Shimon WrightShimonWright

Founded a field-to-product studio translating 25+ years of cybersecurity, service delivery, GRC and transformation experience into a portfolio of nine AI, data and workflow applications — from federated incident response and audit automation to deal intelligence, service-delivery assurance and governed execution.

Advised Group-level cybersecurity and deal-risk governance across enterprise pursuits, M&A and high-value contracts — turning fragmented commercial, legal, delivery and security evidence into executive-ready risk decisions.

Ran Capgemini’s external cyber-risk function — driving public security ratings upward and clearing score issues that were blocking major deals and renewals through a governed validation, remediation and evidence lifecycle.

Led global cybersecurity, GRC and audit/assurance for a major QSR digital-retail account — 23 delivery locations within a ~37,000+ site estate — authoring the enterprise security plan, standing up the GRC operating model, and commanding crisis response.

Delivered secure-by-design strategy for connected-vehicle systems — telematics, firmware, OTA pipelines, ECU and in-vehicle networks, and third-party components — aligned to ISO/SAE 21434, ENISA and Auto-ISAC practices.

Governed cybersecurity and operations across vessel and shoreside environments — payment and guest-data protection, cloud/IoT exposure, and ship-to-shore continuity for globally distributed maritime operations.

Client-badged Interim CISO for a federated network of ~139 member firms across 130 countries — building the global incident-response and threat-flash model (later the basis for GIRP) across firms with shared brand exposure but uneven security maturity.

Security and test-governance lead for a data-center transformation into a managed model — building the Pathfinder validation process, RACI and tracking dashboard, and governing SAT/UAT, DR validation and go-live across migration waves.

Led delivery for regulated biopharma data-center hosting — reshaping configuration management and promote-to-production discipline, aligning incident priority to business impact, and hardening secure-hosting hygiene with CyberArk, ArcSight and Splunk.

Ran regional hosting and service delivery across ~15 countries for remote metals, mining, port and logistics operations — from Indonesian swamp sites to the Port of Nacala — where a technical failure meant stalled ore, demurrage exposure and SLA penalties.

Delivered NERC CIP critical-infrastructure remediation for a utility energy-market environment — standing up the CIP-defined access points (Cisco ASA), switching and management tooling across primary and backup data centers, with as-built security documentation.

Provided security architecture and engineering for new EDS technology offerings before launch — running Design- and Build-Phase Security Assessments, engineering multi-context Cisco ASA firewalls and PCI-DSS SSL VPN, and turning SOW, SLA and scan evidence into implementation-ready guidance.

Ran retail enterprise infrastructure across Windows, Unix and Exchange — piloting Active Directory, engineering an NLB Terminal Server / thin-client estate of 172 Wyse appliances, and standing up secure Solaris DNS/FTP on BIND.

Managed service desk and end-user operations for ~1,100 retail users across New York, Virginia and North Carolina — Tier 1/2 escalation and SLAs — while expanding into Unix, DNS and Exchange administration, patching and secure remote access.