GILLIAN D. SHAW
MASSACHUSETTS'S SECRETARY OF THE COMMONWEALTH
Swampscott,MA
3
Certification
14
Years of experience
Results-driven Information Security Engineer with expertise in implementing robust security frameworks and enhancing compliance. Key contributions include the rollout of vulnerability management programs and leading incident response exercises that significantly improved security posture and organizational resilience.
Work History
CYBERSECURITY ENGINEER, CONTRACTOR
2 Years 8 Months- Implemented enterprise-wide Single Sign On (SSO) and Multi-factor Authentication(MFA) to strengthen identity and access management.
- Supported rollout of vulnerability and configuration management programs to improve security posture and compliance.
- Led incident response tabletop exercises and authored IT crisis communication plan to enhance organizational readiness.
- Directed data discovery and classification initiatives to strengthen data governance and compliance.
- Developed a 5 year infrastructure and cybersecurity roadmap aligning technology strategy with organizational goals.
- Collaborated with senior management, officials, and political stakeholders across multiple levels of government on cybersecurity initiatives.
- Managed asset inventory, toolset coverage, and security metrics reporting on same.
- Partnered with IT teams to secure databases, hardware, workstations, network devices and hypervisors to meet CIS hardening Standards.
- Created reports summarizing current threats, vulnerabilities, and proposed solutions to inform management's decision-making.
SR CYBERSECURITY ENGINEER
7 Years 11 Months- Developed and maintained Enterprise Security standards, guidelines, and frameworks in accordance to industry best practice (NIST 800-53, DISA STIGS, CIS, CRI)
- Developed and managed security requirements for security architectures, including cloud technologies, ensuring compliance with best practices.
- Performed risk assessments of Enterprise applications and processes with respect to defined risk thresholds and regulatory requirements and managed the Enterprise's Cyber Risk Register
- Identified and assessed emerging security threats, recommending mitigants to enhance overall security posture.
- Developed and implemented a Risk Assessment Methodology for Boston Private's information assets and Software Development Life Cycle (SLDC) in a decentralized application environment
- Developed, implemented, and managed Boston Private's Plan of Action & Milestone (POAM) strategy and process to mitigate self identified issues
- Interface with Information Security Senior Management, Operations, and Engineering to continuously assess and report on the security posture of the Enterprise
- Worked closely with cross-functional peers to ensure security best practices have been implemented for people, processes, and technology
INFORMATION SECURITY ENGINEER
3 Years- Led projects ensuring compliance with government regulations and addressing emerging information security trends.
- Conducted cyber forensic investigations, providing critical support for legal and compliance initiatives.
- Monitored network traffic for vulnerabilities and attacks.
- Investigated suspicious activities by scrutinizing email, web, and endpoint activities to enhance data loss prevention.
- Completed projects that assessed and tested current department policies.
- Tested and deployed technical projects, including reporting tools, and did so with minimal supervision.
- Collected evidence for legal department in response to summons and subpoenas.
Education
Bachelor of Science - Criminal Justice (Computer Science)
Skills
Risk Assessment
Cyber Forensics
Data Loss Prevention
Cloud Security
Computer Security
Security Policy Development
Network Architecture
Identity management systems
Security design
Strategic planning
Operating systems
Encryption
Certification
- CISSP
- CCSP
- CISM
Timeline
CYBERSECURITY ENGINEER, CONTRACTOR
MASSACHUSETTS'S SECRETARY OF THE COMMONWEALTH
02.2024 - CurrentRead More
SR CYBERSECURITY ENGINEER
Silicon Valley Bank
02.2016 - 01.2024Read More
INFORMATION SECURITY ENGINEER
Tufts Health Plan
01.2013 - 01.2016Read More
Northeastern University
Bachelor of Science from Criminal Justice (Computer Science)
Read More