• Designs, builds, and leads a team that ensures the security of enterprise data and systems by developing enterprise information security solutions. • Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats. • Researches, designs, and develops new enterprise technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. • Serves as a security expert in application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices.• Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security strategy and architecture.• Engages with security specialists, enterprise architects and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements. • Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. • Works with Enterprise Architects and other functional area architects and security specialists to ensure adequate security solutions are in place throughout all IT systems and platforms to mitigate identified risks sufficiently and support business objectives. • Serves as an expert in platform, application, storage, network, virtualization, cloud and mobile security best practices.• Exercises thought leadership in the creation and maintenance of security architectures.

John Colon is a senior information security professional with more than 30 years of experience assisting global organizations with the design, deployment and operationalization of cyber security strategies and solutions. John is an accomplished Chief Information Security Officer and Security Architect, bringing a a blend of business acumen, risk management expertise, and high technology skills. He has in-depth knowledge of legal, regulatory, governance, and compliance issues related to cybersecurity, and a solid track record in creating competent teams to manage and mitigate emerging risks. Some of the key accomplishments in this role include, but are not limited to:• Directed the Cybersecurity Maturity Assessment for a $30B global management consulting firm, guiding the cybersecurity budget prioritization.• Served as the Business Information Security Officer for the e-commerce division of a $6B global fashion design company, enhancing the security design of the e-commerce platform.• Led security architecture review services for a $58B global pharmaceutical company, building a global service for security review and approval of IT demands.• Implemented an Information Security Management System (ISMS) for a $10.5B global management consulting firm, achieving ISO 27000 certification.• Assisted a telecommunications services organization in passing an FCC regulatory audit for mobile number portability.• Worked with a $135B global telecommunications provider to meet MPAA standards for film asset management and digital/physical content security.• Served as a cybersecurity trusted advisor for a $94B global life sciences client, developing the Data Loss Prevention (DLP) strategy for the client and also working with the client’s CISO to restructure the global cybersecurity organization and re-define roles and responsibilities across the enterprise.

Director of Information Security (CISO) - • Led all aspects of cybersecurity, including the design and implementation of the Internet Security Infrastructure for secure customer payroll processing.