SCS Cyber Security Consultants Inc.

Cyber Security / Information Security Consulting services:
• vCISO 
• Canadian Government Secret Clearance Level 2
• SA&A Assessor for Canadian Government
• Technology Risk Management
• Cloud Security Risk Assessments
• Security Governance and Compliance
• PCI DSS Advisory Services (SAQ, RoC, AoC), Banking, Petroleum, Merchant, Service Provider
• Information Security Management System (ISMS) Program
• Cyber Security Audit Readiness


Notable clients include: 
TD Insurance
PWC
KPMG
Canadian Federal Government (Statistics Canada, ESDC, SSC, CAS)

Principal Consultant, Cyber Security

TD Insurance

The BISO team is responsible for enabling the secure delivery of products of services for Commercial Platforms as well as delivery of key cyber and technology risk control programs.

Business Information Security Officer

Teranet Inc.

•	Conducted Security Risk assessments of various on-premise applications migrating to Azure and AWS Cloud environments against NIST 800-53 and PCI DSS standards.
•	Analyzing security requirements for public cloud implementation and integration
•	Identifying risks and providing guidance regarding remediation of gaps to facilitate a hardened and sustainable cloud use
•	Provided consulting and participate in business security initiatives; worked with leadership, senior management, and key stakeholders (Architecture, Infrastructure, Development, and Business Lines)  on enterprise, initiatives to improve overall security posture.
•	Coordinated Payment Card Industry Qualified Security Assessor contracts and services by leading assessments and gathering internal information to ensure compliance with all PCI standards.
•	Supported internal and external audits of IT processes, facilitate discussions, manage scope, assist with evidence gathering/sharing progress tracking, and remediation planning and management.
•	Lead Compliance sustainment activities in collaboration with IT Security Team, Networking Team, Firewall Team, and Platform owners; directed technical teams to prioritize and remediate vulnerabilities.

Accomplishments
•	Awarded coveted Teranet’s Values Award for successfully achieving compliance to PCI (Payment Card Industry) Standards as Level 1 Service Provider.
•	Recommended opportunities for process improvement and was assigned lead on initiatives to drive strategy for the team.
•	Reviewed internal processes and created process documents; initiated and administered tasks integral for the function of a new team.
•	Influenced behavior to reduce risk and foster a strong technology risk management culture 
throughout the enterprise

Information Technology Compliance Manager

Canadian Tire Financial Services

•	Lead key strategic projects impacting Canadian Tire Financial services (Canadian Tire Bank), Canadian Tire Corporation (CTC), Part Source, Marks and FGL, Petroleum as it relates to PCI Compliance.
•	Assessed existing controls to determine the level of compliance of complex Merchant and Payments environment to the PCI DSS Standard, report the gaps and recommended the approach to close the gaps.
•	Developed and communicate Project Plans for Part Source, Marks, FGL, Petroleum PCI assessment complete with timelines, approach, and deliverables to Stakeholders including weekly status update meeting with AVP – PCI Enterprise Payments and PCI Governance.
•	Recommended process improvements internally and to the various business partners 

Accomplishments
•	Consulted as subject matter expert and key stakeholder on projects of moderate to high complexity and provided complex analysis and assessment at the functional, business line or enterprise level.
•	Built programs and lead stretch assignments to improve key risk/performance indicators and overall enterprise risk posture; examples include Application Security, Application Internet File Transfers, TLS Remediation, Wired Port Authentication, Issue Management, etc.
•	Interpreted and advised with expert knowledge on cyber risks, business impact, and compliance requirements.
•	Defined, developed, and monitored metrics for on-going technology risk reporting.
•	Increased team productivity by taking initiative to train, develop and mentor new and existing colleagues.
•	Influenced behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

Senior Security Analyst, PCI Governance

CIBC

•	Responsible for testing controls, performing IT and infrastructure reviews on multiple platforms and databases
•	Identify the potential exposures, and present recommendations that are practical and achievable.
•	Review, assess and test against the annual plan of management controls
•	Prepare testing working papers to determine the design and operating effectiveness of   Management's key controls, following a defined framework established by CIBC
•	Define and support implementation of the minimum requirement to assist technology with maintaining a solid management control environment
•	Act as a focal point to the business units for all matters within the controls framework to support effectiveness of the controls and assist the Senior Managers Governance and Control (both Risk Advisory and Control) 
•	Supporting CIBC, the team administered business technology risk assessments, controls design/gap assessments, required controls definition, control procedure appropriateness, vulnerability assessments, contract review, third-party assessments, and expert knowledge advisory services on a broad range of specific technology controls and information security policies, programs, standards, and incidents.

Accomplishments
•	Interpreted and advised with expert knowledge on cyber risks, business impact, global regulatory risk, and compliance requirements
•	Improved information security, risk, and governance capabilities for IT security investments in support of CIBC’s core organizational functions.
•	Defined, developed, and monitored metrics for on-going technology risk reporting.

