Rania HAMMOUD, CISM
Tel : 961 71 41 42 83
http://lb.linkedin.com/in/raniahammoud
Information Security Consultant
Languages spoken and written: French, English, Arabic, Spanish
Objectives: To work in the information security field in a dynamic and stimulating environment where I can keep my professional skills sharp
Nov 2010 - Present IT Project Manager
Xperteam (Beirut, Lebanon)
Responsibilities
- Manage a check’s processing project
- Manage a loyalty & Redemption software project
- Prepare statement of works (SOW) and business requirement documents (BRD)
- Prepare RFP responses
- Prepare project plans
- Participate in systems’ analysis and design
Achievements
- Check system validation development and integration completed.
- Loyalty & Redemption system development and integration completed
Jun 2009 – July 2010 Senior Information Security Analyst
McKesson Canada (Montreal, QC)
Responsibilities
Being a member of the security team:
- Develop policies and procedures for physical and logical security access
- Participate in the periodic information security testing and assessment
- Participate in SOX compliance audit
- Be in charge for a PCI-compliance project for retail points-of-sale
- Be in charge for a penetration test assessment
- Be in charge for a Disaster Recovery Plan project
Achievements
- McKesson Canada became fully PCI compliant.
- DRP project planned and put to execution
Jan 2004 – Jun 2009 Information Security Architect
Ministère de la Justice (Montreal, QC)
Responsibilities
Being a member of the security team and a member of the team in charge of projects related to electronic certificates of signature and encryption:
- Develop policies and procedures for physical and logical security access
- Develop procedures for information security internal auditing
- Conduct different risk analysis for the core business systems using the Méhari method
- Participate in the development of strategic information security projects
- Prepare and validate functional and testing documents for internal projects.
- Develop user and technical guides for Entrust product
- Conduct training sessions and conferences on Entrust products use
- Participate in various projects of GPKI (Governmental Public Key Infrastructure) of different ministries and organizations
- Administer and train users on Livelink products for electronic document management
Achievements
- Deployment of information security policies and procedures
- Deployment of physical and logical access management procedures
- Deployment and completion of various PKI projects where users are using Entrust electronic certificates for secure electronic exchange of information
- Deployment of user and technical guides for Entrust products on the website
- Conducting several conferences on PKI at University of Laval and University of Sherbrooke in Quebec
Jul 2003 – Dec 2003 Software Application Support
Ajilon Consulting (Montreal, QC)
Worked for their client “Agere Systems”, an integrated circuit components company.
Responsibilities
- Monitor SQL/Oracle databases transactions under Unix.
- Troubleshoot databases transactions
Sep 2001–Jun 2003 Project Manager
Middle East Book Store (Montreal, QC)
Responsibilities
- Automate the library workflow: customer orders, supplier orders, books catalog.
- Develop the back-end Access 2000 database for the website.
- Setup and administer networking.
Achievements
- Completion of Bookstore database under Access 2000.
Jun 1995 – Feb 2001 Software Engineer
Banque de la Méditerannée (Beirut, Lebanon)
One of the leading banks in Lebanon
Responsibilities
- Implement and support KINDLE banking modules for head office and branches. Setting up parameters needed and preparing user manuals.
- Play the role of quality assurance control of banking procedures, KINDLE and in-house programs.
- Prepare and conduct testing plans under Unix.
- Conduct training on banking procedures. Prepare training material
- Convert the banking procedures to comply with year 2000.
- Develop many applications for IT division such as help desk, test archiving, and user information databases under VBA Access 2000.
- Plan, design and develop credit files application under VBA Access 2000. Study needs with the credit department’s business analysts.
Achievements
- All banking modules bypassed year 2000 successfully.
- Connection of 24 branches to the Head Office, online and real time.
- Optimization of credit files cycle.
Feb 1994 – Jun 1995 Analyst Programmer
American Life Insurance (Beirut, Lebanon)
One of the leading life insurance companies in Lebanon and Worldwide
Responsibilities
- Maintain current life and general insurance programs under FoxPro 2.6.
- Develop new life and general insurance procedures and reports under FoxPro 2.6.
