Taimoor Malik Email & Phone Number

Bangalore, Karnataka, In

Manage security governance processes and provide security guidance and counseling to leadership teams. Define security roadmap, strategies, metrics, reporting mechanisms, and program services.Align security initiatives with business vision, goals, and strategy to ensure that the company meets compliance, legal, and contractual requirements.Reduce security exposure and remediate configuration gaps on the next-generation firewall, IDS, WAF, and proxy implementations. Identified applications based on their communication and created security policies to allow the specific flow of identified source and destination basis.Reviewed vulnerabilities found in infrastructure applications and recommend software upgrades and bug fixes. Advised application team members on secure software development life cycle (SDLC) and reviewed currently in use applications from security perspective.Identified, monitored, and managed risks in the environment to an acceptable level and proactively recommend risk mitigation strategy. Reviewed internal and external applications from security perspective and provided inputs to secure the environment.Created professional development plans for all members of the security team.Ensuring compliance with information security policies. Development and revision of information security policies & program as well as maintain information security awareness, education, and training program. Created security awareness programs and advised on security issues and best practices and functioned as a primary checkpoint during significant information security incidents.Promoted collaborative, effective security working relationships across departments. Managed relationships with third-party vendors for service delivery and security monitoring services.

Menlo Park, California, Us

Applied risk management methods to information technology to manage IT risk. Developed and executed on continual security program improvement roadmap.Conducted NIST assessments (CSF, 800-53) and audits for clients and discussed finding with stakeholders, and helped develop remediation roadmaps.Responsible for finding and preventing security vulnerabilities at the application level in hardware, software, and development processes.Took tangible steps to protect confidentiality, integrity, availability, authenticity, of data while improving user experience in technology, operations, and management to deliver value.Developed and implemented 35 security policies, procedures, and guidelines related to access control, application security, monitoring, logging, and vulnerability management which are aligned with ISO Implemented standards, governance, and security controls to mitigate application and system vulnerabilities.Worked closely with IT leaders, technical experts, DevOps, and diverse stakeholders across the firm.Assessed and made recommendations regarding the adequacy of the security controls and collaborated with internal auditors and outside advisors on required security assessments.Convened incident response teams, as needed, to investigate security incidences and get to root cause analysis.

Toronto, On, Ca

Worked as a trusted advisor to CIO and CISO to share in-depth analysis and recommendations related to confidentiality, integrity, and availability of applications and develop risk mitigation recommendations.Identified application security risk areas and recommend solutions that reduce risk to an acceptable level.Worked as a consultant for merger and acquisitions engagements. Worked with both sides to understand current security policies, applications, procedures, and technologies in place. Identify common elements and proposed the best steps for moving forward.Used influence and rapport to align team members from different sides on the same objectives and create a win-win situation.Developed, implemented, monitored, and administered technical security standards after reviewing security services and tools to address and mitigate information security risk.Conducted security audits and vulnerability assessments. Patched management process development along with service level agreements and RACI matrix.Identified, analyzed, and prioritized Business Continuity (BC) requirements. Determined security controls including data loss prevention (DLP).Identified and classified information and assets and ensured that data is secure during transit and in storage. Led efforts to evaluate information security risks and monitored compliance with standards and examined the impact of modern technologies on information security.Reviewed and updated access control mechanisms, including single sign-on, federation, and offboarding processes.

Toronto, Ontario, Ca

Architected and implemented secure cloud environments and application migrationsProvided technical consulting services to clients in the cloud, security, networking, and communications technologies.Developed infrastructure solutions to meet the needs of specific initiatives.Completed a thorough analysis of existing technologies in place and recommended consolidation of technologies and vendors to drive standardization benefits.Monitor that effective identity and access management mechanisms place. Established information and asset handling requirements.Managed identification and authentication of people, devices, and services. Implemented and managed authentication and authorization mechanisms.Managed the identity and access provisioning lifecycle user access review, system account access review, provisioning, and de-provisioning.Evaluated technical solutions and provided recommendations to business owners, CIOs, and VPs on technology direction and solutions that can provide them a competitive edge.Provided technical and directional leadership to engineers on the design and implementation of best practices.

San Jose, Ca, Us

Worked as a Cisco systems engineer/solutions architect in a customer-facing role to support Cisco’s Fortune 500 clients. Helped develop and implement next-generation technology infrastructure for security, compute, and network infrastructure for customers.Supported and guided system and application disaster recovery planning and testing. Monitored the internal state of security and worked to improve continually. Communicated the value of security to build consensus among firm leaders.Built and maintained relationships at all levels, from executive leadership to engineering teams across different groups. Analyzed existing infrastructure, audited current deployments, identified security gaps, and ensured that industry best practices are followed in all design and operations.Conducted security assessment to find any gaps that need to be addressed and provided a prioritized list of recommendations. Developed and Implemented security network architecture for network segmentation. This allowed for threat mitigation and effective rollout of security controls.

