Open to opportunities

Haya User

@hayauser

Message

Technology risk and control governance leader in regulated financial services.

India

Message

What I'm looking for

I’m looking for a role where I can lead technology risk and control assurance, govern vulnerability remediation, and deliver executive KRI/KPI reporting—strengthening control frameworks in regulated environments using ISO/NIST/COBIT/SOX-aligned practices.

I’m a Technology Risk & Controls Governance professional with 15+ years of IT experience, including 6+ years leading enterprise technology risk, control assurance, vulnerability governance, and remediation programs in highly regulated global financial environments. I conduct risk assessments, evaluate control effectiveness, and drive remediation governance through continuous monitoring and executive risk reporting, aligned to ISO 27001, NIST CSF/RMF, COBIT 2019, and SOX.

I integrate Enterprise Risk Management into the three lines-of-defence model to assess, prioritize, and manage technology risks in line with the organization’s risk appetite. In my recent work at JPMorgan Chase, I reduced open critical technology risk findings by 68% and directed remediation and closure activities across 1,000+ security and control findings, while maintaining SLA-compliant closure outcomes (including a 94.83% closure rate for infrastructure-owned vulnerability findings).

Experience

Work history, roles, and key accomplishments

Current

Technology Risk & Controls Assoc

Current

JPMorgan Chase

May 2020 - Present (6 years 1 month)

Led enterprise-wide technology risk assessments and control assurance reviews across applications, infrastructure, and operations to evaluate control effectiveness and regulatory compliance. Reduced remediation timelines by 25% and achieved 94% closure rate by managing issues in ServiceNow GRC/CORE, while delivering executive risk reporting and governance metrics.

Technology Risk Management RCSA Control Effectiveness Vulnerability Management Remediation Governance ISO 27001

Technology Operations Analyst

JPMorgan Chase

May 2016 - May 2020 (4 years)

Oversaw global incident management and performed root cause analyses for infrastructure and application incidents, maintaining 98% SLA compliance and improving service reliability. Coordinated cross-functional incident response, developed ITIL-aligned runbooks/knowledge articles, and administered access management and service requests under security and operational governance.

Incident Management SLA Management Access Management Security Governance

Senior Technical Support Engineer

Hewlett Packard

Feb 2011 - Nov 2015 (4 years 9 months)

Maintained enterprise hardware/software environments to ensure system availability and performance aligned with service level agreements. Enforced network security controls, applied security patches, managed access provisioning/de-provisioning, and coordinated vendor escalation to ensure timely resolution and minimize operational disruptions.

System Administration Network Controls Patch Management System Access Provisioning Vendor Escalation Incident resolution