Cyber Security Project Management

Nash Qureishi (PMP)

402-***-****

************@*****.***

PROFILE

Seasoned Technology Management Professional with 20+ years experience managing large projects & programs delivering technology solutions for Cyber Security, Identity and Access Management, Public Key Infrastructure, Data Encryption, Risk, Privacy, Regulatory and Audit compliance with major financial institutions, data management/technology, and energy firms.

Firm believer that technology is to solve business problems and create business value. I believe in a comprehensive understanding of the needs and implementation of right sized solutions. I like to work closely with the business & technology leaders and try to bridge the gap to make sure the message is not lost in tech-speak and business needs are efficiently addressed in the solutions.

18+ Years of experience in people management and lead roles; managed a cross functional team of up to 50+ developers, architects, business analysts, financial analysts, engineers and SMEs for large portfolios.

22+ years of experience in technology and business domains handling multiple roles like Program Delivery Manager, Product Manager, Infrastructure Manager and Information Security professional.

PMP Certified project management professional with diverse experience using all sorts of delivery frameworks.

Excellent functional knowledge of financial institutions, banking, financial products and associated risk management capabilities

Diverse experience in enterprise, solution and data architecture, data strategy & data governance aligned with enterprise architecture and infrastructure teams. EDUCATION & CERTIFICATIONS

Master’s Degree in Computer Sciences –Northeastern Illinois University, Chicago Bachelor’s in Computer Sciences & Mathematics –Univ. of South Alabama, Mobile PMP Certification –with Project Management Institute (PMI) -PMP Certified since 2011 PROFESSIONAL EXPERIENCE

Randstad USA - October 2021 - March 2025

McKesson Technology (Infosec. Risk Mgmt.)

Cyber Security Project Management Consultant

Implemented MFA capabilities with Okta, Entra ID and other federated solutions to strengthen enterprise-wide security and enhance Identity and Access Management.

Lead the implementation and validation of MFA solutions across 700+ applications to enhance security and access controls.

Assumed an analyst role for a year, orchestrating collaboration between application teams, MFA integration engineers, business owners, and solution validators to ensure seamless implementation.

Developed solutions to consolidate and present key data for senior management, enabling informed decision-making. Led daily stand-ups to track implementation progress, ensure accuracy, and validate outcomes.

Led a team in evaluating and implementing a PKIaaS cloud solution “KeyFactor” to streamline enterprise-wide Public Key Infrastructure. Assessed disparate CAs and Root key infrastructure, designing automation for certificate lifecycle management across multiple AD Forests and unfederated domains. Addressed governance, regulatory challenges, and trust complexities resulting from M&A activities while mitigating risks from unmanaged certificates to prevent outages and renewal issues. Implemented KeyFactor across the organization.

Managed the disparate ICAs across the organization posed challenges that added complexity and overhead, the primary objective of the project was to consolidate the certificate management lifecycle and achieve process streamlining, cost management, service uptime and administrative control over certificate lifecycle.

Managed corporate-wide system vulnerabilities project and helped identify specific teams and made responsible teams carve out remediation roadmaps. This effort was a management challenge as it required a lot of collaboration from all teams.

Managed integration with other workflow management solutions like ServiceNow to utilize approval flows and centralization of notifications and reporting.

Managed a Citrix FAS-Federated Authentication Services project that posed unique challenges vis-a-vis the cross forests & cross domain trusts. -Integrated all Citrix FAS users over to Okta for the Centralized Identity Federation.

Managed projects like Cyber Crime Risk Insurance, where all cyber crime risks were evaluated with best of industry risk metrics to strategize appropriate coverages, but most importantly implement risk avoidance against hard to quantify reputational losses. Managed a Privacy Compliance project for states that require more stringent privacy laws over and above federal mandates. Used LeanIX & OneTrust for tracking all progress and also using it for final SOR for compliance data. Wells Fargo Bank, Minneapolis, Minnesota - Aug 2019 -August 2021 Cyber Security Project Manager/Consultant

Managed a global team of approximately 25 analysts, solution architects, implementation engineers and developers to help support various streams of multiple programs for financial, management and regulatory reporting, infrastructure sizing and recommendation including access management.

