Val S.

About

I am a seasoned cybersecurity professional with over a decade of firsthand experience in designing and implementing security architecture solutions, as well as auditing information security management systems based on various local and international security frameworks, standards, and guides, such as ISO 27001, CIS Controls, NIST CSF, RMF & 800-53, PCI DSS, TSC/SOC2, NERC CIP, FedRAMP, FISMA, CMMC, HITRUST and other scary abbreviations. This is supported by nearly 20 years of hands-on experience in cybersecurity operations, encompassing a broad range of controls (tools and solutions) for network, cloud, and application security (DevSecOps: SAST, DAST, threat modelling, etc.), which results in a rare and organic fusion of technical and governance knowledge.

Throughout my career, I have spent at least 10 years in cybersecurity management positions, mentored numerous security specialists, and delivered security awareness training to a wide range of non-security personnel. Simultaneously, I worked as an independent contractor, primarily carrying vCISO and security engineering functions.

Notable projects:

- Medical devices cybersecurity framework for a provincial health authority, which amalgamates various standards to outline a risk-based approach for securing connected medical devices.

- Development of a custom, NIST 800-53-based cybersecurity framework, followed by an audit of a major airline carrier.

- Multi-environment PCI consolidation project for another major airline carrier.

- Research and development of the “Top 15” security controls guide (https://github.com/ValeriySh/ValsTop15), a CISO-friendly minimal list of controls based on a few hundred known cyberattacks that occurred over the last decade, mapped to the MITRE ATT&CK framework.

If you are still reading this and haven’t fallen asleep, connect with me and let’s talk!

p.s. No AI was harmed in the writing of this text; I know how to use it, but I don't trust computers with my jokes.

Specialties

• Cloud Security
• Governance & Compliance
• ISO 27001
• Security Architecture
• Security Engineering

Skills

• Security Assessments
• ISO 27001
• NIST CSF
• SOC2
• NIS2
• DORA
• Security Audit
• Cybersecurity
• CISM
• Security Program

13 skills in total

Licenses & Certifications

• Microsoft Certified: Cybersecurity Architect Expert

  Microsoft

  Issued Apr 2025 · Expires Apr 2027

• Microsoft Certified: Security Operations Analyst Associate

  Microsoft

  Issued Apr 2025 · Expires Apr 2027

• Certified Information Security Manager

  ISACA

  Issued Feb 2021

5 certifications in total

Experience

• Senior Security Consultant

  iON United Inc.

  Oct 2023 — Present

  Calgary, Alberta, Canada

• MOBIA

  • Senior Security Consultant, Team Lead

    Jun 2023 — Sep 2023

    Vancouver, British Columbia, Canada

  • Senior Security Consultant

    Dec 2021 — Jun 2023

    Vancouver, British Columbia, Canada

12 experiences in total

Education

• Moscow Institute of Radiotechnics, Electronics and Automation

  Master's degree, Certification and Standardization

  Jan 2003 — Jan 2009

Recent posts