Nati Shah, CISSP, CEH, CISA, CPA, MSCIS, MBA
Details
Bellevue University
Master of Science in Computer Information Systems
Bellevue University
Master of Business Administration (MBA)
Bellevue University
2020 : Present
Wells Fargo
Vice President, Enterprise Data Solutions & Services at Wells Fargo
Develop strategy, plan and build out the Risk Assessment capability in support of Enterprise Data Technology Enterprise and Big Data management. Develop tools, methodology, procedure, and guidance for risk compliance, control assessment, risk remediation and governance functions. Participate in the development of the future state Big Data, Machine Learning, and Artificial Intelligence programs. Enhance and implement the vision, future strategy and roadmap,
2020 :
Wells Fargo
Asst. Vice President, Enterprise Data Technology/Big Data
• Develop strategic relationships with the lines of business partners in providing governance and oversight from a second line of business perspective.
• Understand the processes and supporting technologies for selected high risk areas in Enterprise Information Security and across the enterprise.
• Identify changes in technology environments that would have enterprise-wide impact from a risk management perspective.
• Develop information security control testing strategies and procedures for critical enterprise applications, systems and control activities.
• Report on test results and any issues identified and recommend control as a trusted partner that align with the organizational policies, procedures and industry practices.
• Provide thought leadership to business partners relative to emerging technologies from a risk management perspective.
• Provide guidance and timely feedback to team members from learning and development perspective.
2016 :
Wells Fargo
Asst. Vice President, Information Security Risk Management
• Participated in hiring and on-boarding process to enhance new team members’ knowledge of audit policies, procedures, tools and technologies.
• Participated in annual audit planning process to identify audit areas using the risk based approach.
• Managed and executed multiple assurance and advisory engagements throughout the year to complete the annual audit plan.
• Developed strong business relationship with the Risk and Business partners to influence changes to enhance risk management culture and practices.
• Kept track of audit issues, and corrective actions to make sure audit issues are remediated on a timely manner.
• Contributed to team member learning and development process by facilitating and providing technical training and guidance.
• Actively participated in community development, diversity and inclusiveness and diverse mentoring program.
• Provided thought leadership to Risk and Business partners about the cybersecurity threat landscape and leading security practices.
2013 : 2016
Wells Fargo
IT Audit Manager, Cybersecurity
• Perform annual risk assessment of diverse IT and business processes supporting a network of 45 hospitals and outpatient facilities
• Identify audit areas to manage risk to comply with regulatory requirements including HIPAA, PCI DSS, HITECH Meaningful use, privacy and security.
• Manage the overall local or regional client relationships to ensure that the audit team provides for and anticipates the needs of the client.
• Provide guidance and supervision to Audit Manager to make sure the timely execution of the audit process and results.
• Consistently seek new, innovative ways of meeting and exceeding client expectations and contribute for the growth of the business.
2010 : 2013
CHAN HEALTHCARE
IT Audit Sr. Manager
Skills
Access Lists, ACL, Archer, ArcSight, AS400, Audit, Auditing, Business Process, Change Management, CISA, CISSP, COBIT, Compliance, Compliance Audits, Corporate Governance, COSO, Cyber-security, Cyber Defense, Data Analysis, Enterprise Risk Management, Excel, External Audit, Financial Risk, Governance, HIPAA, Internal Audit, Internal Controls, IT Audit, IT Controls, IT Governance, IT Risk, Microsoft Excel, Microsoft Office, PCI DSS, Penetration Testing, Policy, Privacy, Process Improvement, Risk, Risk Assessment, Risk Management, Sarbanes-Oxley Act, SAS70, SDLC, Security, SOX, SOX 404, SQL, Strategic Planning, Unix
About
Proven leader to plan and execute audit and advisory projects to assess business processes and IT controls to identify and recommend areas for improvements to comply with the regulatory requirements, governance, and compliance and risk management objectives.
Specialties
Cyber Security, Integrated Audits, Business Process Improvements, IT Effectiveness, Business Continuity/Disaster Recovery, SOX 404, SAS 70, HIPAA, PCI DSS, HITECH, Windows, UNIX (AIX, HP-UX, Solaris, SCO, BSD), Linux, AS400, Mainframe Systems, Oracle, SQL, DB2, Router, Switches, Firewall, SAP, Oracle Financial, Clinical Systems,
Profile Photo
