Shay Zandani

Shay is a principal in the New York office of KPMG LLP’s Advisory Services practice, focusing on the financial services industry and cybersecurity innovation with more than 30 years of management, advisory, and business experience.

Professional and industry experience:

Shay is a results-driven entrepreneur, experienced in small start-ups and Fortune 15 companies, across U.S., LATAM, and European markets. He identifies and seizes viable opportunities for expansion and innovation and grows them into profitable and valued enterprises with loyal customers.

Shay’s entrance into cybersecurity started on the nation-state cyber battlefield, where he founded the Information Warfare Department at the Israeli Air Force in the 1990s and pioneered the use of data manipulation for cyber offense. He then spent more than a decade as CEO of GRMS, a subsidiary of PricewaterhouseCoopers (PwC) in Israel, focused on conducting risk management and cybersecurity maturity assessments for large enterprises, globally. Prior to PwC, he participated in establishing the first Trusted Third Party (TTP) Certificate Authority in Israel. Shay co-founded Cytegic – the first cybersecurity risk management platform designed to enable corporate security teams to qualify and quantify risk for an executive audience.

Shay has a distinct blend of private and public sector experience with a deep understanding of how cyber risk evolves and impacts an organization’s bottom line. Moreover, he has a global experience regarding forensics investigation, enterprise risk management, and business continuity planning projects.

Technical skills:

• Cybersecurity assessments and management modules
• Information Warfare - methods & tools
• Project Management - Large scale technology strategy & design
• Forensics projects - Methodology, Concept and tools
• Design and implementation of IT infrastructure & cloud services
• PKI - Public Key Infrastructure and encryption solutions
• Network Design - methodology, concept, and design review

Publications and speaking engagements:

Shay is a frequent speaker and an author on the subject of cyber security. He has spoken on the topic for many organizations and trade shows in North America, South America, Europe and Asia, including ISACA, InfoSec and other major vendors' conferences. Shay was interviewed in numerous occasions for different media channels, including - Channel 1 and Channel 2 Israeli TV, CIO Magazine, Wall Street Journal and others.

Other activities:

Shay was elected to be the president of ISACA Israel, in 2013 for two consecutive terms, after 7 years as the head of the professional committee and was involved with ISACA global task force for the CSX cyber exams.

Education, licenses & certifications:

• EMBA, Northwestern & Tel-Aviv University (2009)
• M.Sc - Computer Science - The Open University, Israel (2000)
• B.Sc - Computer Science - The Open University, Israel (1996)
• Certified Information Systems Security Professional (CISSP, 2002)
• Certified Information Systems Auditor (CISA, 2003)
• Certified Information Security Manager (CISM, 2004)
• Certified in Risk and Information Systems Controls (CRISC, 2010)