ALLEN CHARI
Mansfield
Summary
Technical Business Analyst with 12+ years of experience delivering complex identity and access remediation programmes across highly regulated financial, automotive, and enterprise environments. Proven track record of analysing intricate infrastructure environments (Active Directory, Windows Server, Databases, and Cloud directories) to identify control weaknesses, privileged access risks, and compliance gaps. Demonstrates strong working knowledge of CyberArk Privileged Access Management (PAM), including Safe architecture, AD group-based privilege assignment, Zero Standing Privileges (ZSP), and Just-In-Time (JIT) access models. Deeply experienced in translating large, complex datasets into evidence-based compliance outcomes for regulatory audits (SOX, GDPR, PCI-DSS). Combines advanced data analysis (Excel, SQL, PowerShell) with process mapping expertise to drive control uplift remediation programmes from discovery through to audit sign-off.
Overview
11
11
years of professional experience
Work History
Technical Business Analyst (IGA & Access Remediation)
Synergy Project Consultants
01.2026 - Current
- Engaged on a large-scale identity governance onboarding programme, acting as the technical data lead to remediate privileged access controls across 80 business-critical applications.
- Analysed complex infrastructure datasets to validate data completeness, accuracy, and compliance against defined security control requirements.
- Successfully mapped and validated 315 Active Directory group-based entitlements, ensuring strict alignment with privileged access models, ownership, and audit trails.
- Identified and documented control weaknesses in out-of-band access and orphaned entitlements, recommending remediation actions and process improvements to strengthen the organisation’s privileged access governance posture.
- Refined technical epics into actionable user stories, managed the delivery backlog, and produced detailed data dictionaries and process maps to guide engineering teams in closing infrastructure control gaps.
Technical Business Analyst (SailPoint & PAM Controls)
Toyota Motors Europe
Brussels, Belgium
06.2023 - 12.2025
- Spearheaded the IAM transformation for the European retailer/dealer network, directly applying PAM principles to govern privileged administrative access across regional IT estates (Active Directory, Windows Server, and dealer-hosted databases).
- Conducted extensive privileged access role-mining across dealer infrastructure, producing standardised role definitions that enforced least privilege and reduced administrative over-entitlement.
- Identified and documented infrastructure control weaknesses by analysing AD group memberships and user access patterns, collaborating with security and engineering teams to remediate 200+ access inconsistencies prior to go-live.
- Owned the technical requirements for the SailPoint UI plugin, ensuring that B2B administrators could request and manage privileged access through a controlled, auditable workflow—mirroring PAM service desk functionality.
Technical Business Analyst (Global IGA & SoD Remediation)
Fidelity Investments
UK, London
03.2021 - 06.2023
- Led a global remediation programme during the rollout of SailPoint ISC, specifically targeting privileged access risk across 150+ enterprise applications and underlying infrastructure.
- Performed extensive Segregation of Duties (SoD) analysis, uncovering 60+ toxic role combinations within infrastructure environments (databases, Windows servers, and AD).
- Produced compliance reports that drove direct remediation of privileged entitlements.
- Validated large datasets to identify orphaned accounts and excessive infrastructure privileges, resulting in a 40% reduction in access-related incidents and strengthened compliance with SOX and GDPR.
- Mapped complex AS-IS and TO-BE Joiner/Mover/Leaver (JML) processes, producing clear SOPs and process maps (Visio) to support the control uplift and operational handover to service teams.
Lead Business Analyst (IGA & Access Governance)
Deutsche Bank AG
Frankfurt
10.2020 - 03.2021
- Managed integrations between Workday HCM and RSA IGA, with a specific focus on automating privileged access recertification and JML processes to meet stringent regulatory deadlines.
- Oversaw the Saviynt Proof of Concept (POC) for governance, defining roles, entitlements, and policies within RBAC and ABAC frameworks—directly applicable to PAM control remediation strategies.
- Documented technical specifications for REST APIs and flat-file data transfers to ensure accurate, auditable movement of privilege data across legacy infrastructure and SaaS applications.
