Summary
Overview
Work History
Education
Skills
Websites
Certification
Additional Information
Languages
Timeline
Generic

Manoj Shahi

DANVILLE,CA

Summary

Accomplished Senior Cybersecurity Executive & Global Director with 25+ years of driving strategic cybersecurity initiatives, risk management, and compliance programs across diverse industries. Recognized for cross-functional team leadership, implementing robust security frameworks, and safeguarding critical assets for seamless business continuity. Proven track record in reducing security incidents by up to 50%, fortifying cyber resilience by 30%, and achieving 100% compliance with major data protection regulations.

Overview

25
25
years of professional experience
8
8
Certification

Work History

Principal Security Architect


Lucid Motors
05.2023 - 09.2023
  • Led the design and deployment of robust zero-trust security architectures, prioritizing least privilege access and continuous authentication.
  • Orchestrated comprehensive security operations, including vigilant threat monitoring, rapid incident response, and proactive vulnerability management.
  • Provided strategic guidance, and in-depth risk assessment to fortify security measures aligned with zero-trust principles.
  • Spearheaded zero-trust security framework implementation, reducing lateral movement by 70%.
  • Slashed incident detection time by 50% through cutting-edge threat monitoring mechanisms.


Senior Global Director, Cyber Security/CISO


Westbridge Capital
05.2022 - 12.2022


  • Developed and executed a robust global strategy covering governance, incident response, architecture, and operations, aligning with regulatory standards and best practices.
  • Established and managed a Security Governance program, enhancing cross-business risk visibility and compliance with SEC ARP, SOX, CCPA, SOC2, and other key regulations.
  • Established Security Governance program, ensuring cross-business risk visibility and compliance.
  • Achieved a 40% reduction in average incident resolution time through streamlined protocols.

Director Security Architecture, Privacy & Complian

Avail Medsystems
04.2020 - 12.2021


  • Orchestrated and supervised incident response initiatives, ensuring swift and effective handling of security incidents and breaches within Avail Medsystems' telemedicine infrastructure.
  • Developed a comprehensive risk organization overseeing Information Security, Privacy, and Compliance across diverse platforms (OT/IoT, IA/ML, Procedural Telemedicine, AWS, Azure, GCP, O365, CASB). Collaborated closely with the CTO, fostering strategic partnerships with leading auditors and industry allies, such as Coalfire, CCO, Barr, and Vanta, to fortify security measures.
  • Enhanced the global Cybersecurity budget by 35%, fortifying infrastructure against evolving threats.
  • Orchestrated attainment of ISO 27001, HIPAA/HITECH, FDA, GLBA, and SOC 2 Type II certifications.

Head Security Architecture, Privacy & Compliance

Proteus Digital Health
10.2017 - 03.2020
  • Directed security architecture, threat management, and compliance oversight for IoT-driven digital medicine at Proteus Digital Health. Orchestrated stringent security controls across diverse environments (OT/IoT, AI/ML, AWS, Azure, GCP, O365, CASB) to ensure regulatory adherence and data protection.
  • Pioneered the establishment of an advanced Security Operations Center (SOC) integrating top-tier solutions for proactive threat management.
  • Led certifications, audits, and strategic partnerships with Reciprocity, Allgress, BoardVantage, and Protiviti to fortify compliance measures and security frameworks.
  • Led security architecture for IoT-driven digital medicine, achieving comprehensive regulatory adherence.
  • Established a Global Vulnerability Management Program addressing 95% of critical vulnerabilities.

Senior Director, Security Operations & Incident Re

Danske Bank
10.2016 - 09.2017
  • Led comprehensive restructuring of security operations and incident response frameworks post-major incidents, fortifying control functions, and mitigating security risks at Danske Bank.
  • Oversaw incident response strategies and security operations, fostering a proactive security culture, and mentoring teams for effective execution.
  • Developed robust protocols aligned with industry best practices and regulatory standards, optimizing incident detection, response, and recovery.
  • Streamlined collaboration with diverse teams and external partners to enhance incident response efficacy and fortify security measures across the organization.
  • Reported directly to the COO and Board Risk Committee, leading the transformation of security operations and programs.
  • Restructured security operations post-major incidents, slashing response times by 50%.
  • Ensured 100% compliance with European Banking Authority, GDPR, SOX, PCI, etc.

