Shahir Shah

About Shahir Shah

EXECUTIVE SUMMARYStrategic and progressive information technology leader with over 20 years of experience in project management, architecture, security risk, audit assessments, and IT systems development & delivery. Managed several strategic multi-million dollar projects focused on reducing risk, elevating organizational productivity and increasing operational efficiency of IT-enabled processes and meeting compliance needs (such as SOX, GLBA, FINRA-OATS, MNPI and PCI)- Extensive experience in managing and deploying risk, security and compliance platforms- Disciplined program / project management skills- Managed global programs, projects and teams - Possesses exceptional communication skills and the ability to develop and lead high-performance multicultural teams- Considerable experience in streamlining processes and achieving operational efficienciesSpecialties- Security program management, governance, strategy, roadmap development, security policies, standards & guidelines- Security event & incident management - Cyber Security Incident Response- Data leakage prevention & detection- Security architecture, security assessments - Application, database, host & network - Identity & access management – governance, strategy, architecture, provisioning, certification, segregation of duties, privileged access & role management- Unstructured data protection- Application development

Experience

1. Sr Director, Sr Business Security Officer (Compliance Solutions)

   ADP

   Dec 2019 — Present · Roseland, NJ, US

   Responsible for delivering shared security services and providing security advisory to the business

Education

• University of Calicut

  B Tech, Electronics and communications engineering

  1994 — 1998

Skills

• Penetration Testing
• Strategy
• Computer Security
• Security Policy
• Incident Management
• Security Architecture Design
• Architecture
• Business Continuity
• Siem
• Network Security
• Enterprise Risk Management
• IT Audit
• Business Analysis
• Program Management
• IT Risk Management
• Information Technology
• Cloud Computing
• Security Management
• Risk Assessment
• Sarbanes-Oxley Act
• Information Security Management
• Iam
• Identity & Access Management (Iam)
• Information Security
• Management
• Vulnerability Assessment
• Web Application Security
• Consulting
• Pci Dss
• Security
• Enterprise Architecture
• Iso 27001
• Project Management
• Sdlc
• Cissp
• Governance
• Vulnerability Management
• Dlp
• Business Process Re-Engineering
• Identity Management