As mandated by regulators and audit, delivering solutions for Wells Fargo to manage their requirement for data management capabilities including data protection, encryption at-rest, Identity & Access Management’s initiative of implementing their SSO and Identity Lifecycle Management tool. Mainly managed the onboarding of over 1200 third party hosted solutions to Okta Cloud for SSO and Identity Lifecycle Management. This project met the control requirements fulfilling the regulatory mandate of SOX, SOC, SFTC in addition to closely adhering to NIST and ISO security standards.

Constantly engaging/interacting with business & technology groups to complete identity federation requirements of SAML 2.0 & OIDC with SCIM/JIT options. Also working with the application & technology owners about creating their entitlements scenarios and help define the RBAC groups in order to centralize access for their third party hosted solutions (TPHS) and have that structure cross over seamlessly into the federation models across the IDP (Identity Provider) and SPs (Service Providers).

Managed user groups lay out their test plans and signoff criterias. Created live reporting mechanisms to coordinate internal progress with up-to-date progress. Managed all moving pieces of the project delivery mechanism and successfully delivered the onboarding of the apps. First National Bank of Omaha (FNBO), Nebraska May 2018 -May 2019 Sr. Project Manager/Consultant

Delivered three key reporting and infrastructure implementation projects for FNBO.

Managed a team of Tandem engineers, network engineers, solution architects, application testers and Base24 OLTP SMEs to deliver the Infrastructure implementation to support the management reporting, consolidated financial disclosure and regulatory compliance reporting platform.

Reworked testing and certification tasks iteratively to manage the technical issues that were seen in the process of system implementation (DRNet and replication). NonStop System upgraded with Base24 OLTP for credit card and other commercial bank card processing. This upgrade also called for upgrading the credit card processor network’s connectivity (like Amex, Visa, MasterCard, VisaDPS & Shazam). This exercise required extensive management of testing and connectivity certification infrastructure.

Additionally, managed the implementation of the Atalla HSM especially designed for PIN processing. Implemented DRNet & XYPRO (implemented XYGATE suite of products for user authentication, access management, authentication, and security analytics).

Project managed the infrastructure and solution acquisition, resource planning and implementation and delivery of the solution.

Managed a team of implementers, solution architects, DBAs, infrastructure resources and information security personnel to implement Ping Identity (CIAM) to handle all external clients. Configured the CIAM to implement policies in order to comply with certain data protection and governance requirements that the bank had to comply with.

Implemented Axway MFT (Manager File Transfer) system. This implementation required a unique architecture that warranted creative architecture work. The architectural requirements called for specially designed mechanisms to allow transmission workflows to be moved into all systems and maintain data integrity. The implementation required managing and classifying over 900 partners and several thousand transmissions. Ran a steering committee during the course of the project for better communication and decision making.

Project planned the migration phase for the organization. The migration phase was scheduled for a one-year transition. Implemented a sound communications committee and defined all communication protocols for the upcoming migration. Designed a system to manage the migration related communication and efforts.

First Data Corporation Omaha, Nebraska July 2014 to Aug 2017 Infrastructure Manager for GIO (Global Infrastructure Org.)

In the three years working at FD, I managed/delivered numerous high stakes, complex and high impacting infrastructure & security projects. Majority of the projects that are delivered carry a seal of approval of the GIO’s PMO best practices.

Cyber Security Program Manager

Managed delivery of companywide comprehensive IAM (Identity & Access Management) solution SailPoint & Centrify. Managed the integration and data migration for all internal IAM solutions to Sailpoint & Centrify and provided a consolidated provisioning solution. Configured Sailpoint by translating existing identity and security policies into meaningful Sailpoint IdentityIQ configuration models. Developed operational protocols for smooth transition and on-going training & support. The program affected a workforce of over 25,000.