- Administer Novell networking.
- Develop life insurance application for sales agents under PowerPoint and FoxPro 2.6.
- Train agents and employees.
Achievements
- Realization of life insurance sales application.
- Optimization of insurance cycles.
Feb 1992 – Feb 1994 Programmer
Turnkey Systems (Beirut, Lebanon)
A software development company that develops different banking and commercial software application packages
Responsibilities
- Define client’s business needs.
- Develop accounting, stock and inventory application under Informix/Unix and FoxPro 2.6.
Achievements
- Contribution in the completion of various commercial applications
SOFTWARE CONSULTANT – Free Lancer
Feb 2002 – Mar 2006 Electrical Safety Authorization (Sudbury, ON)
The company deals with electrical inspection for mines and commercial buildings. The work was done online, with few visits to Ontario to meet the client.
Responsibilities
Develop a database under Access 2000 to maintain inspectors’ daily work:
- Define customers and contracts/projects terms
- Capture visits along with inspectors’ observations
- Generate monthly and quarterly reports and charts.
- Synchronize of databases over the Internet.
Achievements
- Completion of inspection database under Access 2000.
- Master database synchronizes over the Internet.
2000-2001 InfoPro (Beirut, Lebanon)
An information research company that leads market surveys and provides market statistical information for customers.
Responsibilities
- Create a reporting tool to manipulate banking product data under Access 2000.
- Create a calculator program to categorize social class for candidates interviewed under Access 2000
- Automate the software installation cycle for clients.
Achievements
- Software finalized and distributed on CDs to clients.
1993-2001 CIMA group (Beirut, Lebanon)
A group of diagnostic centers that provides radiology and laboratory services for patients.
Responsibilities
- Develop radiology and laboratory reception and billing system under Access 97/2000 and FoxPro 2.6.
Achievements
- Software is running live since 1994 in 3 centers
2010 Certificate: Effective Public Speaking
McGill University (Montreal, QC, Canada)
2010 Certificate: Life Coaching
Coaching de Gestion (Montreal, QC, Canada)
2008 CISM title. Subjects covered with this certificate:
- Information security governance
- Information risk management
- Information security program development
- Information security program management
- Incident management and response
2005 Public Key Infrastructure (PKI) in the enterprise
Learning Tree International (Ottawa, ON, Canada)
2004 Management Postgraduate Diploma: E-Commerce concentration
McGill University (Montreal, QC, Canada)
2000Completion of Oracle Developer 2000 requirements
New Horizons (Beirut, Lebanon)
1997 M.S. in Computer Sciences
Lebanese American University (Beirut, Lebanon)
1993 B.S. in Computer Sciences
Lebanese American University (Beirut, Lebanon)
- Board member of ISACA – Lebanon Chapter
- Self-Oriented and good team player.
- Excellent communicator
- Excellent troubleshooting and analysis skills
- Diagnostic and problem solving
- Quick learner
Willing to travel
References upon request
TECHNICAL SKILLS – Summary sheet
Security
|
|
Méhari
|
2 years
|
Entrust
|
4 years
|
Cobit, ITIL
|
familiar
|
ISO 27001
|
familiar
|
|
|
|
Operating Systems & Networking
|
|
Unix scripting
|
8 years
|
|
|
|
Web Tools
|
|
HTML
|
1 year
|
VB Script
|
1 year
|
|
|
|
Programming Languages
|
|
Visual Basic
|
2 years
|
SQL Server
|
1 year
|
VBA Access (currently in use)
|
15 years
|
Oracle – PL/SQL & Developer 2000
|
6 months
|
Informix 4GL
|
2 years
|
FoxPro
|
4 years
|
|
|
|
Tools
|
|
MS Office (currently in use)
|
18 years
|
Visio (currently in use)
|
8 years
|
Help Workshop
|
2 years
|
MS Project (currently in use)
|
6 years
|
Livelink
|
4 years
|
|
|
|
Languages
|
|
Arabic
|
Fluent
|
French
|
Fluent
|
English
|
Fluent
|
Spanish
|
intermediate
|
|
|
|