Manager Security

GUL KHATAB

917-***-**** *******@*****.*** Linkedin.com/in/gul-khatab

DIRECTOR IT

DRIVING ORGANIZATIONAL CAPABILITIES THROUGH HIGH-PERFORMANCE TECHNOLOGY

Technology thought leader garnering 20+ years of proven success in driving cutting-edge, technology-driven environments across multiple countries in the finance/banking industry. Consistently identifies progressive technological solutions to address business challenges(Change & Run the Bank) while providing leadership for teams of up to 55 members. Compressive experience in end-to-end implementation of secure, reliable IT infrastructures. Cost-conscious, seizing all opportunities for cost savings while maximizing business capabilities.

Leadership IT Strategy Business Transformation Project Management IT Operations Management SDLC

Cloud Computing Architecture Cyber Security Governance Networking Telecommunications Security Practices

Risk Mitigation Engineering Continuous Improvement Regulatory Compliance Security Business Continuity

Disaster Recovery Processes & Procedures Training, Coaching & Mentoring Vendor Management Reporting

Key Achievements

Designed and supported four Tier III data centers in the US; eight Tier III and five Tier II in the Americas.

Supported enterprise shared services for 25K in the US and 50K users across the Americas.

Managed 63 Internet Access points, 600+ firewalls, IPSs, and DDoS appliances supporting banking and internet-based corporate services.

Designed, implemented and supported video conferencing, VOIP, telepresence and branch and campus networks.

Designed, implemented low latency network backbone to support a 29West based message bus for FX pricing

Highlights of Experience

HSBC BANK USA – New York, NY 2000 – 2018

REGIONAL MANAGER, INTERNET SECURITY / GBM NETWORK SERVICES, AMERICAS (2014 – Present)

Drive IT security and plan and execute critical international projects as a firewall infrastructure expert for one the largest enterprise networks across the globe. Negotiated and managed relationships with all third-party network vendors and carrier relationships. Managed Proxy, DNS and load balancing infrastructures for HSBC North and Latin Americas.

Strategy & Execution

Assigned BAU project to team in India and reduced midlevel, low-technical staff by collaborating to prepare a centralized policy for design, implementation and standardized firewall management.

Maintained 99.9995% network availability by enhancing and adding additional monitoring tools.

Improved oversight of external vendor connections by designing annual, third-party Connectivity/Disaster Recovery Exercise and documenting lessons learns.

Cost Control

Cut the OpEX cost by 20% by signing a Global Check Point contract improving support and quality. Oversaw the collection of global inventory of all the IT technologies used as well as annual maintenance, support and licensing costs to take strategic action.

Slashed Americas budget from $55M to $34M over three years.

Saved millions of dollars in wasted design costs by assessing vendor estimates, eliminating waste and negotiating a robust, cost-efficient network.

Decreased internet costs 20% by renegotiating internet service provider contracts.

REGIONAL MANAGER, INTERNET SECURITY / GBM NETWORK SERVICES, AMERICAS (Continued)

Security

Upgraded firewalls nationwide with 3 medium issues (impacted only 2 to 3 applications) and 1 major issue, spearheading planning, definition, design, implementation, testing and deployment of 640 next-gen firewalls.

Streamlined and consolidated Mexico firewall infrastructure, leveraging centralized global management platform.

Reduced MTR and increased business uptime; enhanced security. Onboarded external mitigation services for DDoS attacks; deployed on-premise DDoS mitigation platform/multitier solution across 63 Internet Access points.

MANAGER TELECOM / GBM NETWORK SERVICES for NORTH AMERICA (2006 – 2013)

Advanced the technical capabilities of the telecom team in support of network security and trading infrastructures in the Americas to streamline and improve productivity.

Diminished high impacts by 66% YoY and overall incidents by 80% in large/complex Global Internet and Network Services Infrastructure through process improvements, standardization, team coordination, and training.

Redesigned, built and managed the HSBC Americas trading floors and trading data centers.

Accomplished two data center migrations ahead of schedule, each in 16 months against estimated 36 months.

Directed development of a new migration plan needing minimal work by IT application teams. Migrated stand-alone and less complex applications while completing configuration of the network infrastructure for future moves.

Collaborated with key stakeholders and senior management to migrate some applications during the change freeze, or end of the year project window.

SENIOR NETWORK ENGINEER (2000 – 2006)

Used engineering skill to solve a variety of business problems including researching, developing, and finalizing the design, the budget, and the implementation of a state-of-the-art web hosting network, on time and for less money than projected.

Governed trans-Atlantic and trans-Pacific capacity planning and consolidation of Canadian data centers to US by spearheading North American transit core for standard international connectivity, integrations and acquisitions. Included global proxy design, troubleshooting and the development of network management tools.

Elevated the connectivity and efficiency of the HSBC enterprise by establishing standards for the HSBC New York metro campus, covering VPN’s, E-Commerce, content distribution, extranet, multicast, global/local load balancing and DWDM solutions. Designed connectivity to hosted CoLo environments for systems participating in algo trad

Education & Certification

TRIUM GLOBAL EXECUTIVE MBA, Alliance of New York University’s Stern School of Business, the London School of Economics and Political Science, and the HEC School of Management – New York, NY

CERTIFIED CLOUD SECURITY PROFESSIONAL BOOTCAMP (CCSP)

M.Sc. COMPUTER SCIENCE, Lehman College of City University of New York – New York, NY

B.Sc. ELECTRONICS ENGINEERING, N.E.D. University, Dawood College – Karachi, Pakistan

Technologies

HARDWARE: Cisco ASA/routers, Wi-Fi access points and controllers, 6500, Nexus 7000s, GSSs, video conferencing Blue Coat proxies, check point firewall, IPS/IDS’s, F5 load balance, Sniffers, Qradar

NETWORKING: Cisco, LDAP, DLP, MQ, SSO, NAS, SAN EGIRP, OSPF, BGP, multicast, SNMP, NTP, TACAS, DLP, SIP, RADIUS

OPERATING SYSTEMS: Windows, Unix/Linux

SOFTWARE: VMWare, Active Directory

Contact this candidate