ZIA UL HAQ SHAIK
Service Delivery Lead / Technical Project Manager - IT GRC, Cybersecurity Architect, Enterprise Security Architect
Bangalore
Summary
Cybersecurity and Technology Lead experienced in Technical Service Delivery, IT GRC, PCI compliance, Enterprise Security Architecture, and Cloud Security. Achieved alignment of cybersecurity strategy with business objectives and regulatory requirements through cross-functional initiatives, driving security transformation and enhancing operational resilience across hybrid and cloud environments. Focused on strengthening security posture and ensuring regulatory compliance through strategic leadership and stakeholder management.
Overview
8
8
Certifications
16
16
years of professional experience
Work History
Service Delivery Lead/Technical Project Manager – IT GRC, Cybersecurity Architecture, PCI Audit, Enterprise Security Architecture
DXC Technology Ltd
07.2016 - Current
- Key Result Areas:
- IT GRC (Governance, Risk & Compliance): Established and maintained governance frameworks aligned with NIST RMF, ISO 27001, and COBIT to support business objectives and regulatory requirements. Led enterprise-wide risk assessments, policy development, control testing, and assurance activities to strengthen compliance maturity and operational resilience. Leveraged ServiceNow GRC, RSA Archer, MetricStream, OneTrust, and Hyperproof to streamline compliance workflows, track risks, and enhance governance reporting.
- PCI DSS Compliance & Tools: Led end-to-end PCI DSS v4.0 compliance programs, including CDE scoping, quarterly ASV vulnerability scans, and enforcement of firewall, encryption, and access control requirements across all 12 PCI control domains. Partnered with security, infrastructure, and application teams to remediate gaps, strengthen control effectiveness, and maintain audit readiness. Tools: Qualys PCI, Tenable Nessus, Tripwire, CyberArk, Splunk, Burp Suite
- Cybersecurity & Solution Design: Provided technical solutions and architectural support for diverse customer networks. Designed and implemented security architectures across cloud and on-premise environments, establishing secure foundations for enterprise IT systems and enhancing overall security posture.
- IT Infrastructure & Cloud Security: Led end-to-end design, maintenance, and security of IT infrastructure, cloud platforms, and networks. Directed and coordinated innovation initiatives and delivered secure deployment blueprints to ensure seamless integration, operational continuity, and improved security posture.
- Network Security & Firewall Management: Architected secure network solutions with Next-Gen Firewalls, Palo Alto, Cisco, Fortinet, and Check Point. Developed security policies, segmentation strategies, and optimization measures to strengthen perimeter defenses and ensure compliance through regular audits.
- Compliance & Risk Management: Defined and implemented security frameworks aligned with industry standards such as NIST, CIS, ISO 27001, PCI-DSS, GDPR, and SOC 2. Conducted risk assessments, vulnerability scans, and third-party audits to identify gaps, reduce exposure, and support compliance objectives.
- Vulnerability & Penetration Testing: Performed Vulnerability Assessments and Penetration Testing (VAPT) for web, cloud, and network environments using tools such as Qualys, Nessus, and Tenable. Coordinated remediation with patching teams across operating systems, servers, network devices, applications, and cloud networks, ensuring timely closure of findings and clear reporting.
- Threat Detection & Incident Response: Led threat detection and incident response efforts by analyzing firewall logs, IDS/IPS alerts, and other security anomalies. Partnered with SOC teams to contain threats, provide incident response playbooks, and integrate firewalls with SIEM platforms for enhanced visibility and threat intelligence.
- Strategic Leadership & Client Support: Served as lead SME/architect for multiple clients across distinct domains. Delivered technical guidance, developed strategic roadmaps, and created security blueprints aligned with business goals, facilitating tailored security solutions.
Sr. Technology Specialist - IT Security
Liquid Hub India Pvt. Ltd
10.2015 - 05.2016
Consultant - IT Security
Genpact India Ltd
11.2013 - 10.2015
Sr. Engineer - Security Management
Wipro Technologies Ltd
04.2011 - 10.2013
Network Support Engineer
Choice Solutions Limited
01.2008 - 03.2009
Education
M.C.A. -
B. Sc. - Computers
Skills
IT GRC & Cybersecurity Architecture
Enterprise Security Architecture Design
Governance Framework Design
Cybersecurity Solution Design
Risk Assessment & Management
Compliance & Regulatory Knowledge
Incident response
Threat Model & Vulnerability Management
Vulnerability assessment
Security Operations
SIEM, SOC & Incident Response
Identity & Access Management (IAM)
Security tooling
Stakeholder & Vendor Management
Collaborative Communication
Accomplishments
- Security Architecture & Implementation: Designed and executed security architectures for cloud and on-premise environments, including migration strategies for firewalls and network security.
- Compliance & Risk Management: Managed compliance with standards like PCI DSS, ISO 27001, and SOC 2, conducting vulnerability scans and risk assessments.
- Threat & Incident Response: Led incident detection and response, utilizing advanced tools for endpoint and USB security while streamlining alert tuning to reduce false positives.
- Collaboration: Acted as a lead SME and Architect, collaborating with cross-functional teams to align security with business goals.
- Technical Expertise: Proficient in a range of security tools, including Palo Alto, Fortinet, CrowdStrike, and automation for threat detection, enforcement, vulnerability management, and risk assessments.
Certification
CISSP (pursuing)
Timeline
Service Delivery Lead/Technical Project Manager – IT GRC, Cybersecurity Architecture, PCI Audit, Enterprise Security Architecture - DXC Technology Ltd
07.2016 - Current
Sr. Technology Specialist - IT Security - Liquid Hub India Pvt. Ltd
10.2015 - 05.2016
Consultant - IT Security - Genpact India Ltd
11.2013 - 10.2015
Sr. Engineer - Security Management - Wipro Technologies Ltd
04.2011 - 10.2013
Network Support Engineer - Choice Solutions Limited
01.2008 - 03.2009
Acharya Nagarjuna University - B. Sc., Computers
Bharathidasan University - M.C.A.,
Personal Details
- ZIA UL HAQ SHAIK
- +91 9919656123
- Shaikziaulhaq.1312@gmail.com