Head the US Markets Information Security Officer (ISO) team, overseeing tasks such as selection, training, development, coaching, counseling, and performance management. Oversee and drive the implementation of the global cybersecurity assessment program throughout the organization, evaluating controls, procedures, and resources to pinpoint opportunities for enhancing program maturity. Evaluate key risk indicators and changes in the risk profile resulting from incidents, internal and external events, tooling, and independent control evaluations. Take charge of or coordinate audit and control assessments to facilitate thorough evaluations of information security controls, ensuring alignment with applicable frameworks, standards, and regulations. Collaborate with senior business and technology leaders, as well as stakeholders, to address risks and enhance program maturity. Contribute to the formulation, implementation, and management of information security policies and standards, ensuring visibility, education, and compliance. Identify risks and maturity gaps with the greatest potential impact on the business, working with leadership to prioritize initiatives within the Agile process, addressing these challenges and enhancing the overall risk posture of the organization.

Define the strategic direction for the of the Drexel University IT Security Program, focusing on areas such as awareness, prevention, risk management, compliance, and incident response. Established and orchestrated information security policies, standards, guidelines, and procedures in collaboration with key business and IT leaders, ensuring the confidentiality and integrity of sensitive data.Guided the development and management of the Computer Incident Response Plan. Align the strategic direction of the Information Security Program with the overarching IT and compliance strategy. Lead the internal Vulnerability and Threat Management program and external penetration testing program to evaluate and address findings to improve the university's overall risk posture. Oversee third-party security risk assessments, including HIPAA, PCI-DSS, FERPA, and NIST 800-171, ensuring compliance with policies, standards and regulations. Serve as a member of the Drexel University Security and Privacy Committee. Take charge and lead information security control initiatives, including Data Leakage Prevention (DLP), Security Information and Event Management (SIEM), Network Access Control (NAC), Antivirus Systems, Two-factor Authentication (MFA), Vulnerability Threat Management (VTM), Sensitive Data Discovery and Analysis, and Email security (with Advanced Threat Protection)