Molly Shek, PMP, CISM, CGEIT, MS

Molly Shek graduated from the University of Texas Health Science Center at Houston (UTHealth) with a Master’s Degree in Health Information Sciences in 2001. Currently, Shek works as the Senior Security Analyst at the MD Anderson Cancer Center.

Since graduating from UTHealth, Shek has worked her way up at UT M.D. Anderson Cancer Center. In 2006, Shek received a promotion from Security Analyst to Senior Security Analyst in the Risk Management section of the Information Security Department. Her duties included Regulatory Compliance, software implementation and risk assessment. She also completed the mapping of all the federal, state and U.T. System information security regulations into one Unified Control Matrix. Since then, she has been updating the Matrix based on current regulations. The Matrix is the basis of the Application Risk Assessments as well as the Information Security Policies and Procedures.  

In 2009, Shek obtained her Project Management Professional designation and was the Project Manager for the online Risk Assessment Tool Project. The project went live in September 2010. UT M.D. Anderson Cancer Center bought a basic risk assessment software and customized it to be used at the institution. With the implementation of the online Risk Assessment Tool, the paper based methods of performing application risk assessments were converted to the online application risk assessments. UT M.D. Anderson Cancer Center has been able to save over 30 percent in man-hours to perform risk assessments in just one month. As users acquire proficiency, one may expect much higher efficiency in conducting risk assessments.

One of Shek’s duties is to provide information security training and awareness. She designs and delivers the monthly Information Security training to all new faculty members and has received a number of positive comments from the faculty.  

Shek also received the following designations:
2009 - Certified in the Governance of Enterprise IT (CGEIT)
2006 - Certified Information Security Manager (CISM)