Chief Information Security Officer

SGIC Cloud Tech
09.2013 - 10.2016
  • Led the conceptualization and establishment of a robust global information security and compliance program, aligning strategies and infrastructure with industry best practices.
  • Directed risk assessments, audits, and regulatory compliance efforts to ensure alignment with cybersecurity laws and frameworks. Orchestrated incident response teams, refining response protocols, and ensuring swift resolution of security incidents.
  • Oversaw SOC/SIEM operations, implemented threat intelligence, and continuously monitored security systems.
  • Developed robust governance frameworks, cultivating a culture of security, and provided strategic guidance to executive leadership.
  • Pioneered a global information security program, achieving ISO 27001, HIPAA, GDPR certifications.
  • Optimized incident response, reducing resolution time by 40% and enhancing threat detection by 50%.

Senior Global Director, Incident Response

Nike
01.2012 - 08.2013
  • Recruited by CISO to lead the incident response function on a global scale, ensuring the organization's ability to effectively detect, respond to, and recover from security incidents.
  • Responsible for providing leadership and strategy, incident response management, team management and development, incident analysis and reporting, collaboration and stakeholder management.
  • Reduced incident response times by 60%, fortifying Nike's readiness against cyber threats.
  • Led resolution of 80% critical incidents, safeguarding operations and preserving Nike's reputation.

Principal Program/Portfolio Management

Kaiser Permanente
10.2010 - 12.2011
  • Provided program leadership to 100+ cybersecurity, audit, and compliance professionals in ensuring comprehensive risk management and regulatory compliance for the protection of patient health records, and delivery of information security services.
  • A regular presenter at Board of Directors meetings providing C-level updates regarding Cybersecurity and regulatory compliance.
  • Optimized Project Portfolio to better align business and IT, forged accountability, enhanced IT governance, and reduced IT Spend (reduce 18% | $20M).
  • Increased Portfolio delivery, collaborations, and revenue 65%; increased response to RFP 55%; decreased operational cost; project standardization and reporting.

Education

Master of Science - Zoology

Magadh University
India
03.1987

Bachelor of Science - Zoology

Magadh University
India
03.1985

Skills

  • Executive & Board Reporting
  • Cybersecurity Strategy & Leadership
  • Security Architecture & Risk Management
  • Compliance & Audit Management
  • Incident Response & Crisis Management
  • Team Leadership & Cross-functional Collaboration
  • Governance, Risk & Compliance (GRC)
  • Project & Portfolio Management
  • IT Service Delivery and Support Management (ITIL)

Certification

Certified Information Security Manager (CISM)

Certified ISO 27001 Lead Implementer

Certified Sarbanes-Oxley Expert (CSOE)

ITIL® Intermediate Certificate in IT Service Transition

ITIL® Intermediate Certificate in IT Service Design

ITIL® Foundation Certificate in IT Service Management

Scrum Master Certified

Additional Information

Motivated by the desire to help people and serve the community. Believes in always treating others with respect, doing the right thing and paying it forward.

Languages

English
Native or Bilingual
Hindi
Native or Bilingual

Timeline

Principal Security Architect


Lucid Motors
05.2023 - 09.2023

Senior Global Director, Cyber Security/CISO


Westbridge Capital
05.2022 - 12.2022

Director Security Architecture, Privacy & Complian

Avail Medsystems
04.2020 - 12.2021

Head Security Architecture, Privacy & Compliance

Proteus Digital Health
10.2017 - 03.2020

Senior Director, Security Operations & Incident Re

Danske Bank
10.2016 - 09.2017

Chief Information Security Officer

SGIC Cloud Tech
09.2013 - 10.2016

Senior Global Director, Incident Response

Nike
01.2012 - 08.2013

Principal Program/Portfolio Management

Kaiser Permanente
10.2010 - 12.2011

Master of Science - Zoology

Magadh University

Bachelor of Science - Zoology

Magadh University
Manoj Shahi