Dr. Devam R Shah Email & Phone Number

Milpitas, California, Us

As the Chief Information Security Officer (CISO) and Data Protection Officer (DPO) at Locus, I am entrusted with the paramount responsibility of safeguarding the integrity, confidentiality, and availability of our extensive logistics infrastructure, which underpins over 1 billion deliveries across 30+ countries. My purview extends to fortifying Locus' pioneering, AI-infused solutions with comprehensive, cutting-edge security and privacy frameworks, ensuring the meticulous protection of not only our expansive operations but also the vast quantities of sensitive data we steward across multiple jurisdictions.In my capacity, I spearhead the formulation and execution of progressive, forward-leaning security strategies, deeply integrated with advanced AI and automation capabilities, thereby enabling preemptive threat detection and mitigation in real-time. My remit includes ensuring unwavering compliance with an increasingly complex and evolving array of global regulatory frameworks, including but not limited to the General Data Protection Regulation (GDPR) and other pertinent international data privacy mandates. This responsibility is particularly salient in safeguarding our sophisticated cloud infrastructure, distributed across platforms such as AWS and Azure, ensuring that our security posture remains resilient, adaptive, and legally sound in the face of emerging threats and regulatory scrutiny.

Bangalore, Karnataka, In

Award-winning CISO and Head of IT at Teachmint, I've spearheaded the alignment of IT and security strategies to propel the company's global expansion and impressive growth. Leading security for the world's first AI-enabled connected classroom technology with IoT, I ensure a safe learning environment for millions.My achievements include:Globally Recognized: Recipient of multiple prestigious global awards, including CISO of the Year (2023 & 2022).Scaling Securely: Secured Teachmint's presence in 33 countries, serving over 10,000 schools and institutes, and managing a vast database of 35 million+ student records.Championing Data Privacy: As Head of Privacy Compliance - DPO, I've meticulously ensured product and business operations comply with various privacy laws, especially those protecting minors.Building Secure Products: Oversaw the development and implementation of robust security solutions and architecture across Teachmint's product portfolio:Teachmint (EdTech): Secure authentication flow, stringent communication security, and RBI-compliant logging practices.Teachpay (FinTech): Implemented robust security for financial transactions.Foundational Security: Built Teachmint's security, privacy, and IT functions from the ground up, establishing a secure, scalable, and robust IT infrastructure that powers all operations.Digital Transformation Leader: Managed the organization's digital transformation, encompassing software solutions for finance, marketing, sales, and various other business aspects. Provided valuable insights to optimize business operations, including cost analysis, for enhanced efficiency.Teachmint's recognition as one of LinkedIn India's top 25 learning and innovation companies underscores our collective commitment to excellence. As a member of the leadership team, I remain dedicated to contributing to Teachmint's continued success in the competitive EdTech/EdInfra industry.

Kennesaw, Georgia, Us

I am honored to join Kennesaw State University's Cybersecurity 4810 Capstone course as a mentor this summer. This opportunity not only allows me to give back to the cybersecurity community but also aligns with my passion for professional growth and leadership development.My role as a mentor is to provide career advice, guidance, and practical insights into the real-world applications related to cybersecurity.

Bengaluru, Karnataka, Ind..., Karnataka, In

As the head of information security (CISO) and information technology at Great Learning, a leading ed-tech company with a global footprint in over 100 countries, I had the responsibility of ensuring uniform implementation of all information security controls, aligning security with the company's 300% yearly growth targets, and implementing security controls in a highly dynamic environment with one of the highest hiring/attrition rates in the industry.I played a key role in the company's alignment with the high-security standards of Byju's, the most valued EdTech start-up at that time. As the reputation of the entire group could be ruined by one negative security incident, I was responsible for managing all associated risks.As a cloud-born company with PBs of data in-store and TBs of data in transition, Great Learning adhered to various compliance standards like GDPR, CCPA, etc. I developed and put in place an ISMS to ensure compliance with these standards while also deploying cutting-edge technologies like containers and Kubernetes, IOTs and ELK. With a code release cycle of fewer than 20 minutes, I ensured that every component of the release was secure, and I envisioned a serverless architecture from the security, compliance, and finance perspective.Throughout my tenure, I leveraged my experience and skills to align business and information security, implement information security strategies, adhere to compliance and security frameworks, and deploy cutting-edge technologies to enable Great Learning's operations.

