Benjamin Stephan Email & Phone Number

Irvine, Ca, Us

Carthage, Missouri, Us

Lead cybersecurity strategy to protect over 135 manufacturing facilities in over 18 countries. Engage with senior executives and Board of Directors to align security initiatives with organizational goals and manage risks. Implement security controls, oversee incident response, and ensure regulatory compliance. Partner with Operational Technology (OT) teams to foster security awareness, support continuous improvement, and defend against cyber threats.✔ Spearheaded the Artificial Intelligence (AI) committee. Led senior management and technical experts to manage AI risks and identify opportunities to enhance business objectives.✔ Presented cybersecurity strategy to full Board of Directors quarterly. Addressed cybersecurity threats, industry trends, and information security risks.✔ Optimized the Enterprise Risk Management (ERM) program. Redesigned the strategy to save over 2000 hours, simplifying risk categories, quantifying risks against business objectives, and documenting risk tolerances.✔ Founded Business Continuity and Disaster Recovery program. Conducted business impact analysis (BIA), architected backup strategy based on RTO / RTO requirements, and promoted adoption and execution through training and awareness.✔ Championed the adoption of the Purdue Model. Educated engineers and technical experts on its benefits, engaging in architectural design sessions, and driving its integration into network strategies.✔ Integrated technology with industrial manufacturing. Engineered innovative technological solutions at the cell, machine, and device level.✔ Established a 24/7 global Security Operations Center. Partnered with Managed Security Services Provider (MSSP) to deliver threat intelligence, monitoring, and 24/7 cybersecurity incident response.✔ Acted as CIO for Aerospace business unit. Oversaw comprehensive IT responsibilities including project management, technology simplification, budget planning, and resource management.

Kirkland, Wa, Us

San Jose, Ca, Us

Western Digital (NASDAQ: WDC) is the world’s largest hard drive manufacturer, ranked #198 on Fortune 500, with $16.6B revenue. Reporting to the CISO, I drive security for a corporation with 61K+ employees, across global business, engineering, and 24x7 manufacturing. I develop and manage comprehensive programs for cyber security, cloud security, digital forensics, and risk & threat management, in collaboration with legal, privacy, regulatory compliance, physical security, and HR teams. ✔ Increased security and reduced risk, with minimal business disruption, by creating programs to address INSIDER THREAT, RANSOMWARE, EMAIL/PHISHING, VULNERABILITY MANAGEMENT, and CLOUD SECURITY. ✔ Drove cyber security infrastructure and governance. Designed & implemented security strategy based on NIST Cybersecurity Framework (CSF) and Mitre ATT&CK. ✔ Prepared board presentations, and established KPIs and KRIs aligned with strategic corporate objectives.✔ Built security operations center (SOC). Conducted ROI evaluations to assess offshoring and nearshoring. ✔ Ensured all IT-related compliance: SOX, PCI, GDPR, CCPA, etc.

Richland, Wa, Us

PNNL is a US Department of Energy (DoE) lab with a $1B operating budget and 2500+ US and foreign patents. As acting CISO, I spearheaded cyber security to protect the DoE’s inventions, research, and intellectual capital, including highly confidential materials. I oversaw risk management, regulatory compliance, security technology, incident response, and computer forensics. This included collaborating with DHS and DoE to attain approvals and funding, execute projects, and maintain accreditation. I managed and mentored a team of 15-20.✔ Transformed cyber security program by delivering a strategic overhaul of program and team. Constructed and matured a cyber operations program based on NIST, ITIL, COBIT, and ISO frameworks.✔ Innovated cyber security technology utilizing artificial intelligence & machine learning (AI/ML). Partnered with top national scientists/experts on design, prototyping, data validation, implementation, and operational integration. Consulted on go-to-market strategies as in-house advisor on commercialization. ✔ Created Department of Homeland Security (DHS) framework & strategy to uniformly assess cyber capabilities across all government agencies to determine risk scores. ✔ Recovered 30%+ of annual budget through technology rationalization, while improving ROI. ✔ Transformed culture and re-engaged employees by cultivating a collaborative environment through performance recognition, career development, increased communication, & coaching.✔ Mitigated insider threat and espionage of government intellectual research, partnering with IT executive leadership, GC, and audit, research, & HR leaders.✔ Architected enterprise multi-factor authentication (MFA) strategy. ✔ Budgeted annual public sector research funding, and ensured accountability and tracking.✔ Served on risk management committee, providing technical expertise to address various legal matters.

