Sohail Hashmi

• Lead the delivery of Digital Security transformation program CEDS(Critical Enhancement Data Security) to improve the Enterprise Data protection capabilities for information assets against a range of cyber threats. This transformational initiative will reduce impact of cyber data breach by introducing additional layers of protection on client data and governs operational execution standards that align with strategic objectives, support business goals and delivery of efficiency gains to reduce costs to operational areas. This involved various security-focused projects across the organization. Including facilitating the planning and prioritization of complex cybersecurity services. Working directly with partners, vendors, staff, and agencies to ensure project success. Coordination with legal, contracting, procurement, finance, communications, agencies, and departments to ensure successful program rollout, communications, and adoption.
• Develop and maintain Program assessment protocols and key performance indicators (KPIs) for measuring delivery progress and continued improvements of the Program. Manage day-to-day Program and project teams for optimal return-on-investment and coordinate cross-project interdependencies required in support of Program delivery. Establish stakeholder communication strategies and plans. Ensure sound stakeholder engagement and management.
• Work with stakeholders/project teams to conduct regular Program risks and issues analysis, identify mitigation Plans and produce regular Program risks and issues management reports and managed projects assigned with up to 100+ team members and budget of $10M - $30M including management of program charter, and program implementation plan.
• Build strong relationships with stakeholders, partners, and their teams, to facilitate collaboration and Excellent organizational and communication skills to help ensure all initiatives maintain momentum against the background of changing and occasionally conflicting priorities.
• Develop and manage priorities as well as strong relationships with business partners and their leadership across all CIBC business, operations, and technology teams.

• Managed large scale Info Security and Infrastructure migration projects with an understanding of the company's strategies, priorities, and issues and work on Cybersecurity Program (Multiyear Program for Infrastructure Upgrade and Remediate Security Gaps).
• Successfully delivered 15+ projects such as Splunk Implementation, Disable TLS 1.0 and PCI Compliance, File & Print Server Segregation, Secure Code Scan-Remediate Software Vulnerabilities, SSL Certs Upgrade, SharePoint Segregation, Guest Internet Access/BYOD, Cyberark Deployment, Sailpoint implementation, Developed Web applications and migrated platforms from Mainframe to UNIX systems, LPAR Mainframe Segmentation, Upgraded Cisco Catalyst 4500 switches, Network Jack Protection, IdM Configuration & Policy Management, Windows 2003/2008 elimination project, Incorrectly Zoned Network, SAN storage Migration (Tivoli to Hitachi), Management Servers Isolations, Exchange Server Migration, Implemented Network & Security Monitoring tools(NetMRI, IronPort), Deployed other projects of medium to large complexities, including server builds and technical solutions for Solaris/AIX/Linux/Citrix/Windows platforms).
• Assess key Info Security scope and requirements, and proposed appropriate solutions and delivered the company's values, and ensured compliance with ITIL Policies, Security Standards and strengthen internal controls.
• Lead project teams utilizing both agile (SCRUM) and traditional project management methodologies (Waterfall, SDLC), and working according to the internal project planning and coordinating the Sprints, managing the daily stand-ups (SCRUMS), managing the sprint closure, retrospectives, and demos.
• Communicate bi-weekly project health to “C” level management and high-level stakeholders, and managed client expectations across many Business Unit's/LOB’s (Line of Business's) with various IT/Business teams.
• Serve as Scrum Master, established techniques for effective backlog management helps remove impediments to the security team's progress and helps drive improvement in the Lean-Agile workflows of the security teams.
• Ensure effective and Program financial communication timely reporting to the executive steering committee, major stakeholders, project team which include project financial status/detailed schedule, tasks, weekly milestones, budget estimation, forecast, continual risks and escalation and remediation resolution of issues as they arise.
• Develop project schedules with clearly defined and documented timelines, deliverables and resource assignment utilizing Microsoft Project as the scheduling tool and having expertise in MS Project, Excel, Visio, and PowerPoint.

• Planned and executed the migration of a multi-domain Windows 2003 to Windows 2008 Active Directory Upgrade, designed and led upgrade of 10 domains in a single forest with over 8, 000 accounts, Project completed with zero client downtime.
• Implemented a parallel Exchange 2010 environment with an Exchange 2007 platform. All hardware was virtualized, and a SAN provided back-end storage, with 8, 000+ accounts.
• Proactively identified and tracked program risk and in conjunction with teams and develops mitigation plans to manage Information Security risk and demonstrated awareness of all project dependencies.
• Developed project schedules with clearly defined and documented timelines, deliverables and resource assignment utilizing Microsoft Project as the scheduling tool and having expertise in Excel, Project, Visio, and PowerPoint.
• Responsible for financial management, mapped Chart of Accounts, and documented posting logic, backdate logics for various adjustments, P&L for Balance Sheet, and Income Statement.

• Lead Systems administrator & implementation Specialist for IBM's security projects involving of Installation and configuration the new/rebuild existing windows and UNIX servers, and properly commissioned servers (IBM System x3500, p570, p595)
• Reviewed and lead deployment of new service packs, hot fixes, system updates and vendor-supplied patches according to best practices.
• Participated in the design and review of new systems and application deployments in both workstations and servers as per ITIL processes.
• Minimized information security risks by developing and implementing audits and controls, standards, procedures, guidance and policies.

• Installed, configured and maintained the Win 2003 R2 (32/64bit) and Unix (AIX, HP-UX), server systems, availability, integrity and security including installation and/or system recovery.
• Monitored capacity, performance, and the integrity of UNIX servers, Windows 2003 servers, and Oracle Data Base.
• Performed data analysis, failure analysis, and documenting problems/outages/changes using formal problem management processes and tools and producing daily status reports.

Pakistan National Shipping Corporation, Karachi, Sindh, Pakistan.
• Upgraded INMARSAT C terminal to INMARSAT B on vessels to communicate with 64 k on line, real time communication to head office.
• Trained on Ship Expert System (SES) to deploy the Ship Management system from Ship to Shore (head office) and integrate with vessel software for effective communication.
• Configured and installed of 08 Xeon based Compaq (ML-570) Servers and 06 DELL (Power Edge6600, 2600) series dual based processor server machines with RAID controllers based on Windows 2000 and Oracle 9i as database.

• Successfully installed and configured 14 Windows NT 4.0 servers with Ms-SQL 7.0, IIS 4.0, and SABRE (Corporate name) applications, Created and administrated databases that comprised 1000 plus tables, and configured Windows NT server with SNA-server to acquire LU's, SNA-server has configured PU's to communicate with IBM ES9000 startus Machine.
• Installed and configured 7 Novell NetWare Servers, which were dedicated for EICON getaways with Token Ring card. Configured and installed X.25 UNIX (SCO ODT 3.0) gateways (for protocol translation), Administrated of the Unix Solaris 2.6 servers and transaction system using SYBASE 4.3 database engines with SCO ODT 3.0 platform, and Apache server on Linux. Successfully cut over the region for Y2K.