Fawad Khan

About Fawad Khan

Experienced Information Security director and leader with a demonstrated history of…

Experience

1. Director Information Security

   Public Consulting Group

   Apr 2015 — Present

   Align with the CISO and leadership priorities, set expectations and drive initiatives, architect various security solutions (SOC, Firewalls, Cloud Security (AWS, Azure, O365, Managed cloud-based end point DLP protection, web content filtering, network DLP, firewalls, Mobile Device Management, vulnerability management, IDS, SASE, CSPM, ZeroTrust). Lead a team of cyber security engineers and architects to design solutions that enhance and advance PCG\'s security posture. Currently working on company wide deployment of Workday FMS and HCM solutions. Leading company wide initiatives, helping business achieve their goals while designing and deploying solutions adhering to security standards and regulations. Part of team tasked to achieve SSAE-16 SOC-2 type-2 certification. Creation of new standards, policies processes and solution designs, based on industry standards e.g. NIST 800- and 1800, ISO 27001, 27002 and regulatory compliance HIPAA, HITRUST, FERPA. Information Security Risk assessments. Management of Security operations and engineering team. Responsible for entire life cycle of evaluating new products/solutions, designing, procuring and deployment. Information Security incident management and establishment of 24/7/365 Security Operations center (SOC) with in-house and MSSP model. Data leakage Prevention (DLP), intrusion prevention, malware infection, escalation of privileges remediation. Process improvements. Mentoring and coaching team members. Vendor Collaboration for Proof of Concepts and other activities involving improving overall network and security posture of the firm. Requirement gathering, scope of work, project implementation and operational handover. Procurement life cycle: Finalization of Bill of materials, ordering and receiving leading to designing and deployment. Subject matter expert of various network and information security related technologies e.g. DLP, Encryption,SASE, Access Rights, EDR MDR, System Hardening, Vulnerability management.

Education

• Sir Syed University

  Bachelor of Engineering (B.E.), Computer Engineering

  1998 — 2002

Skills

• Data Leakage
• Access Control
• Cisco Certified
• Enterprise Network Design
• Cisco Nexus
• Dns
• Mcse 2000
• Qradar
• Fireeye
• Cissp
• Cisco Vpn
• Cloud Security
• Cisco Firewall Security
• Ccie Security
• Cisco 6500
• F5 Firepass
• Security
• Microsoft Certified Professional
• Palo
• Palo Alto Networks
• Troubleshooting
• Migration Projects
• Cisco Security
• Security Architecture Design
• Aaa
• Mcsa 2003
• Cisco Ios
• Information Security Management
• Dlp
• Dmvpn
• Ipsec
• Wireless Security
• Nextgen
• Pix
• Information Security
• Tcp/Ip
• Cisco Routers
• Fwsm
• Ccnp Security
• Network Security