Stevon Jagnarine

About Stevon Jagnarine

I’m a cybersecurity professional with 4+ years of experience in data security, cloud security, and governance, focused on helping organizations protect sensitive data while enabling innovation at scale.I’ve worked across enterprise consulting and financial services, supporting IAM, data classification, DLP, and cloud security architectures in Azure and AWS environments. At EY, I led data security initiatives translating regulatory and business requirements into practical solutions, including implementing OAuth 2.0 and mTLS for secure authentication and API access. At JPMorgan Chase, I assess the design and effectiveness of cybersecurity controls across IAM, data management, SDLC, and governance domains, aligning controls to NIST CSF 2.0, NIST SP 800-53, and FFIEC.I’m deeply interested in the advancements shaping cybersecurity and the broader technology landscape—from cloud-native platforms and zero trust architectures to AI-enabled applications—and how security must evolve to be embedded, scalable, and forward-looking. I enjoy working at the intersection of technology, problem-solving, and collaboration, with a growth mindset shaped by my experience as a Cybersecurity Teaching Assistant at MIT.Always open to connecting with others passionate about data security, cloud security, and building safer digital platforms. Let\'s Connect!

Experience

1. Cybersecurity and Technology Controls Audit Associate

   JPMorganChase

   Apr 2025 — Present · Jersey City, NJ, US

   Data & Identity Security Assessments: Served as Auditor in Charge (AIC) for Active Directory (AD) and identity access reviews, identifying 75+ terminated or stale accounts with potential residual access and validating remediation aligned to least privilege and enterprise security standards.• Access Lifecycle & Governance: Assessed joiner–mover–leaver (JML) and deprovisioning controls by reviewing and validating AD automation scripts, evaluating control effectiveness, access governance, and risk reduction outcomes.• Security Control Effectiveness & Risk Analysis: Evaluated cybersecurity and technology controls across IAM, Data Management, SDLC, and Technology GRC, assessing whether control objectives sufficiently mitigated identified business and security risks.• Framework & Regulatory Mapping: Mapped internal controls to NIST CSF 2.0, NIST SP 800-53, FFIEC, and supporting frameworks (COBIT, ITIL) to assess alignment with industry best practices and regulatory expectations.• AI-Enabled Audit & Evidence Optimization: Leveraged internal LLM-based tools to improve audit efficiency by ~95%, accelerating evidence analysis, control validation, and technical documentation through structured prompt engineering.

Education

• Zicklin School of Business

  Master of Science - MS, Information Systems (Cybersecurity and Information Assurance)

• Baruch College

  Bachelor of Business Administration - BBA, Information Systems (Concentration in Cybersecurity and Info Risk Management)

  2015 — 2020