- A Cryptography Expert with the extensive PM, development and QA in information security experience in the financial industry.
- Proven success in identifying potential areas of risk, assessing risks and implementing metrics and preventative measures for loss prevention while in regulatory compliance with Interac/MC/Visa/SDLC/STLC/PMLC policies/practices.
- Demonstrates continuous analytical field research to make sure that the best practice is deployed to protect organization\'s businesses and assets
Опыт работы
- LAN/WAN configuring and support including access control and 2-factor authentication WinXP based network, 5 machines
- WAN penetration testing and protection
- Designed and developed Mail agent IE embedded (VB and C/C++) encryption system
- Established key management policies and procedures, identifying key life cycle and overall security design for EMV card (smartcard) project. .
- Worked on the CPA standards for the cheque imaging project (also known as TECP project) as a member of a CPA’s SICE working group to move old financial cheque processing to collaborate the new electronic procedure.
- Supported Security awareness program, the Desktop Security Program, created Security Guidelines for proper use of PGP product for mail and data encryption. Oversaw and reviewed Personal Firewall rules, Remote Access policies and Quarantine Services.
- Key contributor in achieving and maintaining ISO17799/BS7799 compliance.
- Developed and corrected IS standards such as key management, cryptographic algorithms, identity management, RACF and Vanguard implementation corporate standard, hardware security modules corporate standard/usage policy and some others.
- Worked within different business areas in consulting on the Sarbanes-Oxley (SOX) act, ITIL, PIPEDA and other standards and regulators’ acts.
- Presented BMO at Interac, CPA and MCI in a range of working groups as well as presenting regulatory initiatives to BMO’s IS community and higher management.
- Participated in IS internal audit on key management, VISA and MasterCard compliance.
- Managed the design and development of strategic cryptographic key management products on large scale systems
-
Managed testbed’s maintenance, documentation and configuration on the VM guest machine. This included, but not limited to: IMS/CICS/APPC tune-up, ICSF/TKE installation and configuration, MQI installation and queues configuration, QA support and development of regression, system and user acceptance testing, development test plans and cases as well as integrated test programs (emulators, drivers and stubs/exits). This included full support of STLC technology and usage of test automation tools. Regression and System tests involved stress (destruction) testing methodologies over the IMS, CICS and API interfaces.
-
Developed products and provided information and training to the production centers and applications staff within various functional areas.
-
Provided consulting in the cryptographic/security field to various projects as well as providing the QA, risk analysis and assessment on the deployed methods and algorithms.
-
Мanaged the project of secure mail/data communication between mainframe and Entrust client on PC (Java under Unix SS, Websphere/ICSF on mainframe).
-
Мanaged design of a RACF security administration tool while switching Banks security from ACF2 to RACF. This allowed management of RACF rules from central point, in a user-friendly manner, saving the organization substantial costs (mostly CLIST/ISPF panels).
-
Managed a project to remotely synchronize passwords across domains in the Bank’s network (JCL batch, Assembler).
-
Managed a project to synchronize keys DB replicas across LPARs/network systems in the real time using MQ Interface (Assembler).
-
Implemented a major release of the RICKI (Royal Integrated Cryptographic Key management Interface) to employ 4753 hardware to perform cryptographic services. That was first (across the world) implementation of RSA technology to remotely exchange ATM’s PIN keys. (Assembler, C/C++)
-
Developed a C-Assembler inter-language facility to allow the development in both C and ASM using cross-memory management in reentrant environment. In addition, this included safety/tolerance timer features, reusability of the system LX (linkage index) and modularized several hundred lines of code.
- Много
Образование
Знание языков
Возникли вопросы?
Соискателям:
Работодателям:
Рекрутинговым агентствам:
Тренинговым компаниям:
Резюме в Украине и по городам:
Резюме по регионам:
Senior Security Consultant, QA Manager, IT Manager в Киеве · Senior Security Consultant, QA Manager, IT Manager в Харькове · Senior Security Consultant, QA Manager, IT Manager в Днепропетровске · Senior Security Consultant, QA Manager, IT Manager в Донецке · Senior Security Consultant, QA Manager, IT Manager в Львове · Senior Security Consultant, QA Manager, IT Manager в ОдессеРабота в Киеве и других городах Украины, база резюме специалистов.
На job.ukr.net любая работа в Украине. Все вакансии: работа Киев, Харьков, Донецк.