Karan Ranbhor

📧[email protected] | 📞 91366 88112 |📍Thane

PROFILE

Seasoned IT Analyst with a robust history of enhancing corporate security posture through strategic audits, policy
development, and incident management. Instrumental in reducing vulnerability risks. Adept at driving security
initiatives that have significantly lowered operational costs. improved data retrieval speeds, and strengthened system
integrity, while fostering a culture of security awareness across organizations.

PROFESSIONAL KNOWLEDGE AND APPLICATION SKILLS

DLP: Websense, Symantec & McAfee

End Point Security: McAfee Suits (VSE, HIPS & HDLP), McAfee MOVE AV, Safe boot
IPS/IDS: McAfee IPS, HP Tipping Point, Cisco IDS, SecureWorks IDS/IPS
SIEM: RSA Envision, ArcSight, Splunk security manager, IBM Qradar Worked on Configuration management tool
Puppet for continuous delivery. Experience in working with Modules, Classes, and Manifests in Puppet.
MSS: Vulnerability Assessment, Content Filter, Antispam, IDS/IPS Management
Vulnerability Management Tools: Foundstone, QualysGuard, Nessus, Nmap, Nexpose, Wireshark
Security Tools: Splunk ES, McAfee Vulnerability management solutions, Burpsuite, OpenVAS, Nessus, Qualys,
Solarwinds, ForeScout

PROFESSIONAL EXPERIENCE

IT Analyst | Crosslinx - Toronto, Canada (Jan 2023 – Feb 2024)

Fulltime

 Performed periodic audits to ensure required policy, regulatory controls, and information security best practices
are being followed and documented.
 Applied knowledge of risk areas and key regulations to influence audit scope.
 Worked with process and control owners to communicate audit results, identify remediation options,
recommend appropriate and pragmatic solutions to control issues, and prioritize action plans.
 Worked with key business units to drive the adoption, design, implementation, operation, and remediation of
control activities and other supporting requirements like policies, standards, processes, system configurations
and reporting
 Followed on audit findings to ensure that all deficiencies are remediated timely.
 Coordinated audit-related tasks to ensure the readiness for audit testing with both internal personnel and
external auditors.
 Contributed to the development of audit process improvements.
 Pro-actively developed automated routines to help audit efficiency.
 Assisted and advanced the SOC 2 compliance accreditation.
 Assisted with the creation and maintenance of policies, control specifications, and compliance auditing.
 Responded to customers attestation requests.
 Assisted in responding to inquiries from business units regarding ongoing operational compliance.
 Proactively identified areas for improvement and provided valuable insights and guidance on process and
control enhancements.
 Shared information with managers to ensure timely delivery and avoid surprises.
 Assisted in various assessments and audits, including internal analysis, stakeholder engagement, evidence
collection, and reporting, all through GRC tools, Jira, and other applications.
 Generated and presented security reports, metrics, and findings to management and other stakeholders.
Data Management Consultant | WGD Consulting - Toronto, Canada (Sept 2022 – Dec 2022)
Internship

 Assisted and supported senior-level security and compliance team members to ensure industry standards of
security are met in compliance with frameworks such as ISO 27001, ISO 27701, and SOC 2 Type II.
 Provided security assurance to stakeholders and customers by completing security questionnaires and security
RFx in alignment with industry-standard frameworks.
 Safely shared information and documentation with internal partners and external prospects and customers.
 Managed the company repository for Q&As related to security, privacy, legal, product, and engineering, and
any associated documentation.
 Ensured repository information is properly curated, usable, and trustworthy.
 Worked with internal SMEs to review and update content regularly.
 Assisted in various assessments and audits, including internal analysis, stakeholder engagement, evidence
collection, and reporting, all through GRC tools, Jira, and other applications.
 Generated and presented security reports, metrics, and findings to management and other stakeholders.
 Identified, analyzed, and responded to potential security events from alert sources.
 Participated in security incident management, tabletop exercises, business continuity, and disaster recovery
efforts.
 Assisted in the development and maintenance of security policies, knowledgebase, SOPs, playbooks, and best
practices.
 Used Profile Generator for creating and modifying role changes for production support.
 Consulted client for identification and conflict remediation of custom transaction codes and programs with SOD
impact.
 Created users and maintained user master.
 Worked with audit to establish new security policies and procedures.
 Designed new role naming convention.
 Executed daily reports in production to restrict create/change access for people who have configuration access
in development.
 Worked directly with users, functional analysts, and developers to identify security requirements and translate
requirements into Security Designs.
 Worked on Portal groups and roles and modified existing roles to integrate with the new Portal system.

BI Analyst | Here Technologies - Mumbai, India (Dec 2017 – Dec 2020)

Permanent Fulltime

 Created different types of visualizations viz., geographical visualizations after slicing and dicing the account
operations related data to analyze financial data across different locations of the bank.
 Experienced in working with DAX commands to pull up more calculated data out of the tables.
 Developed custom calculated measures using DAX in Power BI to satisfy business needs
 Worked with data models with complex relationships in Power BI and connected different data sources to
Power BI desktop.
 Published many reports and visualizations created to the Power BI service and thereby develop dashboards.
 Experienced in creating many dashboards by pinning many visualizations in the workspace as per the insights
provided.
 Experienced in Data Modeling used to define and analyze data requirements needed to support the business
processes within the scope of corresponding information systems in organizations.
 Created data visualizations using various visual objects (Line chart, Bar chart, Tree map, Single card, KPI, Map,
Pie chart, custom visuals).
 Created complex Custom Views using SQL Developer to create data sets for Power BI dashboards
 Created Universes and Complex Reports with BO IDT and WEBI and created several Crystal
 Universes have been created on IDT with single and Multi-source Data Sources.
 Right from gathering Reporting Requirements, preparing TDD and WEBI Reports and Unit testing completed
and moved them from Dev environment to PROD.
Data Analyst | HDFC BANK - Mumbai, India (May 2017 – Oct 2017)
Internship

 Involved in Full Life Cycle Development (SDLC), provided value added services with development teams and
clients throughout the life span of a project, strategic consulting, coding, setting project deliverables, and
managing complex development schedules and tasks.
 Developed dashboards consisting of several reports, some with special features such as parameters (including
cascading), drill down, and drill through, sub-reports, gauges, indicators and conditional formatting, stored
procedures and MDX queries for data retrieval.
 Provided visual intelligence through deployed executive dashboards analyzing Key Performance Indicators
(KPIs) developed in SSRS.
 Deployed and scheduled for weekly ETL runs.
 Utilized TSQL to pull loan data from various database sources and created various reports, dashboards and
scorecards to support loan business decision making.
 Managed and developed existing and new ETL processes for SQL Server reports.
 Designed SSIS packages to dynamically load data from multiple sources such as Excel and XML files and SQL
Server OLTP database to SQL server using Business Intelligence Development Studio.
 Refreshed staging tables with ETL, Scaled SSIS to make it work more reliable.

EDUCATION DETAILS

Pg. Diploma - Cyber Security, Sault College, Toronto, Canada (Mar 2021 - Dec 2022)
MSc. - IT Infrastructure & Embedded System, University of Mumbai, India (Apr 2017 - Aug 2019)
BSc. - Computer Science, University of Mumbai, India (May 2014 - June 2017)

CERTIFICATION

 Microsoft- Customer Data platform Certified, LinkedIn Learning

 Microsoft- Power BI Data Analyst Associate PL300 Certified, LinkedIn Learning
 Data Analytics Consulting - KPMG, issued by Forage.
 ITILv4 Foundation Certified - issued by Axelos.
 PCI Compliance Certified - issued by Qualys.