Information Security Consultant, Technology Governance, Risk and Control

RBC Royal Bank

•	McAfee ePO global enterprise administrator - Administration of McAfee products for RBC Global: ENS, Firewall, Web Control, Drive encryption, Drive and removable media encryption. DLP, Application Control
•	Developed and applied McAfee policy and exclusions
•	Reviewed and responded to alerts and monitored trends

Accomplishments
•	Leading the McAfee DLP project rollout from infancy to completion to over 20,000 assets globally and the development, testing, and deployment of Endpoint Drive Encryption throughout the organization. 
•	Self-starter who took initiative and became cross-trained on all McAfee products
•	Consulted as a subject matter expert and key stakeholder on projects of moderate to high complexity and provided complex analysis and assessment at the functional, business line or enterprise level.

Information Security - Endpoint Security Analyst

Wolseley Canada Inc.

• Merged three regional networks across Ontario into one centralized location
• Project Manager for various IT Infrastructure projects such as File Server migrations in Quebec and Edmonton branches and Oracle Hyperion Planning server design and implementation 
• Extensive Experience with HP Proliant line of servers
• Developed and implemented process to migrate Windows 2003 servers to Windows 2008 nationally
• Documented Processes and created ‘How To’ manuals for IT Department
• Migrated ARCSERVE Backup Servers across Canada to Symantec Backup Exec 12.5

Network Administrator

Harris Rebar

• Implemented software licensing audit using Express Metrix Auditing Software at over 60 sites across North America (600+ nodes). This project provided us with metrics to track all software installed on all PC's and Servers at all locations across North America to ensure we stayed compliant with software licensing. Provided custom breakdown reports through crystal reports. Created and maintained software licensing proof of purchase repository for the organization. 
• Audited and converted remote branches infrastructure across North America to comply with organization standards - connected remote branches network to corporate network using Sonicwall TZ190 VPN appliances.
• Developed project plans using MS Project 2007 and implemented network conversion of remote branch Windows Workgroup environments (Server and clients) to Windows 2003 Active Directory Domain. 
• Rolled out APC Power Chute Network Shutdown UPS software to all remote branches, standardized and secured settings ensured remotes network servers shutdown gracefully due to power outages
• Provided 2nd and 3rd level support over the phone and deskside to over 600+ users across 60 sites (MS Office 2003/2007, Windows XP, Windows Vista, Norton Antivirus, Blackberry, Script Logic, AS400 Client Access, AutoCAD)  
• Network Administration duties - Windows 2003, Blackberry Enterprise Server, Backup Exec 12, Exchange 2003, Norton Antivirus, Print Management, VMware, Express Metrix Software Auditing, Ghost, HP Switches, Cisco Routers, Sonicwall VPN, Barracuda SPAM filter.

Network Support Analyst

Golf Canada Foundation

• Administered and maintained the availability of company computing/telecom resources including Exchange 2003, Windows 2003 Servers, WSUS, DHCP, DNS, SQL 2005, IIS, Dell Power Edge servers, Barracuda SPAM/Web firewalls, Wireless Routers, Cisco Router/Switches, Backup Exec, RAID, Symantec Anti Virus, VPN, Dell Optiplex workstations, Dell Latitude laptops, Blackberry’s, Ghost, HP laser printers, Xerox Network Multifunction Copiers, Nortel Call Pilot, and multimedia equipment. (100+ Users)
• Project Lead for various infrastructure projects 
• Migration Windows 2000 domain to Windows 2003 Active Directory
• MS Exchange 5.5 to Exchange 2003 for corporate communications and calendaring.
• Blackberry Enterprise Server 
• Norton Antivirus Roll Out
• Windows 2000 to Windows XP Pro Desktop migration
• SQL 2000 to SQL 2005 migration for in house Sales System
• Standardization of DELL equipment throughout the organization
• Implemented Alloy Navigator Service Management and Asset Management Software
• Project coordinator for RBC Canadian Open media center network design
• Provide User Support & Training both over the phone and in person
• Managed and mentored junior helpdesk staff
• Monitored network for security breaches, capacity issues, patch management, virus out breaks and connectivity issues
• Maintained IT asset inventory and system documentation using Alloy Navigator
• Developed and implemented IT user best practices policies at the RCGA
• Researched and provided IT solutions to support the continued growth of the association
• Responsible for the design of network backbone at Oakville head office and Calgary location

IT Manager

Cyber Security Risk Consultant CISA, CISM, CCSP, PCIP, ITIL

A Cyber Security Risk Consultant with over 20 years of progressive experience in financial services, retail, federal government, and eCommerce industries. 

I provide leadership in developing IT Risk, IT Security, and Audit strategies for large, medium, and small organizations.

My strengths include aligning IT strategies with business objectives and creating a culture that optimizes performance. I have proven ability to drive enterprise security remediation, governance, compliance, and ultimately to reduce IT risk to acceptable levels. I have extensive experience leading organizations to adopt and practice a proactive security and risk management strategy.

Taplio

Sanjay S.'s Linkedin Analytics

Sanjay S.

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Sanjay S.'s Linkedin Analytics

Sanjay S.

Want to drive more opportunities from LinkedIn?

Sanjay S.'s Linkedin Analytics