As CISO, I am responsible for overall security strategy and execution by managing cyber risk, protecting corporate, employee, and customer assets from compromise, and continually maturing security programs and digital resiliency. Over the course of my 20+ years in security, I have:* Engaged cross functionally with engineering, legal, risk, operations, finance, human resources, public relations, and senior leadership* Regularly reported to Board of Directors (BOD)* Managed application security (AppSec), governance risk and compliance (GRC), security engineering, privacy and trust, identity and access management (IAM) teams* Recruited, developed, mentored and led global teams ranging up to 200 headcount* Overseen compliance deliverables including PCI, SOC 2 / SSAE, ISO 27001, HIPAA, HITRUST, SOX and FedRAMP (NIST 800-53)* Aligned organizations for technical compliance with various regional security and privacy laws including GDPR, CCPA, etc.* Leveraged security frameworks such as NIST Cyber Security Frame (CSF), Center for Internet's Security (CIS), Cloud Security Alliance (CSA) to mange risk* Built relationships through regular cadence of clear communication through articulate expression of vision, roadmap, risks, challenges and solutions across audiences of varying technical depth* Demonstrated a track record of program implementation across: product security, Cloud security (AWS, Azure, and GCP), incident response, threat intelligence, vulnerability management, SSDLC, DLP/DR/BCP, IAM, information privacy, SOC management, security architecture, security policy/advocacy and risk assessments* Engaged in M&A due diligence, security assessments, and integrations* Managed program's budget and vendor negotiations in both growth and shrinking company dynamics* Implemented key security indicators (KSI) and other metrics to drive accountability* Operated as an executive in privately held, publicly traded ($4B+), and IPO'ing firms across financial services, managed services, and SaaS verticals