Sonia Rayment

WORK HISTORY

EDUCATION

SKILLS

ABOUT SONIA RAYMENT

My present position includes the following, high level, attributes:Information Security based position supporting the Head of Security in all areas of User and Logical Access Management (UAM/LAM) specialising in Grey List Management, Segregation of Duties, Role Based Access of over 260 in- and out- house applications (covering a user base in excess of 1.6 million) and compliance to Sarbanes Oxley (SOX) requirementsManaging, as part of a team, the recertification of all SOX and Business Critical applications, the Segregation of Duty processes, the Joiner/Mover/Leaver Processes and Switchover and On-Boarding ProcessesMaintenance of robust processes and procedures covering all aspects of UAM/LAM for both internal and external Audit Review purposesAccurate production of data for distribution and collation from multiple databases against an agreed reporting schedule Managing and integrating any and all new applications brought into scopeEnsuring LAM controls are embedded into Business processes and working effectively and monitor dispensation for all non-complianceWorking to agreed reporting schedule and delivering and collating MI in a timely manger for internal and external customers.Analysing and summarising adverse trends and reporting to the UKB Information Risk Governance Forum as requiredMaintenance of a central library of all copies of Operating Models, Processes and Procedures and copies of Management Information and AttestationsBeing a point of contact for Systems Access queries from Business Managers who require amendments to their user profiles Analysing (internal and external) audit findings and identifying any trends and emerging risks Acting as a key point of contact for the resolution of LAM related queriesConstantly reviewing and developing LAM processes in order to streamline and reduce the potential for inaccuraciesSpecialties: PRINCE2 Practitioner. Analytical, numerical & communication skills; organisational & time keeping skills & an eye for quality control & attention to detail. Natural leadership & Management capabilities. Able to deliver high quality work in short timescales. Self starter assuming responsibility & initiative. Deep understanding of audit & systems security relating to user access. Knowledge of Operational Risk & Sarbanes Oxley compliance. Able to build & maintain relationships with Stakeholders.