Sacramento, California, Us

As a Group CISO of Meditab Group, I was responsible for overseeing the information security of 14 sister companies. When one of the companies suffered from a massive PHI breach and the group faced continuous ransomware attacks, I was able to resolve the entire situation with an innovative approach with minimum business loss. As CISO at Meditab group of companies, I successfully led the implementation of various cybersecurity projects, including the deployment of DevSecOps, automated SOC use cases, and the replacement of traditional AV with EDR solutions. In addition to mitigating external threats, I successfully resolved one very complex internal incident, which had the potential to shut down one entire medical billing company with a PHI data size of 12 TB+ and 1M+ sensitive patient records. I also implemented ISO 27001 certification for the company and saved over 5000 man-hours per product by automating 80+ PT use cases.One of the significant challenges I faced at Meditab was related to the IOT security of a sister company involved in robotics manufacturing. With thousands of sensors in each robot and nine robots deployed, I led the effort to secure the IOT devices, developing security policies and implementing relevant controls.Overall, I am confident in my ability to align security with business objectives, implement cutting-edge cybersecurity technologies, and effectively manage security incidents. My experience at Meditab has provided me with extensive knowledge of the healthcare industry and its unique security challenges, as well as the ability to work in a highly dynamic and complex environment.

Mumbai, Maharashtra, In

As an Information Security Manager, I held the position of Security In-charge for the data centers and cloud setups at TCS, which included the EKA supercomputer—a critical asset utilized in various high-profile endeavours, including the Chandrayaan 2 and Mangalyaan projects of ISRO.I was responsible for overseeing the security of the digital infrastructure for select U.S. defence initiatives and Indian space projects.I had the privilege of overseeing security for TCS Cloud services, which held the distinction of being a Gartner leader. During this period, I effectively managed and resolved four major security incidents while implementing stringent security controls to safeguard emerging technologies.As a pivotal member of TCS's corporate security team, reporting to the ISM head and Group CISO of TCS, I addition to BAU activities, achieved numerous milestones as below:1. Deployed cutting-edge security technologies such as ACI, EDR, EUBA, and CASB across hundreds of thousands of machines.2. Orchestrated the transition from Checkpoint to Palo Alto firewalls, significantly enhancing our security posture.3. My contributions to the deployment of DevSecOps and SAST solutions for internal applications played a substantial role in bolstering security.4. Implemented an AD Bastion architecture, resulting in a remarkable improvement in TCS's security scorecard, which surged from 60+ to an impressive 95+.5. Enabled one-click server deployment through Ansible playbooks and deployed SSL VPN for over 500,000 email IDs, thereby enhancing efficiency and bolstering security.My expertise in incident management, adept handling of data centers and cloud management, proficiency in automation, and mastery of fabric infrastructure played pivotal roles in the successful execution of numerous critical projects at TCS.

Mumbai, Maharashtra, In

As an Information Security Officer at TCS, I have had the opportunity to work on several high-profile projects. One such project was the TCS-EPIC case, which had a significant impact on the Indian IT industry.I also led the deployment of a Security Operations Center (SOC) for the entire TCS infrastructure, which handled over 200,000 events per second. This included budget planning, SIEM architecture design, and mapping customer requirements with use cases and SOC as a Service, with an EPS of 30,00,000.To ensure smooth operations, I established a robust incident investigation process with SLAs, and we successfully handled major incidents while also meeting customer expectations. We also made use of artificial intelligence and machine learning technologies to process PBs of data and obtain the required outputs.Overall, my experience at TCS has allowed me to work with massive infrastructures, handle sensitive data, and implement cutting-edge technologies to provide world-class security.

Mumbai, Maharashtra, In

As an Information Security Analyst at TCS, I was responsible for various security tasks including creating correlated use cases, use case deployment, real-time alerts, non-compliance reports, incident investigation, firewall configuration, and AV configuration. These tasks involved managing a wide range of security-related tools and technologies.My role also included handling L2-L3 level security tasks, which helped me gain hands-on experience in managing real-world security incidents.

Redmond, Washington, Us

I was responsible to spread awareness about different Microsoft's products and activities. I was an intermediate between students and HR team of Microsoft. The opportunity to work in a dynamic environment with globally located teams was a rewarding experience

Brownsburg, Indiana, Us

As an information technology management intern, I was responsible to increase business and market value of iFour Consultancy by aligning IT with its existing strategies. In addition, I was given a task to find out competitive advantages that iFour consultancy would get if some advanced IT technologies and security processes were aligned with its current business processes. As a part of this project, we implemented iso27001 controls and procedures and replaced some rational software with SaaS solutions.

Developed a real time rickshaw tracking - Windows 8 and Android based application. Apart from this, it can also be used to share rickshaw and search places in Ahmedabad

Us

Big bountyfree lancing researchpenetration testing vulnerability assessmentopen source toolskaliburp

Armonk, New York, Ny, Us

The Great Mind Challange'11Developed application for unique I'd management Technology stackDB2WebsphereJavaHtml and css

Phd, Cyber/Electronic Operations And Warfare

Master Of Business Administration (M.B.A.), Information Technology Business Management

Diploma, Law

Bachelor'S Degree, Computer Engineering

High School, Science