Job Market

 Rania HAMMOUD, CISM

Tel : 961 71 41 42 83

http://lb.linkedin.com/in/raniahammoud

Information Security Consultant

Languages spoken and written: French, English, Arabic, Spanish

Objectives: To work in the information security field in a dynamic and stimulating environment where I can keep my professional skills sharp

Nov 2010 - Present IT Project Manager

Xperteam (Beirut, Lebanon)

Responsibilities

• Manage a check’s processing project
• Manage a loyalty & Redemption software project
• Prepare statement of works (SOW) and business requirement documents (BRD)
• Prepare RFP responses
• Prepare project plans
• Participate in systems’ analysis and design

Achievements

• Check system validation development and integration completed.
• Loyalty & Redemption system development and integration completed

Jun 2009 – July 2010 Senior Information Security Analyst

McKesson Canada (Montreal, QC)

Responsibilities

Being a member of the security team:

• Develop policies and procedures for physical and logical security access
• Participate in the periodic information security testing and assessment
• Participate in SOX compliance audit
• Be in charge for a PCI-compliance project for retail points-of-sale
• Be in charge for a penetration test assessment
• Be in charge for a Disaster Recovery Plan project

Achievements

• McKesson Canada became fully PCI compliant.
• DRP project planned and put to execution

Jan 2004 – Jun 2009 Information Security Architect

Ministère de la Justice (Montreal, QC)

Responsibilities

Being a member of the security team and a member of the team in charge of projects related to electronic certificates of signature and encryption:

• Develop policies and procedures for physical and logical security access
• Develop procedures for information security internal auditing
• Conduct different risk analysis for the core business systems using the Méhari method
• Participate in the development of strategic information security projects
• Prepare and validate functional and testing documents for internal projects.
• Develop user and technical guides for Entrust product
• Conduct training sessions and conferences on Entrust products use
• Participate in various projects of GPKI (Governmental Public Key Infrastructure) of different ministries and organizations
• Administer and train users on Livelink products for electronic document management

Achievements

• Deployment of information security policies and procedures
• Deployment of physical and logical access management procedures
• Deployment and completion of various PKI projects where users are using Entrust electronic certificates for secure electronic exchange of information
• Deployment of user and technical guides for Entrust products on the website
• Conducting several conferences on PKI at University of Laval and University of Sherbrooke in Quebec

Jul 2003 – Dec 2003 Software Application Support

Ajilon Consulting (Montreal, QC)

Worked for their client “Agere Systems”, an integrated circuit components company.

Responsibilities

• Monitor SQL/Oracle databases transactions under Unix.
• Troubleshoot databases transactions

Sep 2001–Jun 2003 Project Manager

Middle East Book Store (Montreal, QC)

Responsibilities

• Automate the library workflow: customer orders, supplier orders, books catalog.
• Develop the back-end Access 2000 database for the website.
• Setup and administer networking.

Achievements

• Completion of Bookstore database under Access 2000.

Jun 1995 – Feb 2001 Software Engineer

Banque de la Méditerannée (Beirut, Lebanon)

One of the leading banks in Lebanon

Responsibilities

• Implement and support KINDLE banking modules for head office and branches. Setting up parameters needed and preparing user manuals.
• Play the role of quality assurance control of banking procedures, KINDLE and in-house programs.
• Prepare and conduct testing plans under Unix.
• Conduct training on banking procedures. Prepare training material
• Convert the banking procedures to comply with year 2000.
• Develop many applications for IT division such as help desk, test archiving, and user information databases under VBA Access 2000.
• Plan, design and develop credit files application under VBA Access 2000. Study needs with the credit department’s business analysts.

Achievements

• All banking modules bypassed year 2000 successfully.
• Connection of 24 branches to the Head Office, online and real time.
• Optimization of credit files cycle.

Feb 1994 – Jun 1995 Analyst Programmer

American Life Insurance (Beirut, Lebanon)

One of the leading life insurance companies in Lebanon and Worldwide

Responsibilities

• Maintain current life and general insurance programs under FoxPro 2.6.
• Develop new life and general insurance procedures and reports under FoxPro 2.6.
• Administer Novell networking.
• Develop life insurance application for sales agents under PowerPoint and FoxPro 2.6.
• Train agents and employees.

Achievements

• Realization of life insurance sales application.
• Optimization of insurance cycles.

Feb 1992 – Feb 1994 Programmer

Turnkey Systems (Beirut, Lebanon)

A software development company that develops different banking and commercial software application packages

Responsibilities

• Define client’s business needs.
• Develop accounting, stock and inventory application under Informix/Unix and FoxPro 2.6.

Achievements

• Contribution in the completion of various commercial applications

SOFTWARE CONSULTANT – Free Lancer

Feb 2002 – Mar 2006 Electrical Safety Authorization (Sudbury, ON)

The company deals with electrical inspection for mines and commercial buildings. The work was done online, with few visits to Ontario to meet the client.

Responsibilities

Develop a database under Access 2000 to maintain inspectors’ daily work:

• Define customers and contracts/projects terms
• Capture visits along with inspectors’ observations
• Generate monthly and quarterly reports and charts.

• Synchronize of databases over the Internet.

Achievements

• Completion of inspection database under Access 2000.
• Master database synchronizes over the Internet.

2000-2001 InfoPro (Beirut, Lebanon)

An information research company that leads market surveys and provides market statistical information for customers.

Responsibilities

• Create a reporting tool to manipulate banking product data under Access 2000.
• Create a calculator program to categorize social class for candidates interviewed under Access 2000
• Automate the software installation cycle for clients.

Achievements

• Software finalized and distributed on CDs to clients.

1993-2001 CIMA group (Beirut, Lebanon)

A group of diagnostic centers that provides radiology and laboratory services for patients.

Responsibilities

• Develop radiology and laboratory reception and billing system under Access 97/2000 and FoxPro 2.6.

Achievements

• Software is running live since 1994 in 3 centers

2010            Certificate: Effective Public Speaking

McGill University (Montreal, QC, Canada)

2010            Certificate:  Life Coaching

Coaching de Gestion (Montreal, QC, Canada)

2008            CISM title.  Subjects covered with this certificate:

• Information security governance
• Information risk management
• Information security program development
• Information security program management
• Incident management and response

2005            Public Key Infrastructure (PKI) in the enterprise

Learning Tree International (Ottawa, ON, Canada)

2004            Management Postgraduate Diploma: E-Commerce concentration

McGill University (Montreal, QC, Canada)

2000Completion of Oracle Developer 2000 requirements

New Horizons (Beirut, Lebanon)

1997                        M.S. in Computer Sciences

Lebanese American University (Beirut, Lebanon)

1993                        B.S. in Computer Sciences

Lebanese American University (Beirut, Lebanon)

• Board member of ISACA – Lebanon Chapter

• Self-Oriented and good team player.
• Excellent communicator
• Excellent troubleshooting and analysis skills
• Diagnostic and problem solving
• Quick learner

Willing to travel

References upon request