Tim Shannon is a senior information security manager on Kitware’s Security Team located in Clifton Park, New York. He is responsible for developing strategies and cybersecurity plans to address Kitware’s current and future security needs. He oversees improvements to security infrastructure practices, maintains Kitware’s policies and procedures, and coordinates vulnerability scanning, intrusion detection, and penetration testing.

Tim was a senior information security engineer and Manager of Information Security at Autotask/Datto. While in this position, he created, architected, and deployed an information security program for roughly 400 employees. He created Autotask’s first SOC2 program, leveraging 56 controls in Security and Availability principles with an external auditor and producing an exception-free report. During this time, Tim also facilitated a new Identity and Access Management program for Datto, with corporate IT analysts. This new program focused on managing access to Okta-enabled applications, revamping provisioning and de-provisioning workflows, and building a master list of corporate identity sources.

Before his time at Autotask/Datto, Tim worked for The Golub Corporation for 18 years, serving in various roles from store system technician to QA Analyst. Most recently, Tim was the manager of information security and was responsible for maintaining corporate PCI compliance, reacting to security incidents, assessing systems for security vulnerabilities, and facilitating security awareness for corporate and store locations. He also developed, architected, and deployed a Corporate-wide 802.1x NAC solution for both wired and wireless networks.

Tim received his bachelor’s degree in information systems security from ITT Technical Institute. He received his associate’s degree in information technology from Bryant & Stratton Business Institute.

Awards

• Certified Information Security Manager (CISM) ISACA 2023

• Certified Information Systems Security Professional (CISSP) ISC2 2022

• Certified Information Systems Auditor (CISA), ISACA 2021

• Security+ Certification, CompTIA 2016

Invited Talks & Media

• Presenter, “Cybersecurity: A Global Approach,” 4th Annual Albany Cybersecurity Symposium, 2018

• Moderator, “MSSP Lessons Learned and Applicability” Panel discussion, Vista Best Practices Security Summit, 2016

Professional Associations & Service

• Active member, InfraGard – Albany, NY Chapter

• Active member, ISACA – Hudson Valley Chapter

• Active member, (ISC)2 – Hudson Valley Chapter