Deployed data-at-rest encryption solutions like Vormetric (Volume Level), PKWare and Voltage

(Key-data Level) for all applications with PCI & PII exposure in order to fulfill PCI-DSS requirements. Projects Managed/Delivered

AMEX EMV deployment, Feedzai implementation for Fraud Detect, Tanium deployment across the organization, Prognosis Monitoring install on TANDEM infrastructure, AWS Insightics -Cloud Infrastructure deployment, Harvest Migration & Integration (Code Repository Program with GitHUB), Office of Foreign Asset Control (OFAC) project deployment, Oracle Implementation for FSAM/ISPS applications, Predigy deployment (Scoring tool), SpendTrend & Datachoice DR setup, Resiliency Auth Monitoring, Global Gateway Implementation and Remitco Upgrade to 6.01 implementation across all 9 sites. Managed the above projects with diverse teams of Solution Engineers/Architects, OS & Middleware.

Implemented Sterling File Gateway (IBM) gained knowledge of network design/architecture including packet screening, switching, SFPs, routing protocols, Security/HSM, Storage, Backup engineers and other application SMEs. Help setup certain workflows in the CMDB and also manage the version upgrade. Managed delivery of GotoMeeting meeting/collaboration/conferencing solution for the entire organization.

Technologies: CMDB, HSM Key Management and Implementation, Data-at-Rest Encryption

(Vormetric, Voltage, PKWare) Pre-deployment performance tuning with TCOE group & Performance teams’ help, HA -High Availability Architecture, Cloud deployment of Insightics (Palantir) in several Availability Zones with hot-hot HA configuration, Noble and Verint Speech Analytics deployments for fulfilling government regulation for Telecheck, System Redundancies and Data Replications (Oracle Golden Gate etc.). Implemented PowerBI and integrated it with multiple data sources and even connected it to some external sources of information to generate robust reporting. Tools used for project delivery: HLEs, SDC, CMDB, AppMap –ECHO, ITSRC/Remedy System, Microsoft Projects (MPP), Open Workbench, Visio, Excel, ACA (Application Certification & Authorization) & JIRA.

Process & Workflow: Worked extensively with Clarity PPM for all workflow and program management activities. Configures all reporting to be generated thru Clarity. Contributed to defining Project Broncos (new workflow with iCTOs under business management towers). Used CMDB for change asset management, discovery and change approvals. Followed Change Control Board CCB protocols for project re-baselines, created project charters & Scope documentation. Engaged in Stakeholder influencing to smooth-out mergers & acquisition tasks (Technology & Process Gap Analysis, Architecture Designs, Integration & ETL points definition, Security Architecture, DAB issues and training materials)

.

Professional Development: Attended several Leadercast Seminars, PMI's ProDev PMI meeting in Omaha and completed several courses with PMI Heartland Chapter to fulfill and exceed PDU requirement for PMP license. Completed Amazon Web Services Cloud Professional and Architect training.

Metropolitan Utilities District, Omaha, Nebraska Oct ‘13 to May ‘14 Mobility Strategy Consultant (Mobility Strategy Planning & Payment Process Streamlining)

As a consulting Project Manager for MUD for their mobility project, worked on an extensive project planning encompassing mobility rollout to their field services technicians, automating meter readers with networked devices, bill collection in the field to planning a disaster management plan for data transmission through the radio network on a broader scale. SAP Mobility Platform along with Syclo Agentry Servers were planned as the underlying platform and SAP Work Manager is suggested to schedule, route and communicate service ticket data to the technicians. Worked on an implementation plan for workforce improvement tools like Fiori from SAP. Also worked on documenting the organization’s payment systems to identify improvement areas and wrote RFPs to invite bids for streamlining those business processes. Audited the organization’s IT system for PCI-DSS 3.0 compliance risks.

EMC Consulting, Omaha, Nebraska Jan ‘12 to May ‘13 Project Manager/Consultant

As a consulting Project Manager for a startup organization “vBlaze”, worked on bringing a cutting-edge video delivery system to the market incorporating multiple standards of communication, compression & delivery modes. This solution was of proprietary nature and provided unparalleled performance and quality. My responsibilities at vBlaze included the following:

Fulfilled my role as a Project Manager through the entire product development life cycle

Learned and handled product related management issues

Designed and oversaw the development of the complete product control interface solution

Designed the WiPort Interface into the product for device management. EMC Consulting, Omaha, Nebraska Sep ‘09 to Sep ‘11 Management Consultant

Consulted on projects with financial institutions in streamlining their residential and commercial mortgage reporting business processes:

Designed & developed a system of Business feasibility and ROI Analysis tool for lending portfolio.

