![Paul Shane headshot](/_next/image?url=https%3A%2F%2Fedge.sitecorecloud.io%2Fmillimaninc5660-milliman6442-prod27d5-0001%2Fmedia%2FMilliman%2FImages%2FBio-Headshots%2Fq-z%2Fs%2Fshane-paul2.jpg%3Fh%3D560%26iar%3D0%26w%3D400&w=828&q=75)
Paul Shane
Paul Shane is principal and director of Milliman Health Information Security Compliance (HISC).
Paul’s primary goal within Health’s security compliance program is to lead Milliman’s third-party security audits with efficiency while improving maturity scores within HITRUST’s security framework. Paul also assists Milliman IT teams in the implementation of improved security controls. The HISC team also supports other compliance activities such as the Milliman Health risk register, the compliance service desk, and a variety of client risk reviews.
Experience
Paul has over 20 years of experience within information technology and security. Before transferring to HISC, Paul served as the IT Director for the Philadelphia office, responsible for running IT operations for all local business units. Paul was also a member of the Security & Technology Steering Group (STSG); he is the leader of Milliman's internal security review program and other firm-wide initiatives. Paul presents annually on various IT and security topics at Milliman's IT and Health forums.
- Certified Information Systems Security Professional (CISSP)
- Information Technology Infrastucture Library (ITIL)
- Certified CSF Practitioner (CCSFP)
- BA, Grove City College
- M.DIV Gordon Conwell