Shannon Shields

Position Overview: Directed end-to-end IAM, PAM, and GRC delivery for a Fortune Global 500 client. Managed cross-functional security teams across identity operations, threat response, access certification, and compliance reporting.

Key Duties:

• Led quarterly access certification campaigns and audits to ensure SOX/SOC compliance across all business units.
• Enforced access governance and SoD controls using SailPoint IIQ and Azure AD; partnered with auditors and application owners to resolve findings.
• Oversaw privileged access strategies in CyberArk and Centrify, ensuring proper onboarding, entitlement reviews, and recertifications.
• Delivered executive reporting on SLAs, KPIs, and control maturity, enabling data-driven compliance decisions.
• Generated $3M in additional client revenue by aligning GRC goals with tailored security solutions.
• Built high-performing teams, documented governance frameworks, and improved audit readiness across the security function.

Position Overview: Led global endpoint protection and vulnerability response operations for enterprise environments. Enabled audit alignment through process improvements, policy enforcement, and 24/7 delivery teams.

Key Duties:

• Directed threat response, patching cadence, and risk mitigation for security vulnerabilities across on-prem and cloud platforms.
• Collaborated with internal audit, compliance, and SOC teams to remediate vulnerabilities and provide evidence for external audit cycles.
• Created documentation and dashboards to align vulnerability trends with compliance expectations (HIPAA, ISO).
• Achieved $500K annual savings by decommissioning legacy infrastructure and streamlining operational tooling.

Position Overview: Oversaw security infrastructure operations and compliance-aligned IT delivery within a regulated financial environment.

Key Roles and Responsibilities:

• Led enterprise upgrades of SIEM, secure gateways, and McAfee endpoint platforms to support bank security and regulatory goals.
• Supported risk assessments, policy alignment, and documentation efforts for internal and external audits (SOX/GLBA).
• Managed proxy, MDM, antivirus, and hardware modernization projects across multiple departments.
• Partnered with risk, compliance, and legal functions to align IT operations with enterprise governance expectations.