Claras Brown

Technology, cybersecurity, and IAM compliance leader with 20+ years across IT operations, people leadership, technical support, and regulated environments, including 10+ years in identity and access management. Currently supports Humana through an NTT contract, providing access-compliance research, user access review support, data analysis, and audit-ready reporting across SailPoint, Microsoft Entra ID, and Power BI. Brings hands-on experience across the application life cycle: evaluation support, onboarding, sustainment, migration, vendor separation, sunset, and decommissioning within healthcare and financial services.

Combines cross-functional leadership, internal controls, HIPAA/SOX/SOC/HITRUST compliance, IAM and PAM governance, risk remediation, and executive-ready documentation.

Technology and Cybersecurity Compliance Professional 2 - NTT (Contract Assignment Supporting Humana) - Remote / EST

(2026-02 - 2028-08)

IAM compliance, access-related research, data analysis, audit support, and cross-functional delivery in a regulated healthcare environment.

• Partner with IAM, IT, Operations, audit, compliance, and business stakeholders to execute access-related initiatives and align project deliverables with regulatory requirements, industry standards, and established internal controls.
• Query, analyze, and organize identity and access data across SailPoint, Microsoft Entra ID, and Power BI to support user access reviews, compliance research, control validation, and project objectives.
• Consolidate data from multiple sources, validate completeness and consistency, investigate discrepancies, and prepare accurate information for stakeholder review, reporting, and remediation decisions.
• Apply knowledge of internal IT controls, access risk, and audit processes to review deliverables supporting SOX, SOC 1, SOC 2, HITRUST, and internal compliance requirements.
• Detect and troubleshoot issues in data collection, queries, and workflow processes; coordinate with platform owners and cross-functional teams to resolve defects and maintain reliable outputs.
• Develop and maintain detailed records of queries, workflows, business rules, processes, and supporting evidence to enable audit readiness, operational continuity, and future enhancements.
• Exercise independent judgment in ambiguous situations, prioritize work with minimal supervision, and communicate research findings, risks, and action items clearly to stakeholders at multiple organizational levels.

Security Engineer Lead - IAM - Florida Cancer Specialists - Florida / Remote

(2023-05 - 2026-02)

Healthcare security and IAM leadership spanning application integrations, migrations, decommissioning, vendor access, compliance, and operational risk.

• Led the IAM and application-security workstream for healthcare technology initiatives from planning through implementation, including application onboarding, authentication design, access-rule definition, identity life-cycle controls, privileged-access governance, documentation, and remediation tracking.
• Partnered with application owners, infrastructure, networking, development, security, compliance, and vendor teams to map firewall, VPN, certificate, service-account, privileged-access, and authentication dependencies before migrations or decommissioning activities.
• Evaluated application authentication configurations, RBAC models, security groups, SAML/OIDC/OAuth integrations, and privileged assignments to preserve least privilege and HIPAA/SOX alignment through technology transitions.
• Supported vendor separation and application retirement by revoking Active Directory, Entra ID, Okta, VPN, MFA, federation, and application access; retiring SSO integrations; and validating removal of orphaned accounts and external dependencies.
• Managed Okta and Entra ID integrations, automated provisioning, MFA, Conditional Access, authentication policies, certificate renewals, and hybrid identity controls that sustained secure access for clinical and business users.
• Identified and remediated legacy service accounts, shared accounts, and privileged credentials; coordinated CyberArk vaulting, credential rotation, session oversight, and decommission readiness.
• Monitored and investigated 50+ daily security alerts in Splunk SIEM, coordinated incident response and root-cause follow-up, and used trend analysis to recommend risk, control, and remediation priorities.
• Conducted monthly firewall audits and supported vulnerability scanning, patch coordination, HITRUST readiness, internal controls, audit evidence, security testing documentation, and risk-remediation reporting.

Identity & Access Management Senior I - Hospital Corporation of America (HCA) - Enterprise Healthcare

(2017-07 - 2023-05)

Enterprise IAM, PAM, application onboarding, migration support, governance, and audit controls in a healthcare environment serving 60,000+ users.

• Governed enterprise access across Okta, Microsoft Entra ID, Active Directory, CyberArk, and critical healthcare applications supporting 60,000+ users, balancing secure enablement, SLA performance, least privilege, and audit-ready documentation.
• Supported application portfolio life-cycle execution through IAM onboarding, provisioning, sustainment, access reviews, migration, vendor offboarding, and decommissioning; assisted Active Directory consolidations, Entra ID synchronization, and Okta integrations while protecting uninterrupted access.
• Built and maintained dependency records covering authentication workflows, application ownership, service accounts, privileged access, and integration requirements for change management, audit, disaster recovery, and retirement planning.
• Partnered with Security Operations, Infrastructure, Networking, Application, Development, and Compliance teams to validate that controls remained effective throughout migrations and vendor separation, reducing operational and cybersecurity risk.
• Implemented and supported CyberArk vaulting, password rotation, privileged-account onboarding, session monitoring, break-glass access, dual approvals, and just-in-time access preparation for legacy-system decommissioning.
• Developed Splunk Cloud/SPL searches, dashboards, and automated reports for authentication anomalies, privileged-access exceptions, identity life-cycle issues, SOX/HIPAA reviews, executive metrics, and control monitoring; supported UARs, audit evidence, exception research, and remediation follow-up.

Technical Support Specialist II - JPMorgan Chase - Regulated Financial Services

(2016-02 - 2017-07)

• Delivered high-level technical and account-access support for digital banking systems; investigated integration issues, documented findings, coordinated escalations, and partnered with vendors and internal teams while protecting sensitive data and customer trust.

Technical Management Support Lead - Verizon Wireless - Houston, TX

(2010-01 - 2016-01)

• Led escalated technical support across mobile, network, internet, operating-system, and customer-facing technologies; coached agents on troubleshooting, SLA adherence, documentation, and service quality while supporting product rollouts and technology updates.

Assistant Branch Manager - Amscot Financial - Tampa, FL

(2006-09 - 2010-01)

• Led daily operations for a team of 10+ in a regulated financial environment, enforcing compliance, security, audit, reporting, documentation, risk-mitigation, and customer-service standards.

Human Resources Manager - Champion Security - Houston, TX

(2002-12 - 2006-01)

• Managed and trained 190 security officers across hospital and enterprise client accounts; created manuals, hazard plans, procedures, employee documentation, and client resources while supporting software and security-system installations.

Bachelor of Arts - Music Education / Recording Arts - International Academy of Design & Technology

Master of Divinity & Leadership - Deeper Bible College

Associate of Arts - Music Performance - Texas Southern University