Scott Shapiro Email and Phone Number

Oversee and guide corporate and client security programs for offerings in the health and human services segment.• Security Standards/Frameworks: Developed and implemented and audited comprehensive governance documentation, ensuring alignment with industry based regulatory standards as well as client and company policies/procedures.• Risk Management: Conducted assessments of systems and accounts to identify vulnerabilities, compliance gaps and outline areas for proactive actions. • Cross-Functional Facilitation: Worked in concert with corporate, account, client and service delivery groups to provide a comprehensive security solution rooted in compliance, best practices, awareness and trust.

Designated to drive Payment Card Industry Data Security Standard (PCI-DSS) audits and ongoing compliance projects for European Union General Data Protection Regulation (GDPR)• Framework Compliance: Compiled, evaluated, and leveraged outputs from multiple resources to track the success of remediation and mitigation endeavors.• Cloud Compliance: Evaluated existing practices and processes to identify areas for growth, development, and improvement.• Privacy: Led the analysis and implementation of a GDPR compliance program across multiple EU client organizations.

Reviewed, revitalized and augmented existing disaster recovery and business continuity plans.

Drove efforts to reduce risk profile across estate while developing principles and methodologies to maintain industry and organizational standards.• Key Performance Indicators: Compiled, evaluated and leveraged outputs from multiple resources to track the success of remediation and mitigation endeavors.• Process Engineering: Evaluated existing practices and processes to identify areas for growth, development and improvement.• Cross Team Facilitation: Worked with multiple organizational teams to examine, characterize and set attainable goals.

Managed efforts to align logging and monitoring compliance with internal standards and ISO best practices frameworks. Coordinated evidence collection/assessment and remediation program. • Control Assurance: Reviewed, revised and implemented changes to streamline processes, improve functionality and enhance tracking/reporting. • Business Collaboration: Coordinated with business POCs for prescribed milestone adherence and evidence delivery.

Information Security Coordinator/Service Delivery AnalystLed organizational push to reinvigorate and implement compliance by means of updated policies and procedures for one of the global leaders in the beverage industry. Formulated continuous security improvement plan meet and ultimately exceed regional and global standards. Instituted a “best practices” program with monthly and quarterly monitored standards.• Procedural Development : Recognized and built on areas of opportunity to generate new procedures and advance existing ones so they aligned with company information security standards. • Change Management: Managed change approval board to direct and align with stringent global company requirements. • Business Continuity: Amended and enhanced existing business continuity plan to provide a comprehensive source of information for mission critical systems, emergency contacts, service vendors, security redundancy and safety procedures.

Principal strategist for information security strategy at a firm specializing in data analytics, benchmarking, advisory services, data warehousing, and regulatory solutions. Direct concurrent technology projects, including data system development, in line with SOC 2 Type II/HIPAA/HITECH/PHI/NIST/FISMA/PCI-DSS/PII standards, regulations, and requirements. Design and generate risk analysis reports abstracted from multiple data sources. • Client Service: Deliver elite customer service through responsive interfacing, problem assessment, prompt determination of corrective actions and comprehensive follow-up.• Audits/Regulatory Compliance: Key leader in all aspects of auditing, assessments, and strategy formulation to bring clients into good standing with all applicable regulations, standards, and information security business practices.• Project Management: Integral participant in cross-functional team building for emerging applications, including a migration from EOL Imperva appliance to Imperva DAM/WAF VM.

Conceptualized, developed and integrated solutions for healthcare clients to structural data security issues, resulting in decreased labor-intensive record-keeping, higher productivity and increased accuracy. Architected networks and programmed/set-up multiple devices, programs, networks, and switches.• Security System Management: Reimagined various aspects of security management systems through configuration and installation of networks, firewalls, and switches.• Value-Added Consulting and Individualized Client Strategy: Modernized projects to fit client needs and conducted thorough analysis/investigation to recommend optimal system-wide IT solutions.Highlights include:• Security System Management: Reimagined various aspects of security management systems through configuration and installation of networks, firewalls, and switches.• Value-Added Consulting and Individualized Client Strategy: Modernized projects to fit client needs and conducted thorough analysis/investigation to recommend optimal system-wide IT solutions.

Excelled at servicing major Pan-American accounts with impeccable IT consulting and technical support; designed and implemented large-scale strategies for a diversity of client projects, from project planning to completion. Developed in-depth understanding of the installations, upgrades, migrations, and conversions in a variety of client contexts.• Subject Matter Expertise: Served as SME in network and enterprise infrastructure.• Project Management: Delivered projects on time and under budget through critical path scheduling, coordinating and leading team members, detailed tracking and analysis of performance, and clear stakeholder communications.• Lead Technical Advisor: Successfully stewarded technical implementation aspects of a multi-billion dollar acquisition for a large corporate client.Highlights include:• Subject Matter Expertise: Served as SME in network and enterprise infrastructure.• Project Management: Delivered projects on time and under budget through critical path scheduling, coordinating and leading team members, detailed tracking and analysis of performance, and clear stakeholder communications.• Lead Technical Advisor: Successfully stewarded technical implementation aspects of a multi-billion dollar acquisition for a large corporate client.