Ali Khan

About Ali Khan

Solutions-oriented, highly skilled, and multifaceted IT professional, with more than 9 years of experience focused on Risk Assurance and Cybersecurity. Effective at spearheading projects related to implementation of IT Frameworks such as NIST and ISO as well as regulatory requirements. Experienced in the following areas: Compliances: GDPR, CCPA, NYDFS, HIPAA, SOX, GLBA, and PCI-DSS Frameworks: NIST 800-53, ISO 27001, HITRUST Process Improvement and Related Projects: Third Party Risk Assessments Mergers and Acquisitions Risk Assessments BeyondTrust Privileged Access Management (PAM) Forcepoint DLP Amazon Web Services Microsoft Azure Vulnerability Management (Qualys, Rapid7) Security Awareness (Knowbe4) Creation and Management of IT Policies Data Classification and Data Loss Prevention (DLP) SOX ITGCs

Experience

1. Lead Grc Analyst

   Omron Healthcare Global

   Jul 2017 — Present

   IT Security Program: Contribute to IT Security Program maturity and compliance assessments based upon external regulatory requirements such as HIPAA and SOX. Security Framework: Supported company business objectives to implement HITRUST CSF as a single benchmark to facilitate internal and external security controls measurements Policies and Standards: Identify, develop, implement, and maintain consistent and standardized international security processes and policies, to mitigate risk and safeguard the enterprise worldwide Third-Party Assessments: Utilized OneTrust to develop and manage a third-party risk management monitoring and reporting process that tracks third-party supplier risks Data Governance: Proactively advise the business on how to maintain data privacy as they relate to regulatory requirements (e.g, GDPR, CCPA) Security Awareness: Participate in the development of security awareness and communication training programs using KnowBe4 across the enterprise to ensure alignment with the overall IT Security strategy

Education

• University of Illinois Chicago

  Bachelor of Arts - BA, Accounting and Computer Science

  2004 — 2008

• Texas A&M University-Commerce

  Master of Business Administration - MBA

  2009 — 2011