Senior Technical BA (CIAM & Infrastructure Security)
10x Banking (UK) Ltd
UK
11.2019 - 10.2020
- Supported the rollout of the ForgeRock Identity Platform, designing secure OAuth 2.0 and OpenID Connect flows across a microservices architecture.
- Applied strict PAM-like controls to secure API gateways and directory services (OpenDJ/LDAP).
- Authored detailed UML sequence diagrams and integration specifications for identity services, embedding privileged session management and access policies into the CI/CD pipeline.
Senior Business Analyst (Identity & Access Management)
Nuffield Health Group
11.2018 - 06.2019
- Integrated IAM solutions with Salesforce, Workday, and ServiceNow, incorporating systems access rights and privileges per role to facilitate a Role-Based Access Control (RBAC) model.
- Managed end-to-end testing of business rules and Active Directory Group Policy Objects (GPOs), ensuring that privileged administrative access policies met security and compliance requirements prior to production deployment.
Business Systems Analyst (CIAM)
Kaspersky Lab UK Ltd
UK
07.2015 - 10.2018
- Oversaw the design of a ForgeRock-based CIAM platform built on OpenIDM and OpenDJ.
- Defined authentication flows (MFA, SAML) to secure privileged administrative access to customer-facing global platforms.
- Supported GDPR readiness through process re-engineering and data modelling, identifying and flagging privileged data handling risks that required immediate remediation.
Education
Global MBA -
Bayes Business School
MSc - Business Analysis & Consultancy
University of Hertfordshire
Stanford Advanced Cybersecurity - Cybersecurity
Stanford University School of Engineering
Skills
- CyberArk
- Active Directory
- Entra ID
- Windows Server
- UNIX/Linux fundamentals
- Database access governance
- Mainframe access controls
- Advanced Excel
- SQL
- PowerShell
- Python
- Regulatory Compliance
- Audit Reporting
- Role-Based Access Control
- Segregation of Duties analysis
- Privileged Access modelling
- Application Onboarding
- JML Automation
- Certification Campaigns
- Jira
- Confluence
- ServiceNow
- Visio
- BPMN 20
- Agile
- Scrum
- User Story refinement
- UAT
Custom Section
CyberArk (Safes, AD group management, JIT/ZSP), Active Directory/Entra ID, Windows Server, UNIX/Linux fundamentals, Database access governance, Mainframe access controls (awareness), Advanced Excel (PivotTables, complex lookups, data validation), SQL, PowerShell, Python (basic), Regulatory Compliance (SOX, GDPR, PCI-DSS, ISO 27001), Audit Reporting, Role-Based Access Control (RBAC), Segregation of Duties (SoD) analysis, Privileged Access modelling, Application Onboarding, JML Automation, Certification Campaigns, Jira, Confluence, ServiceNow, Visio (process mapping), BPMN 2.0, Agile/Scrum, User Story refinement, UAT, SOPs, Data Dictionaries
Websites, Portfolios and Profiles
https://linkedin.com/in/allenchari
Timeline
Technical Business Analyst (IGA & Access Remediation)
Synergy Project Consultants
01.2026 - Current
Technical Business Analyst (SailPoint & PAM Controls)
Toyota Motors Europe
06.2023 - 12.2025
Technical Business Analyst (Global IGA & SoD Remediation)
Fidelity Investments
03.2021 - 06.2023
Lead Business Analyst (IGA & Access Governance)
Deutsche Bank AG
10.2020 - 03.2021
Senior Technical BA (CIAM & Infrastructure Security)
10x Banking (UK) Ltd
11.2019 - 10.2020
Senior Business Analyst (Identity & Access Management)
Nuffield Health Group
11.2018 - 06.2019
Business Systems Analyst (CIAM)
Kaspersky Lab UK Ltd
07.2015 - 10.2018
Global MBA -
Bayes Business School
MSc - Business Analysis & Consultancy
University of Hertfordshire
Stanford Advanced Cybersecurity - Cybersecurity
Stanford University School of Engineering