Arsh Huja: M - IT S
Arsh Huja: M - IT S
MANAGER-IT SECURITY
INSURANCE / FINANCE / TELECOM DOMAIN
EXECUTIVE PRCIS
Insightful, result-driven IT Security professional, offering over 18 years of rich and accomplished experience with
notable success directing a broad range of corporate IT security initiative while participating in planning, analyses, and
implementation of solutions in support of business objectives.
Security Professional with broad experience in all aspects of Internal Controls, Information Security, Systems and
Compliance Management and Support.
Currently associated as Global Security Operation Manager with Dupont
Proven ability to Setup IAM solution for Performance Chemical which include Identity Management, Access
Management, Directory service and PKI solution for User authentication
Proven ability to enhance compliance (SOX, audits, and SLAs), cultivate strong business relationships, and minimize
risk / cost in enterprise environments.
Coordinating closely with key stakeholders for design and implementation of new projects / service requests to
develop solutions to meet business requirements & corporate information security objectives
Deft in Partnership with the Infrastructure team lead and Internal/External Audit functions, to ensure that
infrastructure security is comprehensive
Excellent command over information security principles & practices, expertise on advanced security protocols &
standards
Experience with software and security architectures
Investigating, in coordination Legal and Infrastructure team, computer security incidents, and recommending
corrective actions
Established strong rapport within many large-scale environments, both public and private, as a consultant including
DuPont, BT, AT&T, SBC, etc
SKILL MATRIX
+Identity Management +Data integrity/ disaster recovery +Network and system security
+Team & Project Leadership +Vulnerability Assessments +Regulatory Compliance
+Risk Management +Network & System Security +Solution Architecture
CAREER SKETCH
DUPONT INDIA WWW.DUPONT.CO.IN
CAREER ELEVATION
Plays a vital governance role in ensuring compliance to security standards for review of all new capabilities in DuPont
Manage Information Security Operations Globally leading a diverse team of professionals and service providers to
deliver comprehensive security services that include:
o Oversight of twelve team member security team
o Consult on major security initiatives
o Manage security scanning processes (Vulnerability, Application, NIPS, MDS)
HARSH AHUJA CURRICULUM VITAE
o Manage End Point Security ( Anti-Virus, Malware Defence, Host Encryption, Personal firewall)
o Manage Identity, Access Management, Authentication
o Manage Network Security
o Manage Application and Data Security
o Manage SAP Security
IT Set-up: Established an IT Setup (Identity Management Initiative) for Performance Chemical a Spin-off of
Dupont, handling Vendor management (Negotiations), Accenture as system Integrator & providing them strategic
directives, Multiple IT projects capturing their requirements and bringing Innovation for Security products, Managing
Stakeholders awareness for investments, Program Management, Application Integration, Product evaluation etc.
Managing the development and delivery of IT security standards, best practices, architecture, and systems to ensure
information system security across the enterprise
Ensure strategy formulation, design and implementation of identity and access management & integration with IT
projects
Affirmed engagement with the CTO, Marketing (DMS) and IT innovation teams & activate new security technologies
Implements processes and methods for auditing and addressing non-compliance to information security standards
Facilitates migration of non-compliant environments to compliant environments
Manages and participates in the planning and implementation of security administration for all IT projects
Evaluation and selection of security applications and systems
Leading the other security team members in India (Infrastructure, SAP Security, End Point, VAPT)
NOTABLE CREDITS
Joined as India Identity Access Management Leader in Dec07 and presently designated as Global Program
Manager for Identity Access Management & directory services across the Dupont group based at Gurgaon, India
Managing the P&L accountability having worth of $11 Million for Identity Access Management Program
ACCREDITATIONS
Automation: Handled the challenge of retaining manpower in a newly assigned SAP security group domain and
cracked down into SAP org and executed couple of integrations, a cost saving endeavour for the SAP org. Also
executed Automation of Business Process technically and got appreciation as key performer for 2008
Team Formation Strategies: Braced with slashing of Project budget, manpower and US Contractors services
because of economic upheaval, assigned to forma team by hiring 20-30 key professionals along with the leader under
the supervision of Indian CIO from the scratch and on boarded them for Data Project, got awarded by HR deptt. for
outstanding contribution in 2010
Technical Eminence: Achieved success in on-boarding 100 applications in 2010 for Identity Access Management
system which was not possible earlier and which helped the application to pass the audits(SOX, Security standards)
and make it more protective for which again was awarded with ICSAR Global Award in 2010
Challenge of SLA Management: Got a project from Accenture and made it DuPonter project and increased the
SLA from 70% to 90% for which got accredited with ICSAR Global Award and executed the project on 95% of
SLA
Interdepartmental Coordination :Assigned to coordinate for Board meeting while the India visit of Board of
Directors, Dupont USA for assessing growth prospects for investment purpose in India and because of flawless
arrangement got top Managements applauds in 2013
VALUE ADDITIONS
Team Management: Formed a stable & motivated team with enhanced output, devised people retention strategies
for Knowledge Transition plan having budget of 3% of total IT spending in 2007 as India Leader
Security Groups: Proposed and got top Managements approval for structuring various security groups i.e.
