Sam al Shami

About Sam al Shami

As a skilled Information Security Professional, I have a proven track record in developing and implementing robust information security processes and governance procedures. My expertise in security operations, vulnerability management, and the development of automated solutions have helped me to identify and mitigate risks across various domains. I possess a deep understanding of networking, operating systems, and forensics, which allows me to design and implement security controls to protect against a wide range of threats. I have specialized knowledge in cloud security, specifically Amazon Web Services (AWS). My Master\'s degree in Cyber Security and Information Assurance, with a focus on Cyber Security and Ethical Hacking and Penetration Testing, enables me to understand and help building robust and effective risk management processes and governance frameworks. I am able to take a strategic approach in aligning information security controls with business objectives and compliance requirements, ensuring the protection of sensitive information and the continuity of critical business functions.

Experience

1. Information Security Risk and Compliance Manager

   Amazon

   Feb 2023 — Present · Las Vegas, NV, US

   Lead Risk, and compliance functions for retail e-commerce operations. I oversee security architecture reviews, threat modeling, cloud security (AWS), application security assessments, and privacy compliance programs (CCPA, GDPR, PCI DSS). My work spans policy development, third-party risk management, security automation, and team leadership—ensuring security frameworks align with standards such as NIST.

Education

• Ajman University

  BC, Information Systems

  2002 — 2006

• National University

  Master of Cyber Security and Information Assurance, Cyber Security / Ethical Hacking and Penetration Testing

  2013 — 2014

Skills

• Information Security
• System Administration
• Operating Systems
• Linux System Administration
• Networking
• Computer Security
• IT Solutions
• Web Development
• Database Administration
• Routing
• Unix
• Cyber-Security
• Linux
• Network Administration
• Citrix
• Databases
• Network Security
• Vmware
• Vpn
• Information Assurance
• Penetration Testing
• Firewalls
• Security
• Information Technology
• Vulnerability Management
• Tcp/Ip
• Internet Protocol Suite (Tcp/Ip)
• Virtual Private Network (Vpn)