Nadira Shah

Detail-oriented professional with direct experience supporting regulatory-adjacent governance functions at a major Canadian bank, where I owned the end-to-end documentation and compliance record lifecycle for a mission-critical enterprise authentication platform across five environments. Skilled at reviewing, drafting, and maintaining policies, procedures, and operating documentation; assessing risk and impact ahead of changes; and translating technical and regulatory requirements into clear, actionable guidance for cross-functional stakeholders. Comfortable across MS Office 365 and enterprise systems, including intermediate-to-advanced Excel (pivot tables, IF, and lookup functions).

Brings a background in structured research, writing, and curriculum design that supports clear communication of complex information to technical and non-technical audiences alike. Currently completing the Google Cybersecurity Professional Certificate. Seeking GRC Analyst and Third-Party Risk Management (TPRM) Analyst roles in Toronto/Mississauga or remote/hybrid.

IT Operations Analyst IV (Contract) at TD Bank (2026-02 – 2026-06)

• Owned the compliance record lifecycle for every platform change, authoring detailed records with full implementation, backout, and test plans, plus supporting evidence — maintaining 100% adherence to enterprise ITIL-aligned governance policy and an audit-ready trail for every change.
• Applied the governance framework across Standard, Normal, and Emergency change categories — selecting the correct risk-assessment pathway, approval routing, and documentation standard for each.
• Designed and authored a full operational documentation library from scratch — 8 formal documents including runbooks, SOPs, and a new-hire onboarding guide — closing a documentation gap and establishing a reusable, version-controlled reference framework.
• Identified and closed gaps in existing operational procedures, refining documentation to reduce recurring issues and ensure processes were institutionalised rather than held as undocumented tribal knowledge.
• Maintained real-time, timestamped records throughout every change window, producing post-implementation and health-check reports for team leads, application owners, and infrastructure stakeholders.
• Communicated scope, risk, and timing to cross-functional groups spanning infrastructure, application, QA, security, network, and directory services — tailoring technical detail to the audience.
• Coordinated releases across five environments (DEV/SIT/PAT/DRP/PROD), producing readiness documentation and go/no-go decision records at each stage gate; escalated deviations from approved plans with real-time documentation of impact and resolution.
• Proactively identified a compliance risk when a certificate expiry was discovered during pre-change review; authored the remediation record and coordinated resolution before it could affect the testing window.
• Participated in post-change reviews and lessons-learned sessions, translating findings into refined documentation and updated procedures for the wider team.
• Monitored platform health using Dynatrace and Splunk; produced structured, evidence-based validation reports supporting change-record closure and audit review.

Operations Lead / Educator at White Oaks Montessori (2016 – 2026)

• Designed, maintained, and updated operational and policy documentation for a regulated educational environment — managing version control, annual reviews, and stakeholder attestations.
• Produced structured written communications, reports, and presentations for senior stakeholders and regulatory/licensing bodies.
• Led knowledge-transfer and training activities across a team of 10+ staff, including structured onboarding and process documentation.
• Managed competing priorities in a high-volume environment, delivering a 95% on-time completion rate across operational workflows.

Master's in Educational Leadership – Vancouver Island University (2026-06)