Summary
Overview
Work History
Education
Skills
Timeline
SoftwareEngineer

Amit Majithia

Elgin,IL

Summary

Amit is an experienced senior leader with over 5 years of experience within the consulting, e-commerce, non-profit, and healthcare areas. He has helped develop cybersecurity programs from the ground up of a 5,000+ global organization and a non-profit organization with a national footprint. He is a detail-oriented, results driven, client focused professional that has developed strong relationships with high-level executives of various PE firms within the United States and has helped develop and implement cybersecurity policies, procedures, and frameworks for organization of various sizes and concentrations.

Overview

10
10
years of professional experience

Work History

Director of Cybersecurity Services

7 Layer Solutions
Schaumburg, IL
03.2020 - Current
  • Lead or co-lead security certification and periodic audit initiatives (i.e., internal audits, SOC 2, ISO 27001) internally and for clients
  • Develop and maintain a global IT security strategy, framework and roadmap for internal organization as well as assigned clients
  • Assist clients with articulating security frameworks (i.e., SOC 2, ISO 27001, NIST CSF, CIS, etc.) and its relevancy to risk management and impact to IT policies and procedures
  • Partner with client IT teams to drive the design, build, implementation, and compliance monitoring of security controls for enterprise infrastructure and applications for on-premises and cloud architecture in support of security framework initiatives
  • Conduct gap assessments to identify and recommend mitigation steps for security gaps in existing and proposed architectures
  • Manage and build strong relationships with security partners, vendors, auditors, and clients
  • Coordinate with client’s functional and departmental leaders to ensure changes required by new and upcoming applicable security frameworks and cybersecurity remediation efforts are considered when building departmental budgets and plans
  • Maintain an understanding of current policies, procedures, standards, and supporting technologies, and educating staff accordingly, to effectively identify potential cybersecurity risks and alternatives to mitigate cybersecurity risk exposure leveraging security best practices and technology and provide necessary guidance to clients
  • Participating in the security incident process internally and affected clients
  • Responsible for creating a new deliverable and policy framework for the cyber vertical that was utilized with pre-close due-diligence and other security assessment for high-value PE firms and their portfolio companies
  • Collaborate with other 7 Layer consultants or client MSPs / IT Department representatives, contribute cybersecurity expertise to produce holistic IT due diligence assessments to be factored into PE firm’s portfolio activity
  • Provide cybersecurity advisory, compliance consulting, and vCISO services for enterprise clients, ranging from pre-close due-diligence security assessments, internal security assessments, personnel suggestions, policy definition/adaptation, and assistance in adherence to defined compliance / regulatory requirements
  • Document current-state review of existing security organization(s), including their controls, processes, and technologies, to deliver key findings and recommendations to executives
  • Develop implementation strategies and roadmaps to help clients achieve compliance with industry-accepted frameworks
  • Mentor other consultants on projects and act as lead on workstreams
  • Act as leader in emerging cybersecurity technologies and consulting tactics through attending industry events, conducting table-top exercises, and obtaining industry recognized and leading certificates.

Systems Engineer

Feeding America
Chicago, IL
07.2020 - 03.2021
  • Assisted and/or lead efforts on crafting security policies and procedures
  • Worked with IT leadership and Infrastructure to manage vulnerability assessments and remediation efforts
  • Conducted security audits to determine password policy compliance, endpoint protection, privileged access, etc
  • Helped craft and enforce standard configuration for Windows servers and workstations as well as Cisco networking gear
  • Worked with IT leadership to conduct annual IT Risk Assessment process that roles into the organizations risk management process
  • Evaluated security technologies as needs are identified
  • Be able to work with a project manager and system engineers as necessary to implement new security technologies and standards
  • Worked with Managing Director to continue to develop and enhance Feeding America’s cybersecurity practice
  • Cultivated and disseminated knowledge of security best practices
  • Responsible for identifying and onboarding of an MSSP provider which mitigated one of the organization’s biggest gaps in East-West Visibility of servers
  • Lead Incident Response team in preventing the spreading of a discovered threat within the environment in an effort to mitigate the threat across the environment, remove the threat, and placing in new mitigation methods.

