Innovative Global Chief Information Security Officer responsible for the cyber security for the world's largest casual dining company with approximately 77,000 Team Members and more than 1,450 restaurants worldwide. Developed industry-leading and award-winning enterprise-wide Global Information Security and Compliance Program, resulting in lowered multiyear cyber liability rates and industry-leading cyber security scores. Provided leadership in delivering the enterprise-wide digital transformation and cloud security strategy. Led consultation and trusted advisory services for business leaders developing pragmatic controls solving complex business problems. Created programs for secure code training, phishing awareness, incident response, general information security awareness, data privacy, PCI, and SOX to enhance security-conscious culture. Planned, developed, and managed numerous internal/external red team exercises, penetration tests, risk assessments, and vulnerability tests throughout the enterprise to establish confidentiality, integrity, and information assets/system availability. Formulated successful, five-year security roadmap aligned to perceived threat horizon, IT strategy, and business requirements. Orchestrated creation, management, and alignment of security metrics, SLAs, and SLOs for business strategy and IT objectives. Embedded pragmatic security controls in the development lifecycle for both internal and third-party business projects and balanced business requirements with acceptable levels of residual risk.

Global Chief Information Security Officer responsible for Cyber Security Operations and risk management for Office Depot and Office Max global business portfolio with over 14 billion in revenue and 1500 locations worldwide, award-winning eCommerce and B2B channels. Produced global standards and policies to support information security standards (ISO 27001), NIST frameworks, compliance regulations/controls of functional tasks, business requirements, and IT process controls. Oversaw development of worldwide security operations center and maintained logging/monitoring and threat and vulnerability management to provide efficient detective and preventive controls. Conducted insider investigations and interviews as directed by General Counsel or as warranted by investigative measures. Implemented policies, standards, security frameworks, and operational security functions across North America, Europe, Asia, and South America. Performed physical penetration and social engineering tests to validate physical security controls. Managed multimillion-dollar budget and maintained positive resource allocation to establish effective return on security investment (ROSI). Governed global incident lifecycle and complex incidents to establish successful outcomes with minimal disruption and exposure. Led global organization to align compliance and security controls to regional and country standards.