Susu Yang
Senior Information Technology Security Analyst @Manulife
Signup · Get unlimited contacts
WORK HISTORY
Senior Information Technology Security Analyst @Manulife
CA
Serve as the Subject Matter Expert (SME) for web security including url filtering (Zscaler, Bluecoat); firewalls (Checkpoint, Fortigate); Intrusion Prevention, DLP (Symantec), CASB; Advanced Threat Protection systems and services• Participate in an operation that monitors for and responds to security events based on Splunk log analyze, including working with external entities, respond to information security incidents, including internal and external events and targeted threats.• Configure, maintain and support user access policies on web security products to ensure Company Security Policies are met• Perform system security analyze based on security framework and standard (ISO 27001 and NIST CSF), document system design and changes for audit proposes. Perform risk assessments, threat assessments (TRA), Privacy Impact Assessments (PIA), Statement of Sensitivity (SOS), Vulnerability Assessments (VA) according to project needs and security requirements. Report on risks, update and improve the risk management methodology. • Lead Business Continuity / DR Planning, including design DR strategies, plans, tests, and management.• Serve in Change Approval Board (CAB) and Technical Approval Board (TAB) as an approver for Security changes. • Responsible for the investigation of security events and appropriate escalations where applicable.• Transforms business requirements into system specifications. Provides analysis and consulting on: Standards and Policies; Network Security; User authentication/ACL management; Data Security • Partner with operations in the execution of compliance checks, following SOX standard. • Perform incident management, including incident severity assessment, root cause analyze, incident documentation and future improvement analyze. Maintains operational metrics for management reporting
EDUCATION
Concordia University
Master's Degree, Computer and Information Systems Security/Information Assurance
University of Science and Technology Beijing
Bachelor's Degree, Information Systems, General
SKILLS
ABOUT SUSU YANG
Proficiency in cryptography, network security, system security, data loss prevention, intrusion detection. Experience with Python/Shell/Perl/Bash scripting, skillfully in improve process automation level. Experience with firewall configuration, VPN set up, network connection troubleshooting Experience with change management, cross-team cooperation Familiar with project lifecycle management, quality assurance theory, practical experience in core-related projects Proficiency in database administrationrelational database design Knowledge of network protocols Knowledge of management science, basic finance principles In depth understanding of project management theories and tools (Gantt chart, milestone list, WBS, time management, cost management), quality management skills, quality assurance principles (ex: six sigma theory, Lean engineering, series) Experience in project management, quality assurance, software validation and software testing Experience in database structural and functional design, skillfully in translate customer requirement into technical requirement,UML graph design, E-R graph design, data dictionary design Programming language (C#, Java.Net), database skills (SQL Server, Oracle), network protocols(TCP/IP, UDP), operating systems(Windows, Linux, and Unix), software testing(black-box testing and write-box testing), software development model(Waterfall, Agile, Incremental) Familiar with ERP and CRM software, Proficiency in MS Project, MS Visio, Rational Rose, Rational ClearCase Excellent communication and active listening skills, strong work ethics, good problem-solving skills, and enthusiasm Multilingual: English, French, and Chinese
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.