Resume

RESUME

Brooke Gray

Location: Savannah, Georgia - United States
email: ryanbrookegray@gmail.com

PROFESSIONAL SUMMARY

Senior IAM Governance Analyst with deep experience supporting SOX, PCI, and DR-tier access governance programs in regulated enterprise environments. Proven background in audit support, IAM findings lifecycle management, access certification operations, and control validation. Known for leading complex governance initiatives, partnering cross-functionally with compliance and application teams, and driving scalable, audit-ready IAM processes.

CORE COMPETENCIES

IAM Governance & Compliance: SOX, PCI-DSS, SOC 2, ISO 27001, DR-Tier Governance, Access Certifications, Segregation of Duties (SoD), Role-Based Access Control (RBAC), Privileged Access Management (PAM)
IAM Platforms & Tooling: Saviynt (AccessIT), OnSpring, Azure AD / Entra ID (Governance), Courion, ServiceNow, SNAP Ticketing, AuditBoard, ServiceNow
Audit, Risk & Reporting: Audit Evidence Collection, IAM Findings Management, Control Validation, Risk Remediation Tracking, Executive Reporting, Access Analytics
Process & Collaboration: Stakeholder Engagement, Technical Documentation, UAT Support, Governance Process Design

DATA ANALYSIS & GOVERNANCE REPORTING

IAM Advanced Excel (audit reconciliation, pivot tables, certification tracking), IAM reporting and metrics validation (access reviews, findings, attestations), SQL (query-level access validation and data review), PowerShell / Python (ad hoc scripting to support IAM data analysis and audit preparation), Power BI dashboards supporting IAM and compliance reporting

PROFESSIONAL EXPERIENCE

Amex GBT (Global Business Travel)                                                                                  08/2023 – Present
Senior IAM Governance Analyst

●  Support execution of quarterly IAM access certifications for SOX, PCI, and DR-Tier 1 applications as part of a governance team, ensuring certifications are completed accurately and on schedule. Track and manage post-launch certification activities, including reassignment handling, deadline monitoring, and close-out coordination

●  Manage certification data intake and validation in OnSpring, reviewing submissions for completeness and audit alignment prior to load into AccessIT (Saviynt)

●  Support IAM security initiatives for Data Collecton Automation (DCA) and process improvements

●  Serve as a primary point of support for leaders and application owners through the SNAP queue, resolving certification and remediation questions

Key Contributions

·   Local Account Deep Dive (PCI / SOX): Led the design and execution of a governance initiative addressing local account and credential-storage risk for PCI and SOX-scoped applications. Created standardized templates and control language using existing policy, partnered with SOX, PCI, and OnSpring teams to create review, and reviewed 6,000+ submissions. This involved close collaboration with Application Teams and Leadership to meet timelines outlined by Audit.

·   IAM Findings Lifecycle Management: Own end-to-end coordination of IAM audit findings, including finding creation, corrective action tracking, and follow-through to closure in partnership with application owners and compliance teams.

DISYS – Contractor for EviCore Healthcare                                                                       08/2021 – 01/2023
IAM Analyst, IAM Team

●      Cleaned, transformed, maintained, and analyzed large data sets using excel functions, PowerShell, SQL, and SQL Server for ticket tracking and compliance- including for recertification audits and Active Directory cleanups

●      Tableau and API integrations to create dashboards for ServiceNow and private dashboard to track team metrics and provide performance insights

●      SharePoint administration-including creation of apps and managing site assets

●      Technical Documentation of IAM processes and workflows for knowledge base, created a uniform format using Templafy

●      Collaborated with leadership to streamline and improve access provisioning technology solutions and enforce compliance with PIM security measures to decrease SLA timelines

●      Acting team lead for a team of 4 – trained members on least privilege IAM policies and procedures, including access provisioning, security compliance, and governance in a healthcare environment. Project management for owned projects: Provided proposals, timelines, and solutions for projects in the IAM scope including an extension cleanup in Cisco Unity over 3 months which freed up over 1200 extensions and prevented expanding the terms of licensing

●  Provisioned and deprovisioned new hire access and provided onboarding/offboarding support across SSO, SAML, SAAS applications and governance tools using Courion automation, Power Automate, Azure Active Directory, Office 365, and Production Windows Server tools

South University, Savannah, GA                                                                                       08/2019 - 02/2021
Systems Engineer

●      Performed WAN network and device support for university staff, faculty, and students.

●      Used Cisco Unity (CUCM, CCMP, CUCA) to assign extensions, voicemails, and finesse profiles to end users

●      Facilitated O365 Migration, including upgrading servers to reach domain level

●      Collected, organized, and stored data from server and sent to data storage facility and updated security logs

●      Utilized endpoint management systems and remote control software for remote support / software installations and automatic updates

●      Provisioned access for end users in Active Directory and Exchange, managed user accounts in LMS portals

●      Authored technical documentation for knowledge base and end users

Hargray Communications, Bluffton, SC                                                                             02/2018 - 08/2018
DBA Support Analyst

●      Delivered technical support for remote and onsite users

●      Managed and monitored problem tickets, analyzed incidents, and determined support required

●      Application support for enterprise billing and provisioning system: Oracle database troubleshooting, used and authored Python and SQL scripts to resolve level 1 DBA issues within Oracle framework.

●      Active directory support tasks

●      Microsoft exchange support, specifically the migration from On Prem exchange to O365

●  Microsoft Office 365 and Windows 10 migration support, printer troubleshooting and maintenance, input tickets into ticketing system, used remote software to deploy silent installs and imaging.

EDUCATION

Georgia Southern University – Armstrong Campus Savannah, GA
Bachelor of Science - Information Technology GPA 4.0 Expected Graduation Spr 2027

CERTIFICATIONS
AZ-400