M Faraz Khan

A highly motivated, self-directed and result-oriented professional with 15+ years in Network Communications, Security, Data Centers, Infrastructure Management and Information Security experience who always achieves credibility of excellence by working with commitment and dedication.

Currently working as Information Security Manager whereas previously worked as Head Infra & Ops in Sindh Bank Limited with 330 Branches Network, 3 Data Centers and off-site ATMs network. Supervising a team of 14 IT Qualified Professionals. I have diversified experience of 15+ years, fulfilling various roles such as Network Engineer, Support Engineer, Data Center Analyst, Network Infrastructure team lead etc.

EXPERIENCE

Sindh Bank Limited (Information Security Department, Head Office) 

Designation: AVP-I 

Duration: 30th August 2021 to Date 

Title: Information Security Manager – SOC & GRC

• Assist CISO is shaping the Information Security Policy and procedures in alliance with ETGRM
• Develop and implement bank-wide best practices for IT Security in alliance with IS Policy
• Managing Security Operation Center for the bank with 6 skilled L1 and L2 resources 
• Coordinate and enhance the implementation of globally recognized security software, such as IBM SIEM, SURP, and BURP, to align with industry best practices in Information Security. 
• Conduct comprehensive monitoring and assessment of the bank's threat landscape by evaluating all essential components 
• Implement robust security measures for all software applications to safeguard systems and sensitive information
• Thoroughly document security breaches and evaluate the extent of their impact. 
• Provide assistance in addressing identified vulnerabilities by collaborating with the relevant divisions, ensuring a consistently high security standard within the bank
• Coordinate and Oversee VAPT related tasks with vendor for internal and external 
• Help colleagues install security software and understand information security management 
• Research security enhancements and make recommendations to management 
• Stay up-to-date on information technology trends and security standards

Sindh Bank Limited (Information Security Department, Head Office) 

Designation: AVP-II 

Duration: 14th December, 2012 to 30th August 2021 

Title: Head Infrastructure and Operations

• Team lead for all technology deployment in Sindh Bank for both PR and DR Data Centers 
• Focal person for creating of tier-3 Data Center at Kehkashan Karachi and for shifting of services from HO DC to PR DC. Later migration of all DC services from Kehkashan to Imperial Court. 
• Team lead for all hypervisors and security of the entire virtualized environment of the bank. 
• Project lead for deployment of ASA and next generation firewalls 
• Policy creator for all Firewalls rules, access lists, IDS and IPS for the bank 
• Deployment of Kaspersky endpoints at about 1500 endpoints for malware protection and patch management 
• Project lead for several vulnerability scanning and penetration testing both internal and external 
• Project manager for compromise assessment for the entire bank including all endpoints 
• Project lead for PCI-DSS implementation for the bank 
• Deployment of Hyper Converged Infrastructure based on Microsoft Storage Spaces Direct 
• Redesigned the Data Center Network on a globally renowned Cisco Three Layer Hierarchical Model with existing equipment to achieve redundancy and high availability. 
• Proven ability to improve System / Data Center uptime and system resiliency; effectively communicate with end-users. 
• Manage / Improve the workflow and throughput of Data Center Operations 
• Replication of Core Banking Databases to DR Site across 1400 Kilometers with less than 1 minute delay on Data replication. 
• Construction of new Data Center with Tier 3 standards with dual power, cooling, servers, network links and other IT components. 
• 5 Successful DR Site testing which ran for 3 to 4 business days each, where the entire 330 branches of the Bank were operational from DR Site Lahore with all bank’s services. 
• Implemented VLAN Technology along with DHCP, HRSP, IP CEF and DNS. 
• Designed the Bank’s Network with respect to segmentation and separated the Data Center Network from head office user’s LAN. 
• Re-designed the Bank’s network on routing protocol for quick and easy accessing the DR Site in case of Disaster 
• Designed the network with dual active / active connectivity, virtually joining both the links to perform CCTV recording in a central site. Sindh Bank is recording all its branches' cameras directly to a central site using the same data connectivity. 
• Management of more than 300 Virtual Servers running on Hyper-V 
• Managing the Network Security of the Bank via auditing and implementing various network security policies. 
• Managing 2 Email Servers of the Bank for 2 domains i.e. sindhbankltd.com and sndb.com 
• Planning Backup and Disaster recoveries for the high availability

Bachelor's of Information Technology