Zoraid Bokhari

Director IT Infrastructure Security & Governance @Enhance Health

Fort Lauderdale, FL, US

Developing and implementing a comprehensive IT security strategy that aligns with the organization\'s goals and objectives.Establishing and maintaining IT governance frameworks, policies, procedures, and standards to ensure compliance with industry regulations and best practices.Identifying, assessing, and managing IT security risks and vulnerabilities. Develop risk mitigation plans and strategies.Designing and implementing security measures to protect the organization\'s IT infrastructure, including networks, servers, data centers, and cloud environments.Developing and overseeing an incident response plan to effectively address and mitigate security incidents and breaches.Implementing security awareness training programs for employees to educate them about security best practices and reduce human-related security risks.Ensuring compliance with relevant regulatory requirements (such as GDPR, HIPAA, PCI DSS, etc.) and industry standards (like ISO 27001, SOC2, HITRUST, NIST) etc.Conducting regular security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement.Developing and managing the IT security and infrastructure budget, ensuring that resources are allocated efficiently to meet security objectives.Building and leading a team of security professionals, including security analysts, engineers, and administrators, to execute security and governance initiatives effectively.Establishing reporting mechanisms for security incidents and breaches, including communication with senior management and relevant stakeholders.Staying current with emerging security threats, technologies, and best practices. Continuously improve security processes and procedures.Maintaining comprehensive documentation related to security policies, procedures, incident response plans, and security architecture.Effectively communicating security and governance matters to executive leadership and other stakeholders.

Massachusetts Institute of Technology

Cyber Security & Compliance

Florida Atlantic University

Masters in Cybersecurity & Information Assurance