Shirley Zhao Email & Phone Number

Los Angeles, California, US

Lead the US privacy program at TikTok, building it from the ground up. I am excited to transition into a role dedicated to privacy, an opportunity to tackle the world's most complex regulatory landscape that is unique to social media. I am committed to leading the US privacy team and collaborating with our global partners to make TikTok a leader in.

New York, New York, US

In this temp assignment to support global GTM, I collaborated with cross-functional teams to drive the resolution of customer security issues and incidents, achieving a 95% same-day resolution rate under a standard SLA of 2 weeks. Beyond security, called upon by GTM and support teams, I tackled long-standing product implementation and integration issues.

New York, New York, US

Brought onboard for strategic federal initiatives. In this role, I am the security champion, lead for Collibra's federal and public sector business. I’m also the external lead and voice for Collibra Security, advising global customers on enterprise-wide adoption of Collibra SaaS in aligning with their security requirements and strategy. Key stakeholder of.

Washington, District Of Columbia, US

Engaged by the client in closing out a multi-year task order on the information system continuous monitoring (ISCM) program. Strategic development of security architecture and maturing the Continuous Diagnostic and Monitoring (CDM) capabilities, aligning with Federal zero-trust initiatives.

Waterloo, Ontario, CA

In this role I took over a team with years of risk backlog and drove practical risk management and systemic changes to improve metrics all-around. Led to develop threat modeling in risk assessment, built cross-functional rapport to ensure alignment on risk tolerance and accountability. drove security risk decisions toward customer zero and product rollout..

Waterloo, Ontario, CA

Responsible for the program to establish Secure SDLC standards across all BlackBerry product lines, integrate with product security incident response (PSIRT) and security research capabilities, and align with federal (FedRAMP and NIST) and industry standard/best practice (OWASP, SANS, CIS controls). Built BlackBerry IoT security Framework

Worldwide, OO

At Deloitte Risk Advisory, taking a series of strategic and architect role, I led and advised on enterprise cloud and cyber security initiatives for private industry and public sector clients. - Cloud Infrastructure Architect for an enterprise scale digital transformation, leading the design built on IaaS/AWS, PaaS/MuleSoft, SaaS/Salesforce platforms.

Provided public and private sector clients a range of IT consulting services, including software development, security architecture, compliance oversight and cyber security management. Clients included USDA, DOD, etc.

Security architecture and management consulting - Primary security architect at the HHS responsible for acquiring and developing department wide security solutions (Data Loss Prevention/DLP, Web Application Firewall/WAF, GRC solution) spanning all operating divisions. - Technical PM at the USDA Security Operation Center (SOC), managing the.

Program management and architectural leadership roles in consulting engagementsTechnical PM for the web solution development and infrastructure implementation for a DOD client agency. Achieved in taking over failed projects from predecessor company and led team to build out the 1st security compliant solution for the client agency. Successful progression.

Master, Engineering

Master, Computer Science