Mona Shah
Director Information Security @USAA
Signup · Get unlimited contacts
WORK HISTORY
Director Information Security @USAA
EDUCATION
NYU Tandon School of Engineering
Master's degree, Cybersecurity
ABOUT MONA SHAH
With over two decades of experience in global cybersecurity, I specialize in identifying, mitigating, and managing risks across a wide range of environments, including application, infrastructure, cloud, mobile, mergers & acquisitions, and third-party cybersecurity risk management. I excel in operationalizing risk management programs at scale to meet evolving business and regulatory requirements.My expertise encompasses strategic planning, governance risk and compliance (GRC), developing cybersecurity metrics and key risk indicators, third-party risk management, cybersecurity policy lifecycle management, and integrating privacy and security by design. Additionally, I have extensive experience in process automation, cloud security, cybersecurity awareness initiatives, and the cybersecurity aspects of M&A integration.Throughout my career, I’ve consistently built and enhanced cybersecurity risk management functions across global organizations, ensuring compliance with financial regulations and fostering a culture of excellence. My leadership approach emphasizes team collaboration, driving high-performance teams toward shared goals of security and regulatory compliance.I hold multiple industry certifications, including CISSP, CRISC, CISM, CISA, Azure Certifications- az-900, sc-900, ai-900.Core Competencies:Governance Risk and Compliance (GRC)CybersecurityCybersecurity Metrics & Key Risk IndicatorsThird-Party Risk ManagementCybersecurity & Privacy by DesignCybersecurity Policy Lifecycle ManagementProcess Automation & OptimizationLeadership & ManagementCloud SecurityCybersecurity Awareness TrainingsMergers & Acquisitions Cybersecurity IntegrationSimplification and AutomationStrategic Direction & PlanningRisk Assessments -> Targeted, Application, Process, Third party and InfrastructureISO 27001NIST 800-53PCI DSSFFIEC CAT, 101/102 reportingEnterprise Agile( Scrum, XP), Lean
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.