Rahul Mehrotra

IAM and Cyber Security professional with 12+ years of experience across Identity & Access Management, Privileged Access Management, RBAC/Business Roles, Toxic Access, Segregation of Duties, Access Reviews, Recertification, Transfers & Leavers, and access remediation. Experienced in leading IAM transformation initiatives, defining regional IAM solutions, translating business requirements into role-based access models, and collaborating with senior business, risk, cyber security and technology stakeholders across global and APAC environments.

IAM Program – Technical & Functional Expert at BNP Paribas (2023-07 – Present)

• Collaborate with Central IT Risk, Cyber Security and regional COO teams to define, design and deploy standardized IAM approaches across Business Roles, Toxic Combinations, Auto Reconciliation/Auto Provisioning and Data Storage Access programs.
• Define IAM solutions and supervise deployment across regional entities, ensuring alignment with global IAM frameworks and governance requirements.
• Partner with the IAM Program Director and Global PM to monitor program activities, dependencies, delivery status and regional implementation.
• Organize IAM and RBAC workshops with Business Heads and stakeholders across Lines of Business to define business roles and role-based access profiles.
• Collaborate with COOs, Business Heads and Regional Heads to design and implement Business Roles / RBAC profiles in SailPoint.
• Organize and host regional operational committee meetings and maintain weekly program dashboards and governance reporting.

Business Analyst at JPMC (2022-08 – 2023-06)

• Delivered key Identity & Access Transformation activities covering onboarding, offboarding, transfers, user entitlements and technology privileged access.
• Supported adoption of central validation controls for human interactive accounts, including privileged vaulting and privileged session requirements.
• Worked on tactical vaulting and passwordless solutions for application-to-application accounts and supported onboarding of production application instances.
• Performed remediation of non-compliant human and application privileged accounts and prepared detailed compliance and remediation reports.
• Engaged global APAC stakeholders, Data Centre project managers and application owners to drive privileged access remediation.

IAM – Business Analyst at Standard Chartered Bank (2020-04 – 2022-07)

• Performed business analysis across Infrastructure and Platform Access Management, including Mainframe, Middleware and Network Devices.
• Led and participated in functional workshops with Financial Business Owners, Risk Managers and Profile Owners to define access requirements.
• Identified toxic access and toxic combinations in SailPoint and supported remediation of access violations.
• Collaborated with global application owners, process owners and Operational Risk Managers to define and map business-level roles.
• Maintained Segregation of Duties controls and reviewed entitlements and privileged access against role-based activities.
• Validated role mappings and application entitlements with SMEs and prepared regular access violation reports.
• Performed GAP and root-cause analysis and delivered training to managers on remediation of SailPoint violations.

Senior Analyst – Cybersecurity at HSBC Software Development India Pvt. Ltd. (2016-11 – 2020-04)

• Managed IAM control activities covering periodic access reviews, access recertification, transfers and leavers for applications onboarded to the Global IAM platform.
• Monitored IAM dashboards and KCI targets, ensuring control activities and remediation were completed within SLA.
• Provided Level 2 support for periodic access reviews, including reassignments, bulk maintenance and manual recertification of accounts.
• Coordinated toxic-combination reviews and cascaded violation details to regional teams ahead of quarterly recertification cycles.
• Followed up on pending revocations and orphan accounts and supported risk mitigation through timely remediation.
• Maintained data for Sensitive Business Transactions, Rule Sets and False Positives.
• Prepared application feed files and securely transferred them to UAT and Production environments using WinSCP.

Assistant Manager at RC Infinity Foundation (2016-03 – 2016-08)

Project Engineer at Wipro Technologies (2014-04 – 2016-02)

Associate at Wipro BPO (2013-11 – 2014-03)

Bachelor of Technology (B.Tech) in Electrical & Electronics Engineering – Graphic Era University (2013-06)