Shobhit is the Security & Compliance Director at Headspace Health, an on-demand mental-health company in San Francisco, CA. Prior to Headspace Health, he worked for 11+ years in different facets of Security & Information Assurance with HSBC, Deutsche Bank, Credit Suisse, PayPal, & Fidelity Investments to build and mature their security and compliance programs. He also works with ISACA to develop the exam questions for flagship certifications such as CISA, CISM, CGEIT, serves as the technical reviewer for CGEIT Review Manual, and is a published author for ISACA's COBIT 5 journal. He regularly presents at industry conferences such as (ISC)2 Security Congress, BSidesSF, and maintains a personal blog (GRCMusings.com) to deconstruct the jargons related to GRC & Healthcare. He is also an accomplished author, having published a book on CRISC, a certification offered by ISACA. Shobhit completed his MS in Cybersecurity from Northeastern University, Boston, and holds the following certifications: • Certified Information Systems Security Professional (CISSP), (ISC)2 • Certified Cloud Security Professional (CCSP), (ISC)2 • Certified Information Systems Auditor (CISA), ISACA • Certified Information Security Manager (CISM), ISACA • Certified in Governance of Enterprise IT (CGEIT), ISACA • Certified in Risk and Information Systems Control (CRISC), ISACA • HITRUST Certified CSF Practitioner (CCSFP), HITRUST • ISO/IEC 27001:2013 - Lead Auditor, BSI • ISO/IEC 31000 - Risk Management, BSI • ITIL Foundation Certification - IT Service Management, AXELOS