Shivani D.

About Shivani D.

Impact-Driven Cybersecurity Leader with 12+ years of experience protecting the world’s most innovativeorganizations. Specializing in Enterprise GRC, Risk Management, Product Security, and Responsible AI, I design and execute transformative strategies that not only safeguard critical assets but drive business growth and resilience at scale.Skilled in navigating complex compliance landscapes (SOX, NIST, ISO 27001, PCI) and embedding security across product life-cycles, multi-million-dollar M&A integrations, and enterprise ecosystems, I turn cybersecurity into a competitive advantage. Passionate about Security by design, I lead teams to innovate with confidence, fostering long-termsuccess and business agility. Enterprise GRC – Leading large-scale Enterprise GRC initiatives, integrating security seamlessly into business operations, and enhancing resilience across the organization. Risk Management – Expert in implementing risk frameworks and governance programs, streamlining processes, optimizing risk management and improving data-driven decision-making. Product Security – Partnering with product teams to identify, assess, and mitigate risks in high-impact products to ensure secure product development and proactive risk management. M&A Risk – Leading high-impact assessments for Mergers & Acquisitions ($100M+) to identify security gaps, mitigate risks, and ensure smooth post-merger integration. Compliance Leadership – Spearheaded ISO 27001, NIST certification initiatives, implemented robust security frameworks, and ensured regulatory compliance, reducing non-compliant security practices by 30%. CORE COMPETENCIES: Cybersecurity Governance & Strategy | Governance, Risk and Compliance (GRC)| Information Assurance | Security Policy & Standards | Strategic planning | Executive-Level Risk Reporting Third-Party Risk Management (TPRM)| Vendor Security Governance Regulatory Compliance | SOX | ISO 27001 | NIST 800 | PCI DSS Security Exception Management | Policy & Control Frameworks | Remediation Strategies Identity & Access Management (IAM)| Zero Trust Security | Privileged Access Management Mergers & Acquisitions (M&A) Security | Risk Assessments | Threat Modeling | Stakeholder engagement Crisis Management | Business Impact Analysis (BIA)| Disaster Recovery Planning Security Awareness Programs | Cybersecurity End user training | Phishing Simulation Campaigns | Security by Design

Experience

1. Security Risk Specialist, Enterprise Risk and Compliance

   Amazon

   May 2025 — Present · Seattle, WA, US

Education

• University of Mumbai

  Bachelor of Engineering, Information Technology

• The Johns Hopkins University

  Master's degree, Cybersecurity

Skills

• Risk Assessment
• IT Audit
• Business Continuity Planning
• Iso 27001
• Business Impact Analysis
• Incident Management
• Information Security Management
• Risk Management
• Compliance Management
• Information Security
• IT Governance
• Process Improvement