Sanjay Sharma Email & Phone Number

Vancouver, British Columbia, Ca

As the Chief Information Security Officer (CISO) at Zafin, I have a crucial role in ensuring the security and integrity of our technology solutions. This includes overseeing developing and implementing comprehensive cybersecurity strategies to safeguard our clients' sensitive financial data. Equally important is my responsibility to maintain regulatory compliance, which requires collaboration with various departments. I contribute to Zafin's mission of delivering innovative and secure banking technology solutions by enhancing security measures and responding to emerging threats. I am committed to fostering a culture of security and resilience within the organisation.

Us

InCyber 2023OASISPMI- PD DayInCyber 2024

Markham, Ontario, Ca

As the Senior Vice President and Chief Information Security Officer, my main responsibility is to shape our technical strategy and ensure operational excellence in an ever-changing organizational landscape. This involves creating and implementing strategic technology risk management practices to strengthen our security resilience, ensuring compliance with regulations, and promoting a culture of awareness and compliance. I work closely with the IT and engineering teams to integrate security measures into infrastructure and application designs, conduct regular penetration testing and vulnerability assessments, and administer ongoing security training programs. During my time here, I led the expansion of our cybersecurity services, resulting in a significant revenue increase. I also pioneered our organization's first-ever threat intelligence program and oversaw the development of a robust Security Operations Center (SOC) from scratch. My approach to policy development and enforcement aligns us with industry standards and regulatory requirements, making us a leader in compliance.

Toronto, On, Ca

As Head of IT Risk & Cybersecurity, I was handpicked to direct the enterprise risk and cybersecurity unit, providing critical support and risk insights to the Board of Directors. My tenure was marked by advancements in reporting capabilities, deepened business insight reporting, and optimization of IT risk activities. I led a diverse team in executing complex IT projects, including cyber and cloud migration strategies, and Zero Trust Architecture and Threat Hunting initiatives. Noteworthy accomplishments include partnering with vendors to develop comprehensive Master Services Agreements, enhancing monitoring capabilities, refining incident response strategies, and introducing data-driven approaches leveraging advanced analytics. I crystallized the focus on threat response by designing and implementing a 3-year cybersecurity program and introducing Quarterly Incident Response (IR) tabletop exercises, thereby elevating our organization's cyber defenses.

Toronto, Toronto, Ca

During my tenure as the Cybersecurity Strategy & Transformation Lead at PwC Canada, I provided strategic leadership and managed key cybersecurity projects to drive organizational change. I masterminded cybersecurity strategy, risk management frameworks, and security architecture for large-scale transformations, aligning them with NIST standards and industry best practices. Notably, I delivered target state security architecture and risk monitoring frameworks for the financial services industry, ensuring compliance with regulations such as PCI-DSS and PIPEDA. Additionally, I enhanced clients' ability to manage third-party cyber risks effectively by designing a third-party risk management framework leveraging system and organization controls (SOC). My role also involved coordinating responses to RFPs for cybersecurity transformations and overseeing projects encompassing asset management, IAM, network security, and third-party cyber risk management. I drafted and presented C-level cybersecurity playbooks, providing strategic guidance and insight to senior leadership in the utility industry.Accomplishments:• Delivered target state security architecture and risk monitoring frameworks for the financial services industry, ensuring compliance with regulations.• Enhanced clients' ability to manage third-party cyber risks effectively by designing a third-party risk management framework leveraging system and organization controls.

At Deloitte LLP Canada, I assumed the role of Managed Security Services Senior Advisor, where I provided leadership within security operations. I directed teams responsible for incident and service management with a focus on cloud-based security services. Employing a risk-based approach, I formulated strategies for secure cloud enablement, endpoint protection, and architecture for secure zones. One of my notable achievements was assessing security vulnerabilities for a large Australian bank and implementing a robust DDoS protection strategy. Additionally, I managed multiple vendors and partnerships, contributing thought leadership in DDoS mitigation and cloud access security.Accomplishments:• Implemented a robust DDoS protection strategy for a large Australian bank.• Contributed thought leadership in DDoS mitigation and cloud access security.

Toronto, On, Ca

Recipient of Tannah H. Schulich MBA Scholarship , and Dean's Entrance AwardLed the Strategy Study Group of six MBA students to define growth strategy of a logistics firm

In

— Improved work efficiency of 21 military units by implementing IT projects valued up to $3.5M, including secure ID access management system implementation in <4 months.

New York, Ny, Us

— Enhanced real-time awareness of field incidents by leading a multinational team of 11 military officers to audit Office of Military Affairs (OMA) reporting and working procedures.

In

New York, Ny, Us

Leading Innovative Change, Organizational Leadership

Master Of Business Administration (Mba)

Crisis/Emergency/Disaster Management

Master'S Degree, Defence And Strategic Studies

Bachelor Of Technology - Btech, Telecommunications Engineering And Information Technology

Military Training

Bachelor'S Degree, Bachelors Of Science

Education record