Information Security Operations Specialist

Arjo
Addison, IL
10.2016 - 07.2020
  • Served as North American Information Security Contact within global IT Operations Team
  • Applied NIST and ISO 27000 frameworks to adapt to the Security Strategy and global polices of the organization
  • Carried out Technical Vulnerability assessments of IT systems and processes, identifying potential vulnerabilities and make recommendations to control any risks
  • Worked closely with CISO to assist and provide input to ensure policies and procedures are effective and adhered to and to be proactive in making recommendations to policies and procedures especially in areas concerning HIPAA, GDPR, etc
  • Managed Patch-Management process and drove compliance
  • Assisted with alignment and governance of Security applications including IDA, IPS, Advance Threat Protection, Symantec E-Mail Security, McAfee Anti-Virus, Security Incidents and Event management (SIEM)
  • Created and maintain documentation for IT Security
  • Lead the security incident response and coordinating team members and third-party teams
  • Traveled to different sites domestically and internationally to conduct IT Surgeries and IT Security Presentations to crowds of 10-200 people which included high-level management
  • Responsible for overseeing the security operations of the Global IT Services and Platforms ensuring compliance to the firm’s IT Security Policies across On-Prem, Data Centre, Hosted, SAAS/IAAS and Cloud environments
  • North American Project leader on the I.T
  • Security and Operations in a project to split the company into two individual companies: 5,500+ endpoints, 500+ servers
  • Utilized tools on Kali Linux OS for internal penetration testing and assessments
  • Advised on and manage any PEN tests or vulnerability testing, run vulnerability scanning and manage any remediation actions
  • Responsible for decreasing the amount of successful phishing attempts in half within North America through presentations, user engagement, and implementation of MFA.

Help Desk Support/KeepStock Support

W.W. Grainger
Niles, IL
01.2016 - 10.2016
  • Provided prompt and professional technical assistance and support for incoming calls
  • Maintained and provided specific notes of all troubleshooting steps using the ServiceNow ticketing system
  • Built and maintained a strong bridge of communication between users and higher tiered teams for proper handling and support of any escalated tickets
  • Trained new hires and developed PowerPoint presentations and documents for training
  • Troubleshot network connectivity between Windows based client devices and connection to live server.

Retail Personal Banker

Fifth Third Bank
Streamwood, IL
03.2015 - 01.2016
  • Discussed and analyzed needs and requirements with customers for financial products and services
  • Analyzed service and sales employees, ensuring compliance and high-quality customer service

Technical Support Executive

WGC USA Inc
Franklin Park, IL
03.2013 - 03.2015
  • Utilized strong problem-solving methods to pinpoint and solve in house network connectivity issues
  • Ran in-house hardware and software diagnostics on computers, printers, and other devices
  • Troubleshot and resolved configuration issues with business-to-business software such as QuickBooks and eCC
  • Maintained active employee database and provided new hardware training for new hires
  • Installed patches according to scheduled maintenance for applications within Windows operating system
  • Provided technical assistance and instructions in Spanish, Hindi, and Gujarati as needed on a per customer/user basis

Education

Master of Science - Cybersecurity

DePaul University

Bachelor of Science - Network and Communications Management

DeVry University
Addison, IL

Skills

  • NIST Cybersecurity Framework, ISO 27001, CIS Framework
  • Identity and Access Management
  • Third-Party Risk Management / Vendor Risk
  • IT Security Policies and Procedures Compliance
  • Client Communication and Relationship Management
  • Network Systems and Security
  • Third-Party Risk Management / Vendor Risk Management
  • Incident Response / Disaster Recovery / Business Continuity Policy Development

Timeline

Systems Engineer

Feeding America
07.2020 - 03.2021

Director of Cybersecurity Services

7 Layer Solutions
03.2020 - Current

Information Security Operations Specialist

Arjo
10.2016 - 07.2020

Help Desk Support/KeepStock Support

W.W. Grainger
01.2016 - 10.2016

Retail Personal Banker

Fifth Third Bank
03.2015 - 01.2016

Technical Support Executive

WGC USA Inc
03.2013 - 03.2015

Master of Science - Cybersecurity

DePaul University

Bachelor of Science - Network and Communications Management

DeVry University
Amit Majithia