compliance group, IT legal group, Infrastructure Security group etc. in 2011
Launched few global programs in coordination with other teams as core members and assisted them to utilise
Identity Access Management program
IT Integration Initiatives: Eased the Helpdesk process thru Automation and integrated with other programs to
substantiate the value of Identity Access Management
pg. 2
HARSH AHUJA CURRICULUM VITAE
Cost Cutting Measure: Formulated a solution for Authentication thru one time password which was costing
DuPont $35, scouted for better and cost efficient alternative as an innovative technology which costed $8 after vendor
negotiations
Technical Transition: Assisted Microsoft in terms of identity users for the headcount during transition from Lotus
notes Email to Microsoft email
PRECEDING ASSIGNMENTS
Software engineer Mahindra British Telecom 1999 - 2005
Consultant Wipro Technologies 1995 -1995
Technical Architect Infosys Technologies Ltd 1995 -1995
1994 -1995
PROFESSIONAL SKILLSET
Identity Management & Security: IBM Tivoli Suite (ITIM/TIM, TAM), Webseal, RSA Cleartrust, PKI, Kerberos,
CA/Netegrity SiteMinder, CA/Netegrity Identity Minder, Sun Identity Manager, Oblix COREid/Oracle Access
Manager (OAM), Passlogix Single Sign-on, Novell Identity Manager, Novell Access Manager, Oracle Identity Manager
(OIM / Xellerate), SUN/IBM/Oracle Federation Manager, Orcale Role Manager (ORM), Public Key Infrastructure,
Smart Cards, Kerberos, Cryptographic Algorithm, GSS-API, Web Services Security, SAML, PAM, JAAS, SSL,IPSEC,
Liberty Alliance-WSF etc
LDAP Directories: Microsoft Active Directory, ADAM, IBM Secureway, Tivoli Directory Server, NDS/Novell
eDirectory, and Sun One Directory Server, Oracle Internet Directory (OID), and Oracle Virtual Directory (OVD)
BackOffice Software: Database (SQL/Oracle), Webserver (IIS, Apache, IBM), Reverse Proxy, Citrix, Terminal
services, Portal (Plumtree, Websphere Portal) Application Server (BEA Weblogic, IBM Websphere, JBoss, Tomcat,
Oracle Application Server (OAS / OC4J)), Integration (DirXML, IBM TDI)
Operating Systems: Microsoft Windows up to Windows 2003 Enterprise Edition, UNIX (SOLARIS 2.x, SOLARIS,
AIX, IRIX, HP/UX, LINUX, MS-DOS
Networking: TCP/IP, DNS, WINS, NFS, Samba, NIS, NIS+, and NetBIOS.
Programming Languages: C/C++, HTML, Java, VB
PERSONAL DOSSIER
DOB : June 02,1976
ADD :
References: Shall be furnished upon request
pg. 3