Designed and developed decomposition and analytical capability for monthly Accrual Forecast and Interest rate risk scenarios working with treasury.

Developed cost effective infrastructure / platform for tactical regulatory & management reporting and reconciliation.

Managed business processes for designing, implementing, and testing internal control over financial reporting in compliance with SOX (Sarbanes Oxley) mandate applying PCAOB Guidelines, COSO and COBIT frameworks

Managed and successfully delivered the project for End User Computing application assessment, risk mitigation and process improvement mandated by internal audit and control division. Conducted vulnerability assessment and risk mitigation of financial applications and reporting infrastructure.

Designed & Maintained tactical solution for governance requirement related to Basel-II capital adequacy reporting.

Provided solution for managing liquidity risk (Cash Inflows/Outflows) for contractual obligations using multi-dimensional OLAP solution.

QA Mortgage Solutions, Omaha, Nebraska Mar ‘03 to Sep ‘09 IT Strategist, Solution Architect, Dev & Ops –Mortgage BPA

As a Technology Architect strategized the solution development to align with the organizational requirements keeping in view the upcoming technological trends. Set the course for the IT organization to effectively deliver iterative releases, capturing new requests through a thorough intake process and robust operational support. All stakeholders including lenders, loan servicers, supporting services integrators & borrowers processes were consolidated on a streamlined platform to improve consumer satisfaction.

Help setup a PMO & designed policies that geared towards developing cutting-edge mortgage business process automation portals using Agile/Scrum methodology with an end goal of aligning expectation with all stakeholders. Created technology delivery control systems.

Evaluated & implemented several Mergers & Acquisitions efforts with a seamless post M&A integration. (implemented DAB controls, regulatory requirements support analysis, data integrity & cyber security needs). Conducted gap analysis in existing business processes of both organizations and integrated them to provide the best of both worlds).

As an IT Leader guided the deployment and operations of the portal maintaining tight version control/builds. Additionally, built strict governance and control features for customer support, trackbacks & auditing requirements.

Delivered forecasts and actual budgets (CapEx & OpEx) and managed it within the allowable projected tolerances. Suggested ROI models and maintained IT strategy within the allowed models.

Oversaw all aspects of the Application Development. Three to five project teams were managed by my PMO -Three Technical PMs and Twenty Four on-site SMEs and developers were hired to develop the portal. 60+ nationwide network of lenders signed-up to participate in the portal.

Led a team to iteratively deploy around 120 versions of the Mortgage BPA Portal over a period of 5 years and provide total operational support.

Partnered with lenders & maintained their secured online loan origination portfolios and added value by standardizing the delivery based on HUD & FNMA resources.

Biztalk Framework was extensively used to orchestrate & schedule publishers and subscribers’ messages/documents.

IP-based phone solution was integrated to allow the loan originator to work from anywhere, without compromising on workflow (Added value by eliminating the need for dedicated offices for all loan originators and loan processors)

The fully deployed live version of the portal worked with hundreds of full & part-time loan originators

& processors logging in from around the country under the same setup.

The portal was designed and developed using Microsoft Dot Net Framework SDK with VB.NET & C# for application layer programming of portable components. DTN Energy, Omaha, Nebraska Jan ‘01 to Jan ‘03

Project Manager –System Integration

As an Integration Consultant, I thoroughly evaluated Inter-Enterprise and B2B Integration packages for integrating medium and large organizations as partners into an online energy trading exchange

This downstream energy market is extremely diverse and required a solution that would allow responsive access into all systems and Back-Office applications without compromising on security and application integrity. The sensitivity and timeliness of this information was also paramount. The solutions studied and compared in-depth included TIBCO, Webmethods, Vitria, Vignette, Mercator, Extricity and BizTalk

In case of TIBCO and BizTalk complete test environments were created to test the load, response times, security, ease of development, fault ratios and configuration

