Fernando Medrano Email & Phone Number

San Francisco, CA, US

• Built an organization to collaborate with product and engineering on secure systems design, report on security risks and mitigation plans, establish a framework for data governance, obtain industry security compliance.
• Ensured the security and resilience of Fastly products and services by leading proactive design evaluations and threat modeling exercises throughout the SDLC
• Designed and implemented a security risk management program that resulted in quantification of security risks, risk mitigation tracking, and engagement of the right individuals to ensure informed risk-treatment decisions
• Led Fastly’s first, and now continual, security program maturity assessment relative to the NIST Cybersecurity Framework and reported on progress to the board
• Partnered with the Compliance organization to drive the process and control improvements needed for ISO 27001, PCI-DSS, SOC2, and GDPR certifications
• Conducted multiple due-diligence security assessments of organizations in contention for M&A activity

San Francisco, CA, US

San Francisco, CA, US

Oakland, California, US

• Recruited to create a culture of accountability within a 50+ person organization in order to mature the cyber practices, modernize the existing security technologies and capabilities, ensure successful audits, and.
• Exceeded board-level commitments for NIST CSF based program maturity targets (1.4 to 3.6 maturity)
• Spearheaded several technology updates including next-generation endpoint protection, data security program, CI/CD integrated code scanning, IDaaS, continuous monitoring and auto-remediation, etc.
• Hired and developed all the leaders in the security organization to be recognized for their performance and selection to broader succession plans
• Represented PG&E security program and interests directly with House Intelligence Committee to collaborate on critical infrastructure protection
• Implemented an automated and risk-based vulnerability management program with clear reporting on performance and SLA’s

Atlanta, GA, US

Responsible for a security engineering organization to design and implement all the security technologies used within the company, assess system and vendor risks, build a SOC and insider threat program, and implement a security architecture for a custom-built LTE network designed used for critical operations.

Atlanta, GA, US

Atlanta, GA, US

Armonk, New York, NY, US

Master’S Degree, Information Security

Bachelor’S Degree, Computer Science