Geethpriya Gunadevan

Versatile professional with 14+ years of experience in Identity & Access Management (IAM), Privileged Access Management (PAM), and Technology Risk & Controls across global banks. Expert in CyberArk (Vault, CPM, PSM, PVWA) and Delinea Secret Server, delivering audit-ready solutions aligned with SOX/PWC frameworks. Proven leadership in GRC.

Skilled in business analysis, requirement gathering, Agile methodologies, and stakeholder management, with a strong track record of delivering audit-ready solutions aligned with SOX, PWC, and governance frameworks. Adept at leading teams, driving process improvements, and building a proactive risk and control culture. Recognized with multiple awards for performance excellence and service commitment, with a passion for bridging technology, compliance, and business needs to deliver secure, scalable IAM solutions.

Strengthened identity governance by conducting entitlement reviews and recertification campaigns using Delinea Identity capabilities. Collaborated with risk, compliance, and IT operations teams to streamline PAM processes and align cybersecurity architecture standards. Additionally, training and knowledge transfer sessions are delivered to stakeholders and technical teams.

Efficient in mapping requirements of clients as well as multiple stakeholders, documenting Business & Functional Documents like User Stories, Define Acceptance Criteria, Use Cases, Data Extraction, Reporting. Skilled in creating user stories, workflows, data flow and mapping diagrams, release notes, product deep dives, product webinars, process flow creation using Tableau, PowerBi, MS Exchange and other integral tools. Strong understanding of various GRC concepts, Waterfall and Agile.

Conducted

Scrum ceremonies – Backlog refinement, Sprint Planning & Retro. Application of AI-driven analytics (Copilot, Rovo) for advanced data storytelling and metrics development.

Maintained Product

Backlog, Sprint Backlog, Team charter & Working Agreement. Adept at facilitating walkthrough and training sessions and converting into User manual.

Business Analyst at Commonwealth Bank Of Australia (CBA) (2023-07 – Present)

• Implemented and supported CyberArk and Delinea PAM solutions for privileged credential vaulting, password rotation, and entitlement assurance
• Produced risk governance reporting and compliance documentation for SOX/PWC audits
• Experienced in Technology Operations and Development domains
• Ensure new risks or changes to risks arising out of the domains are clearly articulated and documented, understood by domain leads / stakeholders and approved / risk accepted at the appropriate level
• Ability to examine / identify risks and opportunities and recommend appropriate actions
• Strong understanding of governance and Change risk activities
• Responsible for ensuring the correct risk and controls overlay the end-to-end process mapping and documentation management to support the control process
• Identify, lead and manage the continuous improvement of the business control environment by using data to generate insights and reports & advise on strategic technology change initiatives
• Contribute to a proactive risk and control culture and collaborate with the business Conduct root cause analysis of issues and incidents, ensure action plans are appropriate, and target dates are met
• Influencing and consulting skills, the ability to build relationships with executive stakeholders
• Ability to think critically and analytically and use data driven insights to solve problems, Strong written and verbal communication skills
• Develop and producing risk governance reporting to provide insights across the portfolio
• Design and maintain dashboards/KPIs to measure access lifecycle performance
• Support the delivery of Change risk assessments for Technology projects as and when needed
• Owning Entitlement Assurance Process Control which ensures the application's entitlements are adhered to the governance tool/ Policy

Cyber Security Senior Analyst at Société Générale (2022-06 – 2023-07)

• Strong adherence to SOPs and maintaining them with proper versioning. Creating new process Documentation/SOP's
• Application Security risk analysis (High regulated/Critical/Medium/Simple), Controls and Reporting skills related to IAM, designing and execution of various risk control processes
• Good knowledge of infrastructure technologies is needed for efficient coordination and arbitration
• Perform the RUN of security controls in a dedicated tool and Excel Files end to end. And communicate with application teams to investigate and remediate noncompliance to controls
• Strong, a self-starter who could operate independently and demonstrates complete ownership over assigned objectives in an organization
• Excellent project management skills, with experience leading teams and collaborating with stakeholders and excellent communication and interpersonal skills
• Produced risk governance reporting and compliance documentation for SOX/PWC audits
• Managing Team of 12, assigning tasks over Teams/JIRA Board and tracking JIRA, assurance of finishing tasks
• Working on Agile methodology by dividing tasks into subtasks, assurance on completing over sprint, moving to next sprint if required, Acting as Scrum Master to full fill needs
• Deployment of Application Infrastructure in our IT Access control solutions: mainly on CyberArk (and sub-tool e.g. IAM-IT Strengthened and related processes)
• Interact and Assist Application Support teams, Application Managers by defining technical and business requirements with them (Server accounts, DB accounts, e.g.)
• Performing Privileged Access Management - Deployment, IAM IT activities and Recertification campaigns and Secure, control, manage and monitor privileged access to critical assets
• Assisting Support teams, Application Managers to interact with infrastructure support team
• Strong adherence to conduct improvement workshop

IT Analyst at Tata Consultancy Services (2017-03 – 2022-06)

Client: Deutsche Bank (March'17 – Dec'2020), Credit Suisse (Jan'2021 – June'2022)

• Facilitating discussions to elicit and understanding business needs, requirements & priorities; driving prioritization & project management with senior stakeholders; providing insights for design & business process
• Providing architectural blueprints to bridge the gap between business and IT team; recommending tools, technologies, redesigned & improved processes
• Administering project planning, effort, design, scope, estimation, change requests, resource coordination, signoffs and delivery, as per specified timeframes; implementing project plans within preset budgets and deadlines
• Developing prototypes for projects like designing screens, writing using BA tools and writing user stories for multiple Product Owners and Internal Stakeholders
• Preparing Software Requirement Specifications, Business Requirements Document, Use Case Specifications, Functional Specifications, Systems Design Specification, Requirement Traceability Matrix and Testing Documents along with daily issue resolution sheet in all modules & generated daily progress report
• Extending support towards users through multiple sources of communication such as email, skype calls and ticketing tools
• Understanding the Access Management Controls and scrutinizing the access control lists
• Controlling access to the privileged accounts which are being managed by Service, generating notification of any issues
• Technical guidance and coaching to team members by conducting multiple training sessions
• Scheduling Service and Privilege accounts and processing password updates for the same in production servers
• Working with a UK Based Global Bank as a Team Member, and providing operational support to CyberArk Infrastructure; deployed the enhancement in the existing Solution as part of the CyberArk Uplift and upgrade project
• Working for the regions of APAC, EMEA and America, having more than 1.4 million AD Groups, and managing the membership on the Safe

IT Risk Analyst at HTC Global Services (2016-02 – 2017-02)

Client: JP Morgan Chase, Bangalore

• Validated various requests called Dual Control & Document each and every step under Privilege Access Control Team
• Managed the Share Point with the appropriate Documents on each platform like WINDOWS, UNIX, MAINFRAME, SOPHIA
• Monitored the GTI - (Global Technology Infrastructure) applications, and managed the escalations on priority
• Interacted with customers through Skype for Business, and AVAYA
• Conducted reviews on other colleagues' requests to make sure the Quality Assurance is done

CyberArk Analyst at IBM (2015-09 – 2016-01)

Client: Schibsted

• Managed the Windows Build for new set-up project
• Appointed as a SPOC for Windows build for different region; conducted daily calls with the client to get to know the requirements

Senior Analyst at HCL Technologies (2014-09 – 2015-09)

Client: Deutsche Bank

• Appointed as a member of the global Re-certifications & security team, and manages banking operations, including ACL Re-certifications through (GRWE) server