Summary
Overview
Work History
Education
Skills
Professional Development
Timeline
Generic

Veena Bhide

Pittsburgh,USA

Summary

Accomplished Director Portfolio and Program Manager with a proven track record at Marriott International, adept in leading IAM transformations and managing cross-functional teams. Expert in financial analysis and investor relations, I've spearheaded initiatives that significantly enhanced security postures and compliance standards, demonstrating exceptional leadership and strategic planning skills.

Overview

17
17
years of professional experience

Work History

Director Portfolio and Program Manager, Global Information Security

Marriott International
10.2022 - Current
  • As an IAM leader, I successfully Co-lead the IAM transformation program in Marriott’s Information Security group
  • Developed and managed an IAM team of 20+ members, both in-house and in partnership with Accenture and Deloitte, to manage IAM services for 750,000 global associates and 300+ applications
  • Provide oversight into daily operations of the IAM Identity governance portfolio by managing user lifecycle processes, role assignments, and access governance activities in SailPoint Identity IQ, Active Directory and LDAP
  • Oversee identity provisioning and de-provisioning processes in SailPoint, OKTA and CyberArk ensuring seamless access for Associated, vendors and contractors
  • Oversee IAM processes, policies, technologies, and metric adoption
  • Lead the enterprise privileged access management program in CyberArk and Hashi vault to improve the security posture and Cyber resiliency goals of the organization
  • Led the enterprise certificate management program, covering system and application identity management, with a budget of over $3 million in professional services
  • Partnered with Technology and leadership team to establish 3-year roadmaps by product for the Information Security group by gaining alignment on priority, budget, and resources
  • Experienced in building and managing high performance teams by collaborating with cross-functional stakeholders, establishing working agreements and aligning with leadership expectations
  • This has helped IT and security teams to implement and enforce access policies, such as least privilege and segregation of duties (SoD)
  • Performed regular access reviews, certification campaigns, and audits to ensure compliance with internal and external regulatory standards for critical SOX and SOC1 applications
  • Drove continuous improvement initiatives within the IAM space, identifying areas of risk and recommending enhancements to access controls and privileged access management systems like CyberArk, Hashi Vault, Comanche Endpoint management system and Venafi enterprise certificate management

IAM Product and Portfolio Lead

Cardinal Health
OH
03.2021 - 10.2022
  • Company Overview: Cardinal Health is a healthcare services and products company
  • As the Portfolio lead, responsible for managing Information security initiatives, establishing project charter, Managing programs from a budget, resources, schedule, and scope perspective
  • This involves overseeing the realization of Roadmap items, providing thought leadership by playing a key role in improving the security posture of the organization
  • Managing the Privileged Access Management program requiring enabling CyberArk capabilities to integrate human and non-human accounts across SAP, Linux, Operating System, Database, and other platforms across the enterprise
  • Program lead of the Information Security workstream for PMOD (Platform Modernization) initiative, one of the largest enterprise-wide ERP implementations involving enabling SSO, role-based access control, and identity federation across Cardinal Point of Sale and Warehouses
  • Managing expectations and providing regular updates at the Executive Steering Committee meetings
  • Driving Access Control and Infosec Remediation initiatives to mitigate security vulnerabilities existing in mission critical and crown jewel applications by integrating with IAM solutions leveraging OKTA for Authentication & SailPoint IIQ for Authorization
  • Oversee and monitor complex projects involving optimization of operations, driving efficiency and digital transformation to streamline Privileged Access, Data protection and Privacy Risk mitigation initiatives
  • Cardinal Health is a healthcare services and products company

Senior Portfolio Manager, Cyber Security

Highmark Health
Pittsburgh
04.2019 - 02.2021
  • Company Overview: Highmark Health is a health insurance company
  • Lead Program management & transformation initiatives across Information Security & Risk Management for both strategic & transformation efforts in Cyber Security, Privacy, and Identity & Access Management (IAM) by successfully implementing CyberArk as the Privileged Access Management (PAM) solution in 2 Business units, requiring establishing a program structure, managing multiple work streams, establishing a governance model, stakeholder registry & communication matrix with Senior leadership
  • Managing multi-year roadmap initiatives for improving onboarding experience of employees, vendors, consultants & hospital staff by revamping the RBAC process within SailPoint Identity & Access management tool and integrated platforms
  • Successfully leading SWAT team for conducting a rapid assessment of the SailPoint IAM tool, the recommendations of which formed the basis for Roadmap for 2020
  • Managing Privacy Risk Mitigation program to institute controls to address improper disclosure of customer PHI by establishing measures to monitor access, enhance accountability & establish governance and control
  • This project involved establishing controls within Threat management, vulnerability management, Enterprise Data Governance, and Identity Management areas
  • Highmark Health is a health insurance company

IAM Manager

BNY Mellon
Pittsburgh
02.2008 - 03.2019
  • Company Overview: BNY Mellon is a global investments company
  • Created multi-year roadmap initiatives at enterprise level from inception to delivery through implementation leveraging DMAIC methodology leading to timely implementation of critical deliverables
  • Worked with the Information Risk Management (IRM) Program manager in establishing the Identity & Access Management (IAM) Adoption Program for onboarding SOX & SOC2 applications to SailPoint IIQ for Access management and certifications
  • Collaborated with Information Risk Officers, Business and Technology partners to build a standardized process for application onboarding into the SailPoint tool
  • This resulted in successful transition of the initiative from an accelerated program to an established business-as-usual service
  • Established strong relationships with Business Senior Information Risk Officers, Data Custodians and Data Owners and have become the ‘go-to’ person on any SailPoint related questions
  • Established a SharePoint repository, JIRA project & Incident Management project for managing BAU activities
  • These tools were extensively leveraged by the Operations, Business system analysts, development team & business partners
  • BNY Mellon is a global investments company

Education

Master of Science (MS) - Information Systems Management

Robert Morris University
Pittsburgh, USA

Master of Business Administration -

Pune University
India

Skills

  • Actor guidance
  • Investor relations
  • Business planning
  • Legal and regulatory compliance
  • Financial analysis
  • Cross-functional team leadership

Professional Development

  • Lean Six Sigma Black belt.
  • Certified PMP.
  • Attended the RSA Conference 2023 focusing on advancements in IAM and cybersecurity.
  • Completed SailPoint IdentityNow Implementation course.
  • Completed CISM training course in 2022.

Timeline

Director Portfolio and Program Manager, Global Information Security

Marriott International
10.2022 - Current

IAM Product and Portfolio Lead

Cardinal Health
03.2021 - 10.2022

Senior Portfolio Manager, Cyber Security

Highmark Health
04.2019 - 02.2021

IAM Manager

BNY Mellon
02.2008 - 03.2019

Master of Science (MS) - Information Systems Management

Robert Morris University

Master of Business Administration -

Pune University
Veena Bhide