Daisy Gallegos
Details
Deloitte
Senior Manager, Global Cybersecurity
2018 : 2021
Deloitte
Manager, Cyber Risk Services
Technical Lead/Project Management
• Led a technical Splunk team to build a multi-tiered clustered Splunk environment, ingest logs from over 20 data sources, complete data normalization and tune security use cases within Enterprise Security (ES) for a finance client
• Provided leadership to a multi-country team of Project Managers, Developers, Infrastructure Architects and Engineers to deliver production support, bug fixes, platform enhancements and deploy new releases to a Deloitte proprietary application for managed threat services clients, while meeting technical and business requirements
• Co-led the delivery of proprietary application to multiple Deloitte country offices and clients and managed project management responsibilities such as budgets, reconciling hours charged, renewing external vendor Statement of Work (SOW) and Quality Risk Management (QRM)
• Documented application playbooks for production support takeover and longevity
• Built strong relationships with client leadership, cross-functional teams and external vendors
• Co-owned MS Project Plan and delivery dates, coordinated updates with team leads, sought escalation when appropriate, presented deviations and back to green actions and managed risks/issues log. Stakeholders included engineers, SOC analyst and business leaders
Splunk 6.4
• Developed Splunk executive dashboard to provide Store Health visibility of in-store technologies for a major retail client during their retail peak season
• Acted as Splunk SME on integration project consisting of onboarding over 10 different device types, including Windows logs, Unix, Stratus and Bluecoat
• Implemented, configured and customized Splunk technology add-ons (TA’s) on heavy forwarders and search heads to meet client requirements
• Facilitated rerouting of network traffic from ArcSight to Splunk, including mediating necessary network troubleshooting
• Attained Splunk Certified Architect, Certified Admin and Power User certifications
2015 : 2018
Deloitte
Senior Consultant, Cyber Risk Services
Websense Triton - Data Loss Prevention Tool
• Monitored real-time logs flagging potential data exfiltration incidents and assessed accuracy accordingly
SAP Security and GRC (Governance Risk and Compliance) 10.1
• Developed and presented Knowledge Transfer (KT) content to client team in a series of over 40 workshops covering SAP Security and GRC Access Control (AC) topics with the goal to transition ownership
• Performed Fit/Gap analysis for RSA Archer and SAP Process Control (PC) against client’s requirements and provided the leading recommendation
• Managed the Test phase of the SAP AC implementation project lifecycle and performed data conversion analysis for HR triggers functionality
• Created a Risk and Controls Matrix (RCM) leveraging RACK, Deloitte’s proprietary tool, to capture identified financial and operational risks and corresponding mitigating controls for ECC 6.0. Tested specific Order to Cash (OTC) SAP controls to assess proper system configuration and operational effectiveness.
2012 : 2015
Deloitte & Touche LLP
Consultant, Cyber Risk Services
• Operated in a team of 13 people where we exchanged ideas and found the best solution to completing project tasks by given deadlines
• Independently coded assigned tasks and sought appropriate help when needed
• Worked with User Interface Designers to provide a visual design to the application and implemented functionality
• Worked with Business Systems Analyst to ensure the application requirements were properly adhered to in the application
• Collaborated with System Testers to thoroughly search updated application for bugs and resolved them
2011 : 2011
Vanguard
iOS App Developer - Intern
About
Daisy Gallegos is a senior manager in Deloitte's Global Cybersecurity practice, which helps the firm be Secure, Vigilant, and Resilient in the face of an ever increasing array of cyber threats and vulnerabilities. Daisy has over 10 years of experience in the field of information technology with specialized knowledge in cyber risk supporting Vigilant solutions. She has extensive SIEM, SOC implementation, IT risk management, incident response, and strategy and operations experience. She has project management experience in technology transformations following the software development life cycle, implementing process improvements and structuring security operations while focusing on building relationships with project stakeholders. Daisy is a subject matter expert in Splunk Enterprise and has an understanding of network architecture, SAP ECC and GRC 10.1 security and controls and Data Loss Prevention (DLP) incident handling in the consumer & industrial products, telecommunications finance, and energy industry.