Naperville, Il, Us

End-to-end project management and execution to integrate Nicor Gas’ network with Atlanta Gas and Light AGL network after the merger.Worked with businesses to understand the need and impact of technology. Ensured the availability of resources and the right mix of people who exhibit the required perspectives, skills, and behaviors. Led merger activities to ensure that both company networks can communicate with each other.

New York, New York, Us

Configured and managed network and security services including Core, Server farm, Storage, infrastructure, and internet access for users.Managed team of engineers including project assignments, evaluations, providing feedback and direction.Worked with executive management and business to plan and develop network, security, and infrastructure initiatives. Provided leadership and guidance to infrastructure, network and voice teams for office buildings, satellite locations, and remote users.Defining IT Architecture to standardize technologies, equipment and platforms across different teams including network, voice, server and security teams. Formulated and implemented monitoring, policies, naming conventions, diagrams, procedures and standards relating to network management.Datacenter relocation managed requirements gathering for space, power, cooling, cabinets, security and cabling requirements. Design/Re-addressing of networking and voice over IP infrastructure, circuits and configuration of routers, switches, firewalls to function as desired at new location.Complete VoIP Migration (Enterprise Phone System) to replace the existing phone system. Including evaluating different solutions, analyzing risks, working with vendors, negotiating deals and approving final orders of equipment. Review of configuration, rollout and replacement plan of existing legacy Aastra/InteComm voice network. Training, monitoring and management of new VoIP solutionOversaw management operation of network services and architecture including Core (Cisco 6509s), server farm (Nexus), Storage, user access (Cisco 6513s), internet access (ISG 1000 and 3845s) with BGP dual home, DMZ, wireless (3750s) and VoIP network.Worked internally within the peers in other teams to execute planned upgrades/modifications, as well as provide input into long-range networking requirements and operational guidelines, with a focus on improving the performance and reliability

Wayne, Pa, Us

Worked for a financial firm with 30 Offices throughout US to support and maintain all aspects of networking including Cisco routers, switches, Juniper firewalls, Load balancer, VPN, F5 SSL and monitoring servers.Supported and maintained all aspects of infrastructure including servers, blade centers, Cisco routers, switches, Juniper firewalls, Load balancer, telephony system, and monitoring servers. Worked with Network and Servers teams.Create technical documents which define network procedures in regards to setting up network devices according to department standards. Provided support to customers and branch offices and answer inquiries in regards to their network connectivity. Review Network management servers using Syslog and Orion Performance Monitoring and troubleshoot any issues such as telecom, router, switch, and firewall problemsTroubleshoot, support and management of L3 switches including Cisco, Juniper, Foundry, Extreme, and Foundry Switches. Monitor and maintain network security using TACACS+, Syslog Servers. Configure, maintain and support various routing protocols such as OSPF, EIGRP, BGP and Multicast routing.Configured HSRP, VRRP, PPP Multilink, NAT, QoS, and policy-based routing with Cisco and Juniper equipment. Management and support of configuration management server to verify that all devices comply with network standards

Armonk, New York, Ny, Us

Worked as a consultant to deploy technology infrastructure for New York City SchoolsThe site surveyed New York City schools in all boroughs for wireless Wi-Fi installations. Designed layout, determining optimal locations and channel assignment for Cisco access pointsManaged and maintained windows 2003 servers including a web server, Remote access server, VPN connectivity, FTP Server, modus mail, and SQL serverManagement of firewall, monitoring connections, opening, and closing ports, checking activity logs, deploying anti-virus software creating and managing backupsPhysically Installed and configured network switches to provide backbone connectivity to access points and provide inline power to Cisco access points to provide wireless connectivity.

Chicago, Illinois, Us

Configured, installed, troubleshoot, and maintained network and server infrastructure in a multi-site environment. Designing and implementing network to provide uninterrupted 24/7 access to over 6000 users. User support, authentication, encryption, and security for wireless clients.Network and server hardware installation including routers, switches, firewalls, desktops, and servers.

Master Of Business Administration (M.B.A.), Operations Management

Master Of Science (M.S.), Computer Science

Bachelor Of Science (B.S.), Electrical And Electronics Engineering