Waqas Akkawi CISM

As SVP & CISO of Propelis, I lead the global Cybersecurity Strategy and function for a next-generation brand services agency that supports over 2,000 of the world’s most influential companies. Propelis brings together SGK and SGS & Co into one high-impact platform with 10,000 employees across 30+ countries, delivering nearly $1B in annual revenue. My strategic focus is on building a modern, business-aligned cybersecurity program that protects what matters most to our clients and our people. Partnering with executive leadership and teams across creative, production, and technology, I translate risk into clear strategies that enable Propelis to grow and execute with confidence. Propelis and its family of brands – SGX (Print), Marks (Creative, Design), Collide (Print & Merchandizing), and 5Flow (Ai/Automations) – help clients build, scale, and elevate their brands. In my role, I ensure that trust and security are embedded into that mission, supporting transformation while safeguarding the data, systems, and relationships that drive our success.

Providing executive security advisory services, vCISO leadership, and guidance to help organizations align security with business priorities.

• Develop and communicate global information security strategies and plans to executive team, staff, partners, customers, and stakeholders. • Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry standards and best practices. • Work closely with the business for Data Security RFP responses and contract documents. • Executive sponsor – annual E&Y SSAE16 SOC2 Audit. • On domestically and globally level, plan, implement, administer and manage all aspect of security solutions and monitoring tools to alert and detect potential security breaches that includes but not limited to: Intrusion Prevention Systems IPS, vulnerability scanning, Web Security, Security Information Event Management SIEM / Log Management, Data Loss Prevention DLP, application pen testing, and perimeter protection such as second generation Firewall architecture. • Develop risk assessment and gap analysis for presentation to the business and the IT organization in compliance with regulatory privacy laws such as Massachusetts Privacy Law 201 CMR 17 and Payment Card Industry PCI • Manage all Information Security / Cyber Security and Identity theft Incident investigations involving client, corporate information and interface with Corporate Counsel and law enforcement when required. • Lead quarterly Information Security Metrics and Risk Management meetings involving business owner, HR, Privacy and General Counsel, IT technical staff, and Internal Audit. • Recommend and implement changes in Global Security Policies and practices in accordance with laws and regulations of respective countries. • Recommend and implement changes in Global Security Policies and practices in accordance with laws and regulations of respective countries.

Defined and directed a new global cybersecurity program to include privacy for the Canada, EU and Asia. Migrated SAS70 Type II to new SOC2 Type II controls. Built new security team reporting from several locations to handle incident response. Implemented including architecture design of Palo Alto firewalls, IPS & SIEM. Enhanced security policies, standards, process to include global scope. Defined and implemented the requirement for application penetration testing. Help the business and IT to identify DR and BCP plans for testing. Adopted NIST framework and implemented security metrics reporting cadence.

Built the first in the industry Information security program for SIRVA. Implemented security policies, standards, process and technology. Consolidated several points solutions for NAC Network Access Control security, DLP, & web filter. Among other projects, Let the migrated from Symantec endpoints security to McAfee. Implemented client security RFP response Process.

Managed network security standards, architecture, design, implementation, and operational for a global enterprise WAN/LAN infrastructure across an $8 billion manufacturing and financial organization. Developed a global team with 16 direct reports in U.S., Latin America, China, Japan, & EU. Planned, designed & implemented network security standards to comply with SAS70 audit requirements. Implemented Cisco based IPS, IDS, & MARS System for proactive alerts and security incidents reporting. Standardized, Designed, implemented & supported 85 + Cisco Pix firewalls with secure DMZ architecture, networks that consists of MPLS, Frame Relay, ISDN, site-to-site VPN, point-to-point Gigabit Ethernet and dedicated / redundant Internet circuits for over 300 locations. Developed and led a team that planned and implemented RR Donnelley global WAN conversion project from Frame Relay to MPLS. The $9 million project was completed ahead of schedule in ten months. Partnered with Latin America operation to deploy VOIP tool-by pass to reduce cost by $300K a year. Reduced total cost of ownership (TCO) by implementing centralized global support model. Enterprise IT financial budget management; over $12MM of annual network services. Enhanced WAN performance and increased capacity, while reducing cost by 20% year over year. Management and support of enterprise Remote Access System, VPN & Dialup for 3000 + users. Headed the efforts to standardize & migrate to Cisco network equipment & technology: Cisco 1800 – 3800 routers, Cisco 3500 - 6500 switches, VPN Concentrators, Cisco Works, & Secure ACS TACACS. Experienced in network configuration and protocols: TCP/IP, EIGRP, BGP, NAT, ACL, VLAN, & OSPF. Introduced processes and procedures-based initiatives to manage network security standards.

Managed and led a team of three local IT and strategic sourcing personnel to deliver network and telecommunication solution for Chicago based GE Capital business unit. Strategically sourced and managed telecommunication vendor/supplier relationship base. Managed new company initiatives and growth delivering network infrastructure services. Evaluated, developed, Technology and Telecommunication purchasing processes & strategies guidelines. HELD SEVERAL POSITIONS PC SUPPORT & TELECOMMUNICATION PURCHASING Responsibility for purchasing telecommunication services, PCs, software/hardware, and various office technologies. Member of a project team that converted Wang mainframe to client server technologies, supported PCs, LAN related technologies WIN 3.1, 95, 98, for 250 user community. Worked on several projects to upgrade several businesses to WAN/LAN infrastructure.