Profiles search
Suraj Kempanapura
Information Security Audit Manager at athenahealth
Waltham, MA, United States
Details
Education:
Master of Business Administration (M.B.A.)
Information Systems and Technology
Bentley University
2013 : 2015
Bachelor of Engineering (BEng)
Computer Science
Visvesvaraya Technological University
2005 : 2009
Information Systems and Technology
Bentley University
2013 : 2015
Bachelor of Engineering (BEng)
Computer Science
Visvesvaraya Technological University
2005 : 2009
Experience:
2020 : Present
athenahealth
Information Security Audit Manager
Identity and Access Controls transformation
• Performed current state analysis of security administration analysis and submitted recommendations to strategically centralize security administration
• Documented business requirements and developed user stories to capture access approval workflows, password management, and security administration workflow
• Interfaced with business and technical stakeholders to understand application role/entitlement profiles, performed application analysis to clean up roles, developed Onboarding templates, SOD rules, and successfully Onboarded internally hosted applications of a strategic business unit to SailPoint
• Interfaced with business stakeholders to understand application role/entitlement mapping, performed application analysis to clean up roles, developed Onboarding templates and file feeds, and successfully Onboarded third-party/vendor applications to SailPoint
• Developed a VB based toolkit to be used by the Identity and Access Management team to analyze and report on high-risk cash and security applications
2015 :
KPMG US
Associate, KPMG Cyber
ServiceNow Security Incident Response (SIR) implementation
• Interfaced with business stakeholders from the SOC team in understanding the current state of processes executed by SOC - L1, L2, L3 and L4 teams.
• Captured business requirements through user stories, developed technical details and assisted in the development of solution design for the user stories
• Supported in the building and testing of user stories across three Sprints, demoed developed user stories with SOC business stakeholders as well as L1, L2, L3 and L4 analysts
• As part of Sprint 3, supported team in the identification of challenges related to OOTB QRadar integration
• Supported team in development & testing of QRadar email rules, SN email parser and business rule to map SIEM data into SIR records
GDPR implementation
• Interfaced with business stakeholders from both the US and the EU entities of a global gaming client to identify businesses in-scope of GDPR
• Identified processing activities involved in processing personal data and documented Records of Processing Activities (RPAs) for both the US and EU entities
• Performed GDPR gap assessment on applications that were identified as part of RPAs
• Documented and provided recommendations for closing security related gaps identified through assessments
• Developed a road-map to achieve compliance in terms of Data Processing Agreements (DPAs) to be signed with third parties, Intra-group agreements to be signed between business entities that transfer personal data, Fair processing notices to be shared with employees, Data Subject Right processes to be put in place for customers & employees, and Data Privacy Impact Assessments (DPIA) to be completed on third parties
• Defined and developed a GDPR governance model to be used by the client’s Global Privacy Office.
• Supported standing up of the privacy office and its privacy program by identifying activities (RASCI) to be performed by the business functions and overseen by the privacy office
2017 : 2020
KPMG US
Senior Associate
2015 : 2015
Bentley University
Senior Teaching Assistant
• Coordinating with faculty to upload teaching materials, managing software interface both from an admin and a user perspective, securing functioning technologies in the classroom to provide an impediment free classroom experience for online students.
• Pro-actively responding and assisting other TAs with class room set up, student support, walk in traffic, and working on other projects assigned by other ATC staff members.
2013 : 2015
Bentley University
Online Teaching Assistant
athenahealth
Information Security Audit Manager
Identity and Access Controls transformation
• Performed current state analysis of security administration analysis and submitted recommendations to strategically centralize security administration
• Documented business requirements and developed user stories to capture access approval workflows, password management, and security administration workflow
• Interfaced with business and technical stakeholders to understand application role/entitlement profiles, performed application analysis to clean up roles, developed Onboarding templates, SOD rules, and successfully Onboarded internally hosted applications of a strategic business unit to SailPoint
• Interfaced with business stakeholders to understand application role/entitlement mapping, performed application analysis to clean up roles, developed Onboarding templates and file feeds, and successfully Onboarded third-party/vendor applications to SailPoint
• Developed a VB based toolkit to be used by the Identity and Access Management team to analyze and report on high-risk cash and security applications
2015 :
KPMG US
Associate, KPMG Cyber
ServiceNow Security Incident Response (SIR) implementation
• Interfaced with business stakeholders from the SOC team in understanding the current state of processes executed by SOC - L1, L2, L3 and L4 teams.
• Captured business requirements through user stories, developed technical details and assisted in the development of solution design for the user stories
• Supported in the building and testing of user stories across three Sprints, demoed developed user stories with SOC business stakeholders as well as L1, L2, L3 and L4 analysts
• As part of Sprint 3, supported team in the identification of challenges related to OOTB QRadar integration
• Supported team in development & testing of QRadar email rules, SN email parser and business rule to map SIEM data into SIR records
GDPR implementation
• Interfaced with business stakeholders from both the US and the EU entities of a global gaming client to identify businesses in-scope of GDPR
• Identified processing activities involved in processing personal data and documented Records of Processing Activities (RPAs) for both the US and EU entities
• Performed GDPR gap assessment on applications that were identified as part of RPAs
• Documented and provided recommendations for closing security related gaps identified through assessments
• Developed a road-map to achieve compliance in terms of Data Processing Agreements (DPAs) to be signed with third parties, Intra-group agreements to be signed between business entities that transfer personal data, Fair processing notices to be shared with employees, Data Subject Right processes to be put in place for customers & employees, and Data Privacy Impact Assessments (DPIA) to be completed on third parties
• Defined and developed a GDPR governance model to be used by the client’s Global Privacy Office.
• Supported standing up of the privacy office and its privacy program by identifying activities (RASCI) to be performed by the business functions and overseen by the privacy office
2017 : 2020
KPMG US
Senior Associate
2015 : 2015
Bentley University
Senior Teaching Assistant
• Coordinating with faculty to upload teaching materials, managing software interface both from an admin and a user perspective, securing functioning technologies in the classroom to provide an impediment free classroom experience for online students.
• Pro-actively responding and assisting other TAs with class room set up, student support, walk in traffic, and working on other projects assigned by other ATC staff members.
2013 : 2015
Bentley University
Online Teaching Assistant
Company:
athenahealth
Years of Experience:
14
Spoken Language:
English, Kannada
Skills
C, C++, Core Java, Java, Java Enterprise Edition, JSP, Manual Testing, Oracle, PL/SQL, python, Shell Scripting, Solution Architecture, SQL, Test Automation, Testing, Unix, Unix Shell Scripting
Profile Photo
