Sam M Email & Phone Number

Toronto, ON, CA

Toronto, Ontario, Canada

• Developed and implemented the organization's GRC framework – ISO 27001 and NIST, including policies, procedures, and risk assessment methodologies.
• SPOC of Risk Register: Reviewed existing entries; performed Asset identification, evaluation; Vulnerability assessment, Risk assessment and documented ISMS controls after thorough discussions and reviews with.
• Reviewed and Analyzed Inherent Risk Rating, Control Operating Effectiveness and Residual Risk Rating in the Risk Register and identified High Focus areas of improvement where the RRR is ‘High’ even after implementing.
• Conducted regular risk assessments to identify and prioritize potential risks and vulnerabilities.
• Collaborated with internal stakeholders to develop risk mitigation strategies and action plans.
• Monitored and reported on compliance with regulatory requirements and internal policies.

Montreal, Quebec, Canada

• Implemented the organization's compliance program, ensuring adherence to PCI-DSS, SOC2, SOX, ISO 27001, and NIST standards.
• Conducted regular risk assessments and vulnerability assessments to identify potential security gaps, providing actionable recommendations for risk mitigation.
• Worked with business process owners of an assigned major business unit to identify business unit objectives and key risks and perform risk assessments.
• Worked with the Manager, Senior Manager, Director, and the AVP – Internal Audit on planning, executing, and reporting audit work.
• Implemented Beauceron Security (SaaS) platform for all Bell employees to provide Security education focusing on human side of security. Helped in designing awareness programs through surveys, computer-based training.
• Prepared and maintained repository for ISMS documentation including ISMS Manuals, Process Plan, SOP’s, Records.

Montreal, Quebec, Canada

• Designed, implemented, and maintained complex network infrastructures, including routing and switching devices.
• Monitored and maintained network systems and infrastructure, ensuring maximum uptime and performance.
• Configured and managed firewalls to enforce security policies and protect the organization's network resources.
• Conducted regular security assessments and vulnerability scans, identifying and addressing weaknesses in the network infrastructure.
• Installed, configured and troubleshooted the firewalls such as Palo alto, Juniper and check point
• Implemented network monitoring and management tools to proactively identify and resolve network issues