Andreessen Horowitz (a16z) is a renowned venture capital firm known for its visionary approach to technology investments. As the Chief Information Security Officer (CISO), I'm responsible for safeguarding the firm's digital assets and ensuring the integrity of sensitive information. I am tasked with overseeing the development, implementation, and management of comprehensive security policies and procedures. This includes conducting risk assessments, identifying vulnerabilities, and architecting robust defense mechanisms to safeguard digital assets. I lead a team of skilled professionals in detecting and mitigating potential threats, and orchestrating incident response protocols. Additionally, I am responsible for evaluating the security posture of potential portfolio companies, conducting due diligence assessments, and providing strategic guidance to mitigate risks associated with investments. I collaborate closely with executive leadership, legal, and compliance teams to ensure alignment of security initiatives with regulatory requirements and industry best practices.

Reporting to the CFO and accountable to the Board of Directors and Audit Committee in a dual hatted role. Responsible for Zscaler’s Security, Data and Privacy activities within region as well as driving thought leadership in these areas through speaking engagements, media appearances, and published articles. Led company-wide cyber risk management to align security strategy with the evolving threat landscape.

At Salesforce, Security is the #1 priority. As a representative of the CISO, I partner with executive and engineering leadership across all Salesforce business units to evangelize Cyber. As the Enterprise BISO, I lead the development of the cybersecurity vision and subsequently execute the strategy. Provide subject matter expertise to interpret and implement Security policies and standards, while driving the adoption of core security services including Identity, PKI, SSDL, Detection and Response, and Vulnerability Management.

Owned Security Engineering and Operations functions in a hands-on technical leadership capacity. Led teams of architects and engineers responsible for implementing technical security controls and processes to protect Blue Shield of California's infrastructure, customer data, and intellectual property. Managed security budget and vendor relationships.

Established Cybersecurity program, orchestrated a multi-year transformation. Rationalized portfolio of legacy technologies improving control efficacy while comprehensively reducing risk. Implemented foundational governance and assurance capabilities.

Built cyber Risk Management function to achieve regulatory compliance with HIPAA Security. Developed quantitative and qualitative risk assessment processes to measure security risk associated with critical assets.

Developed penetration testing and vulnerability management program. Design and implementation of network security solutions in first party and multi-tenant datacenters.

Supported pre & post-sales engagements with network engineering and security subject matter expertise. Designed and architected bespoke solutions for critical infrastructure.

Led engineering and operations activities supporting enterprise customers on global Frame Relay and ATM networks.

Operated global communication systems and networks supporting military and intelligence communities. Top Secret/SCI clearance (now expired). Honorably Discharged. AFSC changed to 3D1X2, Cyber Transport.