Milwaukee, Wisconsin, Us

Fiserv is a publicly traded (NASDAQ: FISV) global provider of financial services technology, with $5.25B revenue (2015). As head of information security and security operations, I oversaw IS architecture, engineering, and operations to secure $100M in daily transactions, including half the nation’s ATM infrastructure. I led risk management, PCI compliance, and remediation. ✔Directed a cross-functional team of 60+ and outsourced resources in Central America and India.✔Established value as strategic business partner to 50+ business units on all security-related initiatives.✔Drove strategic direction for robust information security program including 3-tiered response model, 24/7 coverage, and 99.999% uptime requirements. Maintained “five-nines” availability with zero outages. ✔Ensured remediation compliance of 80%+ by maintaining enterprise vulnerability management program. ✔Directed operational and engineering teams covering distributed system security (Windows/Linux), perimeter security technologies, certificate management, mainframe and midrange security, entitlement review, and XML firewall support.

Atlanta, Ga, Us

The Coca-Cola Company is a Fortune Global 500 (NYSE: KO) multinational beverage corporation with $45B revenue (2013). I established the corporate global security operations strategy to protect both the company and the brand—including bottlers—against risks, threats, hackers, and exposures; designed global risk management strategies; and partnered with managed security service providers (MSSP). I directed a computer incident response team (CIRT) covering 100+ countries, and outsourced IT support teams. I also managed a $20M technology portfolio.✔ Architected company’s security operations center (SOC) and monitoring practice.✔ Fueled cloud transformation as Cloud Strategy Committee member and a key security architect designing the transition to cloud. Established cloud security strategy.✔ Persuaded and gained support of corporate CFO, COO, and CISO to support and invest in new technologies and additional resources to scale vision of the new cyber security program.✔ Built security information & event management (SIEM) and data analytics roadmap for 5B+ logs/month.

Denver, Colorado, Us

Optiv, formerly FishNet Security, is a cyber security VAR ranked #46 on CRN Solution Provider 500 list. It was rebranded following a merger with Accuvant in 2014. I pioneered and led FishNet Security’s global incident management consulting practice, responding to high-profile hospitality breaches, hacktivist attack campaigns, credit card fraud, and advanced persistent threats (APT). My team included 20 incident responders and 100+ PCI forensic examiners. ✔ Established thought leadership and elevated the firm’s reputation by speaking/presenting at various conferences, media interviews & publications, and other events as an expert guest or keynote speaker on the topics of risk management, cyber trends & threats, incident response, PCI compliance, and computer forensics.✔ Launched and owned the Incident Response practice, adding $1M in new revenue within 1 year, and grew from 3 informal service offerings to 15 dedicated and formalized service lines. Built computer forensics lab, established business infrastructure, and led business development efforts. ✔ Earned designation as PCI Forensic Investigator (PFI) and tripled revenue to $3.5M+. By special invite from credit card company clients, completed certification and became PCI-certified for remediations.✔ Launched a product sales line and cemented $10M revenue pipeline. Identified business opportunity to directly sell cyber security products after making remediation recommendations to clients and cultivated strategic partnerships with key product vendors.✔ Supported international investigations for United States Secret Service (USSS) and served as an active member of various Electronic Crimes Task Forces (ECTF) across the country.✔ Served as Strategic Advisor for FS-ISAC (Financial Services Information Sharing and Analysis Center ) to counsel and educate global financial services industry leaders and CEOs on cyber threats and trends.

Denver, Colorado, Us

Prior to rebranding to Optiv, I worked for FishNet Security in a senior security consulting capacity.✔ Cemented FishNet Security as Guidance Software’s “Preferred Channel Partner” within the first 6 months of registering as a channel partner. ✔ Validated a point-of-sale (POS) application for a Fortune 500 energy infrastructure provider with offices in 100+ countries.✔ Maintained a greater than 95% billable utilization.

CSO was a boutique consulting firm specializing in risk, compliance, and digital forensics for Fortune 1000 and private clients. I conducted audits to assess corporate environments for regulatory compliance with Sarbanes–Oxley (SOX), ISO 17799, and HIPAA, and led strategy and implementation for projects related to risk management and remediation. ✔Increased revenue 30%-40% by building the computer forensics service line. Designed and implemented state-of-the-art computer forensics lab. Led business development to secure clients for new offering.✔Steered policies & procedures development and audits for SAS 70 compliance.✔Conducted gap analysis for corporate organizational strategies in comparison with ISO 17799 standards.

In this technical IT role, I performed web server administration and domain registration, and researched new technological advancements in internet publication. ✔ Minimized application development vulnerabilities by instituting secure coding procedures and policies.✔ Reduced vulnerabilities by implementing controls defined by QWASP top-ten list.

I created complex databases and designed websites for various clients, ensuring superior service and customer satisfaction by promptly resolving issues and concerns through technical support and in-house services.

Ciso Certification Program (Certified Ciso)

Bachelor Of Science In Engineering – Bse, Electrical Engineering