Phil Garrelhas
Senior Security Service Manager @CIBC
Signup · Get unlimited contacts
WORK HISTORY
Senior Security Service Manager @CIBC
Toronto, ON, CA
Enabled and improved intelligence-driven security monitoring and response capabilities for the Enterprise, by modernizing the Enterprise SIEM with a lift-and-shift to a next-gen SIEM platform- Introduced a User Entity and Behaviour Analytics (UEBA) platform at the Enterprise, and building the strategy for continued utilization across various stakeholder groups- Supported and deployed centralized collection of security information, by surgically bringing in high-value telemetry to support threat detection content and hunting capabilities, while maintaining low costs- Realized ~$1MM in cost savings within 18 months with a minimum projected cost savings of ~$500K over the next 12 months- Developed external relationships for information sharing- Communicated analysis and solutions for security risks to management and provided centralized reporting on key processes- Developed and provided input into service roadmaps and implementation strategies for Enterprise Security Monitoring and Analytics- Partnered with Security Operations, Engineering, and Financial Crimes Technology to improve security processes- Collaborated with vendors and partners to ensure alignment with CIBC\'s strategy- Developed periodic and ad-hoc threat and external incident assessments and presentations for various audiences- Demonstrated experience in Information Security within large enterprises, with emphasis in areas such as Threat Intelligence, Incident Response, SIEM, SOAR, UEBA, and Security Analytics.
EDUCATION
ISACA
Certification of Cloud Auditing Knowledge (CCAK) Training (on demand)
ISACA
CISA
George Brown Polytechnic
Network Security
ISACA
Cybersecurity Audit Certification Training (on demand)
SKILLS
ABOUT PHIL GARRELHAS
Note**Please have the courtesy and do not contact me at my current employer (phone or email) or on my personal home/cell phone. I appreciate that any contact attempts are made through LinkedIn ONLY. In addition, I am currently not open to any contract/temporary positions-My 17+ years of combined experience in Systems Administration, Infrastructure Management, IT Audit/Governance, Risk, Compliance and Cybersecurity allows me to bring additional risk-based ideas and contribute to Technology roles in IT Audit/GRC and Cybersecurity. My personable nature and strong communication skills are a perfect complement to any organization, allowing for harmonious relationships with both internal and/or external clients, vendors, business partners, stakeholders, and Senior Management. These qualities, coupled with my experience, allow me to successfully build and retain positive working relationships that are paramount in an organization- Microsoft Azure Fundamentals - Microsoft- Microsoft Security, Compliance and Identity Fundamentals - Microsoft- Cybersecurity Audit Certificate - ISACA- Certified in Risk and Information Systems Control (CRISC)- ISACA- Certified Information Security Manager (CISM)- ISACA- Certified Information Systems Auditor (CISA)- ISACA- Information Technology Infrastructure Library (ITIL v3) Certified- Certificate in Cloud Auditing Knowledge (CCAK)- ISACA
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.