Thoroughly fulfilled the requirements definition for the integration scenarios and translated them into technical specs based off of BizTalk. BizTalk was used to integrate exchange clients using XML, ANSI X12

EDI, CSV, Flat and BizTalk FrameWork 2.0 formats

Primarily used MSMQ and File directories for internal applications, VPNs for hooking Intranets and the Internet with SSL encryption for external partners

Designed a customized interface in BizTalk Tracking Database to allow customer support software run queries against it

Designed a "Consolidated Login" Server (like MS Passport) to integrate applications level security into a single portal to inter-operate all applications with a single login

In addition to Integration solutions a comprehensive study was done to understand the impact of new and emerging standards such XDR, XSD, Sonic MQ implementation of JMS, RosettaNet, ebXML, SOAP, WSDL, UDDI and S2ML

Worked on Internet Mining tool for retrieving data from secured web portals, transformed them into a required format and pushed them out to a satellite uplink for delivery into proprietary DTN Terminals at remote areas of the country where Internet is not available. The application was written in Perl, SQL Server with ASP front-end. Also completed the requirements definition for the next generation of product which distributed computing to available and under-utilized PC’s within the domain.

Worked with an industry group of American Petroleum Institute API to develop XML based schema

(PIDX) for the downstream petroleum market. Worked on the Transport, Routing and Packaging

(TRP) of the Payload

Cap Gemini (Kanbay Inc.), Rosemont, Illinois Mar ‘98 to Dec ‘00 Sr. Consultant/Project Manager & Technical Lead

Architected and implemented several projects for Compaq, CBOT and the Professional Services Industry. Lead a team of 25 developers to successfully deliver the projects

As a Project Manager/Tech. Lead led a team of seven on-site and 18 off-shore Interface Designers/DBA/Tech. Writers and Application Developers. A Kanbay Project Development Methodology was utilized throughout the entire SDLC

Analyzed, Scoped, defined, executed and delivered a Web-based multi-tier Professional Services Automation

(PSA) product including complete integration with Oracle Financials, Oracle Projects and Oracle HR.

The PSA App. development included various modules of the PSA solution such as Time Reporting, Expense Reporting, Resource Allocation, Skills Repository, Media Manager, Upcoming Job Postings/Reservations and Bonus Net. (Established cross-system heterogeneous DB replications and design

& developed middleware for prior versions of SQL Server)

Developed a Comprehensive Organization-Designer and integrated it fully with Oracle Projects with a two way replication middleware for dialogue, did a study to integrate it to SAP Projects

Developed a customizable web-portal for the users of the application in order to streamline day-to-day tasks and auto-fill rules based on certain events, reminders based on history and profiles based on habits etc.

Designed the two-way replication & implementation of the Transaction Controls of the Oracle Projects to the web application and also allowed the application to implement its own multi-level transaction controls on top of the integration to allow the non-integrated solution to work. Also, designed & developed a complex transaction controls manager for the approvals of entries based on dynamically changing parameters such as approver hierarchy and the number of approvers

Ported the repeatedly occurring functionality on portable WindowsCE based HP Jornada handheld devices using PocketIE browser

Worked on developing a WAP interface to common tasks such as entering time and expenses into a secondary server outside the corporate firewall

Successfully integrated the solution with ADP for expense reimbursements

Designed and helped develop industry standard comprehensive User Documentation including interactive demo style walk-through of major functionality of the application

Designed the architecture with enough scalability to support four times the required load with no response delays

Designed the architecture to support system and application redundancy at all levels of the application, from SQL Server to Business Object layer and from front-end web-server to incoming Internet paths

Designed and developed a smart email notification system (using Microsoft Exchange Server) for different corporate applications, in order to combine emails and generate minimum but effective email notices

Designed and developed a travel bidding and approval module with external access to preferred travel agents. Tied the system to the expense reporting module for automatic entry and later submission of the approved travel itineraries. Also, initiated request with Diner's Club and American Express for possibilities of tying charges made by an employee to their expense account and allow the employee to dynamically pick and choose directly from their Credit Card account

Integrated the application to the company bonus program and tied utilization and commitments to the CSFs (Critical Success Factors)

