Sutha Sunda
Senior Information Security Analyst @TD
Signup · Get unlimited contacts
WORK HISTORY
Senior Information Security Analyst @TD
Toronto, ON, CA
Perform control effectiveness testing on critical security controls, including Privileged Access Management (PAM), Identity & Access Management (IAM), Logging & Monitoring, Change Management, Firewall Security, Mainframe Security, and Endpoint Security, to ensure compliance with financial industry regulations and best practices.• Conduct annual recertifications and control effectiveness assessments for NYDFS,SWIFT PayCan, GLBA and Basel, ensuring adherence to regulatory requirements for financial institutions.• Support regulatory findings and remediation assurance, performing end-to-end control effectiveness testing on findings and providing vetting and validation during the remediation workflow.• Provide audit support by coordinating evidence collection, responding to auditor requests, and ensuring timely submission of documentation to meet regulatory and internal audit requirements.• Utilize JIRA and ServiceNow to document control testing, manage audit workflows, and track security issues in an Agile environment.• Develop executive-level reports and dashboards to provide visibility into security control effectiveness and compliance status.• Collaborate with internal teams, including Risk, Compliance, and IT Security, to strengthen the organization’s security posture and align with financial industry standards
EDUCATION
SLIIT
Associate's degree, Computer Software Engineering
St. Peter's College
GCE Advance Level Education, Mathematics
Algoma University
Bachelor's degree, Computer Science
ABOUT SUTHA SUNDA
Senior Information Security Leader with extensive experience in Governance, Risk, and Compliance (GRC), Privileged Access Management (PAM), and Identity & Access Management (IAM), primarily within banking and telecommunications. I specialize in building and leading security programs that meet complex regulatory requirements while enabling operational efficiency and business resilience. Skilled in CyberArk, Delinea (Thycotic), SailPoint, and Okta, I bring both technical depth and strategic oversight to enterprise security initiatives.Throughout my career, I have:Directed control effectiveness testing for critical security areas, including PAM, IAM, firewall, endpoint, mainframe, and change management controls.Oversaw regulatory compliance initiatives for NYDFS, SWIFT, GLBA, and Basel, ensuring adherence to financial industry standards.Led enterprise‑wide audit support, evidence collection, and remediation assurance to close findings and strengthen security posture.Championed IAM/PAM strategy and process improvements, onboarding high‑risk systems, streamlining access governance, and reducing access‑related issues by 80%.I excel in cross‑functional leadership, partnering with Risk, Compliance, and IT Security executives to drive enterprise‑level security enhancements. My leadership approach combines technical expertise, program management, and a commitment to building secure, compliant, and efficient systems at scale.If you’d like to discuss security governance leadership, access management strategy, or enterprise compliance programs, let’s connect.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.