Looking for a job

Nima Sobhani

@nimasobhani

Technical Lead, DLP at Loblaw Companies Limited, designing risk-based controls that map sensitive data protections to audit frameworks.

Canada

Message

At Loblaw Companies Limited, I design DLP controls around data sensitivity and map them to regulatory and audit frameworks, including NIST, ISO 27001, and SOC 2. I also work with Cybersecurity, Legal, Privacy, and business teams to turn obligations into enforceable policies.

As Manager, Colleague Solutions, I owned enterprise identity and messaging platforms supporting 300,000+ users. I led deployments of SaaS-based solutions that saved more than $22 million in operational budgets, and architected a hybrid Exchange 2019 migration to Azure and GCVE.

Earlier, at Burgundy Asset Management, I created change management and vulnerability policies and led breach events and internal security investigations. My experience also includes supporting DLP and CASB technologies at Royal Bank of Canada and infrastructure and remote-access solutions at Chartright Air Group.

Experience

Work history, roles, and key accomplishments

Current

Technical Lead, DLP

Current

Loblaw Companies Limited

Dec 2025 - Present (9 months)

Classify and map sensitive data across the environment and design DLP policies mapped to regulatory frameworks. Partner cross-functionally to ensure compliance and architect layered DLP controls.

Data Loss Prevention GDPR PCI DSS NIST CASB Incident Response Risk Management Policy Design

Manager, Colleague Solutions

Loblaw Companies Limited

Dec 2022 - Dec 2025 (3 years)

Owned enterprise identity and messaging platforms supporting 300,000+ users, led SaaS deployments saving over $22M, and architected hybrid Exchange migration to cloud. Delivered 20% reduction in incidents and headcount.

Sailpoint Okta CyberArk Citrix Exchange Azure GCVE NIST ISO 27001 IAM Cloud Migration Vendor Consolidation

Lead Senior IT Systems and Security Administrator

Burgundy Asset Management

Apr 2021 - Nov 2022 (1 year 7 months)

Created and implemented change management and patching policies, reducing malware and phishing incidents. Led security investigations and maintained compliance audits.

Change Management Patch Management Security Awareness Incident Response Compliance Network Security

Senior IT Systems Administrator

Chartright Air Group

Jan 2020 - Apr 2020 (3 months)

Subject matter expert for infrastructure, VPN, and virtualization; deployed secure remote-access solutions supporting COVID-19 business continuity.

Infrastructure VPN Virtualization Remote Access

Senior Security Specialist, Data Loss Prevention

Royal Bank of Canada

Apr 2019 - Nov 2019 (7 months)

Coordinated and supported cloud-managed DLP and CASB technologies, maintained SLA on tickets, and liaised with stakeholders to align requirements.

Data Loss Prevention CASB Cloud Security SLA Management Stakeholder Management

Senior Systems Administrator, Level 3 POS Solutions

McDonald's Restaurants of Canada

Dec 2015 - Dec 2018 (3 years)

Led vendor, release, and problem management across POS deployments, managing budgets exceeding $10M.

Vendor Management Release Management Problem Management POS systems Budget Management

Progressive IT Operations Roles

Cara Operations Limited

Dec 2011 - Dec 2015 (4 years)

Progressed through five roles of increasing responsibility, including Service Desk Analyst, Shift Lead, Technical Project Support, Problem Management, and Senior Network Administrator.

Service Desk Shift Lead Technical Project Support Problem Management Network Administration