Specified tools and oversaw the development of an online real-time trader's application with Chicago Board of Trade, using Microsoft SDK and C++

Realized manual company processes and used tools within Microsoft Outlook in streamlining and quickly providing solutions to common mechanical tasks

Participated in the design of an integration project (TANDEM -later Compaq) for bringing together various products for the small to medium sized Telco service providers -from ATM switches to the customer support and from billing system to web-enabled subscriber portals. DigitalFX Inc. Schaumburg, Illinois Jun ‘95 to Dec ‘97 Technical Project Lead

Architected and implemented two strategic projects subcontracted through Digital FX Inc. Led a team of two on-site and 12 offshore resources during the entire assignment Project-DSS

Analyzed, designed, developed and launched a DSS (Decision Support System) for an overseas National Bank.

Designed the infrastructure to securely obtain data from remote branch locations into a central database for feeding into DSS Database

The user interface for the DSS were done in visual tools for the upper management to get a quick understanding of the trends and visually compare and contrast data across regions and projected figures Project-CBT

Designed and developed multiple high-quality interactive multimedia pilots training programs (CBTs) for airline industry

Utilized numerous graphics tools such as Adobe Illustrator and Freehand for illustrations and HSC's Interactive for presentation and animation sequencing. VistaPro for terrain generation and image mapping. Extensively used 3D Studio for the demonstration of complex ideas and landing situations. Worked with DAT quality sound recording equipment to record and overlay the commentaries

Worked with developing 3D models to approach or avoiding landing situations to tricky local and international airports. Extensively used 3D Studio to develop the models using DEM as the raw data for terrain generation

Center for Research in Security Prices, GSB Univ. of Chicago Mar ‘93 to May ‘95 Database Developer / Application Programmer

Applied my application development experience to developing utility database apps for researchers and streamlining processes of data entry, access, filtering and maintenance

Worked mainly with Ingres RDBMS on DEC VAX based UNIX Operating System

Wrote programs in C, FORTRAN and SQL to monitor, compare and filter securities data of the three major exchanges (AMEX, NYSE & NASDAQ) with other sources such as S&P, IDSI and Dow Jones

Designed and developed a system to further tally our refined data with COMPUSTAT

Helped develop a system to archive the Futures/Options data

Setup PC access for database by porting programs and writing access routines using FORTRAN and C Designed and developed programs to ease research process and clean bad data

Extensively used DCL (VAX VMS native) to automate various frequently occurring operation such as data entry user interfaces, production tape scheduling operations and other production level processes

SuperMicro Systems, Hollywood, Florida Jan ‘91 to Jan ‘92

System and Application Programmer

Worked with a startup organization to develop a graphics based form application in order to reduce the use of pre-printed forms

Programmed on a form package application “ProForm” for DOS & Windows

Designed and developed multiple graphics tools for app’s GUI interface

Wrote multiple printer drivers for popular HP and IBM laser models

Worked with incorporating multiple AGFA scalable fonts into the application

Developed GUI in Turbo Pascal, C++, Genus Graphics Tools

Worked extensively on componentizing and optimizing the code

Wrote programs for printer drivers to manage downloadable forms EDUCATION

Northeastern Illinois University, Chicago, Illinois 1992-1993 Masters in Computer Sciences

(Minor in Computer Graphics) Master's Thesis - CD-ROM-NX Architecture Design - A multi-headed CD-ROM/Disk architecture complete with native OS for better retrieval capabilities targeting full-screen, full-motion video with 44.1 kHz CD quality sound.

University of South Alabama, Mobile, Alabama 1989-1991 Bachelors in Computer Sciences

(Minor is mathematics)

CERTIFICATIONS

Project Management Professional Certification (Project Management Institute -Year 2011) SOCIAL WORK

Project Interfaith USA, Omaha, Nebraska Jul ‘09 to June ‘12 Member -Board of Directors

Project Interfaith USA is a high profile not-for-profit organization that seeks to provide exposure, tolerance and understanding between all faiths, beliefs and cultures. Project Interfaith strives to create a community and world where people of all faiths, beliefs and cultures are valued, included and protected. As such, we seek to serve as a leader and resource on interfaith relations

Contact this candidate