MARVIN JOHN C. DELA PAZ

* ******** ******** ****.******, Marikina City Philippines

091********

adbjt1@r.postjobfree.com

Career Objective

To share my knowledge in all aspects especially in computer related fields, to serve and help my Co – IT’s in working as a team in solving and working out task and jobs in a truthful approach in teams of continuous updating of technology.

Work Experience

TaskUs, Inc. – Identity and Access Management Associate, Information Security 2018 – 2019

Erns and Young – 3rd Party Risk Management Consultant 2019

Conduent – Infromation Security Engineer 2019

EDUCATION

TERTIARY: University of the East (U.E.) 2013 – 2017

Claro M. Recto, Manila

Bachelor of Science in Information Technology

Relevant Experiences

Performed and Managed the Active Directory to ensure compliance with the Identity Access Management process and Approval Matrix. This covers Onboarding, Offboarding, Reactivation and Suspension of Access. It also includes managing access with specific privileges.

Performed and Managed Access Control for Bitium Application (SSO). It includes implementing security controls such as integrating 3rd Party Client Tools with Two Factor Authenticator (2FA), managing privilege access depends on the business need of the clients, etc. Conducts Monthly Audit for Bitium, provides recommendation, assists in the remediation process and creates reports based on the results.

Performed Process Document Creation and Improvement for the Identity Access Management Run Book, new IP addresses notification and Mobile Gmail Setup.

Lead and Performed Client Tool Testing to ensure compliance with company’s acceptable use policy and this includes accessibility outside Client’s network, Login credentials provided are not shared, compatibility of the application with Single sign-on App (SSO), etc. Assisted in 3rd party tool and profile path testing in Active Directory accounts.

Assisted in network and hardware troubleshooting, performing preventive maintenance and upgrades on servers and POS; this includes managing, maintaining, developing, designing and updating the company’s intranet.

Provide technical assistance through Ticketing, chat, and email for all the company employees. Participate in the installation of all company internal tools and assigning in all the Active Directory groups.

Trained different departments with new Information Security policies and procedures regarding security enhancements.

Worked on various TPRM projects for Ey’s customers across the globe. Assist Managers in the delivery of third party risk management engagements, such engagements involve performing a security assessment of a client’s 3rd party service providers.

Performed Cyber Security assessment with EY which includes the following activities: Identified the threats, inherent risk and impact, system character, analyzed control environment, determined likelihood rating, and calculated risk rating of AIA 3rd parties.

Performed HITRUST mapping activity with EY. Mapped HITRUST control against ISO, NIST, BitSight, and Security Scorecard.

RSAM administrator.

General RSAM Tool Administration:

Working with RSAM Support and End Users to correct bugs and other issues. Translation of Business Requirements into a Technical Design. Use Case Development and Configuration. Implementations & Change Management (Testing New Functionality, Regression Testing, Change Tickets, and Push-to-Prod). End User Support and End User Training.

Assist in developing, testing, and delivering solutions, support, reporting, information, and relationship management to satisfy client requests.

Skills and Qualification

ISO 27001:2013 Foundation Certified

ITIL Trained

RSAM Administrator

Advance knowledge in Active Directory

Single sign-on (SSO) Management

Lead Client Tool Testing and Audit

Basic knowledge in PCI and SOC Certification

Cybersecurity 3rd Party Security Assessment

Bachelor of Science in Information Technology

Contact this candidate