Shaker B. Shams

About Shaker B. Shams

CISA certified Cybersecurity & Data Governance Consultant with 7+ years of experience reducing compliance gaps, mitigating third-party risks, and securing enterprise cloud infrastructures. Proven ability to operationalize frameworks like FedRAMP, ISO 27001, and NIST 800-53 across complex multi-cloud ecosystems. Reach out: s••••••••@gmail.com |+16•••••••49I specialize in strengthening enterprise environments and enhancing data governance frameworks for multi-cloud and hybrid ecosystems. My expertise spans third-party risk management, data loss prevention (DLP), vulnerability management, incident response, and regulatory compliance — with extensive hands-on experience deploying enterprise-grade solutions such as Microsoft Purview, BigID, and SecuPi.Highlights of My Work- Directed enterprise data classification, access governance, and policy enforcement for over 9PB of data, eliminating 40% of compliance gaps and reducing data exfiltration incidents by 43%- Engineered threat detection pipelines and real-time security orchestration frameworks, reducing insider threat detection times by 58%- Led a third-party security audit program, managing 500+ vendor engagements, integrating GRC platforms, and achieving a 48% reduction in external risk exposure- Drove vulnerability management, SIEM operations, identity governance, and incident response workflows, delivering measurable improvements in risk posture, detection times, and SLA adherence. Key Areas of Expertise: Data Security & Privacy Governance | Cloud Security (AWS, Azure, GCP)| IAM | DLP | SIEM | Compliance Automation Frameworks: SOC2, ISO 27001, NIST 800-53, PCI DSS, GDPR, HIPAA Tools: MS Purview, BigID, SecuPi, Splunk, Sentinel, Rapid7, CrowdStrike, Qualys Privacy & Compliance | Risk Management | Incident Response | Vulnerability Management | AI Security | Zero TrustI’m open to opportunities as a Data Security Consultant, Cybersecurity Architect, Third-Party Risk Analyst, GRC Analyst, Security Compliance Manager, Cloud Security Consultant, Incident Response Lead, Data Privacy Specialist, or Security Operations Consultant.#Cybersecurity #DataSecurity #CloudSecurity #GRC #InfoSec #Compliance #ZeroTrust #SecurityLeadership #AIsecurity

Experience

1. Data Security Analyst Access Governance & Dynamic Data Masking with Secupi

   Stealth Startup

   Aug 2024 — Present

   Supported the implementation of enterprise data access governance controls using SecuPi, helping enforce dynamic data masking and real-time, role-based access controls for over 7PB of sensitive data in hybrid cloud environments. Assisted in configuring policies to control privileged and high-risk user data interactions across SaaS, cloud, and on-premise platforms.Participated in projects aligning access governance controls with ISO 27001, FedRAMP, and NIST 800-53 frameworks. Contributed to unauthorized access incident reduction by helping refine policy enforcement and performing access reviews. Supported audit readiness by gathering artifacts and generating access control reports.Collaborated with security engineering and governance teams to integrate dynamic masking capabilities for sensitive financial and personal data fields. Monitored access violation reports and worked with incident response to investigate anomalies.Skills: Access Governance, SecuPi, Dynamic Data Masking, Role-Based Access Control, ABAC, FedRAMP, ISO 27001, NIST 800-53, SaaS Security, Cloud Data Protection, Data Privacy, Audit Support, Access Reviews, Privileged Access Monitoring, Data Governance

Education

• North South University

  Bachelor's degree

• Independent University

  Master of Science - MS

Skills

• Enterprise Survey
• Public Speaking
• Teamwork
• Team Management
• Event Planning
• Sales Management
• Team Leadership
• Social Media
• Project Management
• Customer Service
• Social Networking
• Market Research
• Business Development
• Strategic Planning
• Event Management
• Survey Management
• Social Media Marketing
• Monitoring & Evaluation of Climate Change Adaptation
• Powerpoint
• Microsoft Excel
• Brand Management
• Marketing Strategy
• Integrated Marketing
• Survey Research
• Advertising
• Social Awareness
• Public Relations
• Business Strategy
• Survey Methodology
• Microsoft Office
• Business Planning