teams to deliver remediation solution(s), and vulnerability risk reporting.• Performed risk assessments, reviews, and gap analysis to ensure adherence to Global Information Security (GIS) policy standards related to confidential data protection, Access Controls Testing (ACT) including Applications, Databases and Privileged Access, Permissions Catalog (PCAT), Encryption, Multi Factor Authentication (MFA), Logging & Monitoring.• Conducted PRC review meetings with process owners, process delegates, corrective action plan owners to ensure the proposed risk solution aligned to a process, control instance, and measurable metrics.• Designated Governance POC for CTI (Core Technology Infrastructure) digital certificates.• Represented Risk and Process team in In-Line Quality Assurance (QA) review meetings to review the documented evidence of current state, proposed target state, process alignment, solution implementation, and the sustainability of remediation action steps.
EDUCATION
CMC, Bangalore
Post Graduate Course in Computer Applications
Acharya Nagarjuna University
Bachelor's degree, Business/Commerce, General
Rutgers Business School
Executive Master of Business Administration - MBA
SKILLS
ABOUT NAG H. KOSURU
Hands-On Information Technology Risk Management Consultant with over 20 years of professional experience in Audit Issue Management, Process Risk, Enterprise Data Security, Information Security, Data Privacy, Cybersecurity Regulations, IT Risk Controls, SOX Compliance, BCP/Disaster Recovery, Change Management.Knowledge of Standards/Best Practices/Frameworks ISO 2700x, NIST CSF, NIST 800-53, COBIT, ITIL, PCI DSS, COSO, CIS, FFIEC, NYDFS, HIPAA, GLBA, GDPR, and CCPA
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.