Whirlpool (NYSE:WHR), a 112-year old company with a legacy of success and vision anchored on improving life at home. In an increasingly digital world, Whirlpool drives purposeful innovation to meet the evolving needs of consumers through its iconic brand portfolio, including Whirlpool, KitchenAid, Maytag, Hotpoint, Consul, Brastemp, Amana, Bauknecht, JennAir, Indesit and Yummly. In 2023, the company reported $20 billion sales, 70K employees and 54 manufacturing and technology research centers.As Whirlpool’s VP and Global Information Security Officer, responsible for program transformation into a modern world-class Global Cyber Resilience Program, rooted in industry best practices and leveraging a comprehensive technology stack, modern organization and leveraging a global footprint.

Chair of the Board of Advisors for the Certified Chief Information Security (C|CISO) Certification. Works with fellow board members to position this new certification as the industry standard for CISO roles globally.

Lennar (NYSE:LEN) is a $34B Fortune 150 company that has built the reputation as one of America's smartest and most innovative real state, financial services, property development, and capital management companies. As the Chief Security Officer, my responsibilities encompass all physical and information security initiatives in support of 6 lines of business, over 10,000 associates and 1200 locations operating in 20 US states and 44 markets.Reporting to the Chief Financial Officer and accountable to the Board of Directors, I am responsible for Security Governance, Security Risk and Compliance Management, Security Architecture and developing a portfolio of shared enterprise services that includes: Physical Security, Security Awareness, Incident Response, IAM, Application Security, BC/DR, Security Monitoring and Litigation Support.

World Wide Technology is an award winning systems integrator with over 17$ Billion in revenue, global presence and ranked #34 on FORTUNE’s “100 Best Companies to Work For” list. World Wide Technology brings an innovative and proven approach to how large private and public organizations evaluate, architect and implement multi-vendor technology solutions and consulting services.Manage the Risk and Compliance National Practice by supporting the delivery of security solutions and consulting services to clients on a global and enterprise scale. This security practice supports a range of clients in the development and planning of security programs and establishing, implementing, monitoring, and maintaining a security posture.

Lead a small consulting services organization focused on providing trusted advisory services to a select number of small, medium and large organizations.Led around 20 engagements over the last 5 years for organizations in US, Europe, South America and Africa. Engagements typically ranged from 2 weeks to 3 months with as many as 4 consultants. The majority of these engagements where focused on: PCI compliance – gap analysis, risk assessments, application vulnerability assessments, security training and technology evaluations. Heavy focus in developing security programs to meet compliance requirements.Engagement Examples:• Assisted a technology organization to better focus their products and services meet customer regulatory PCI requirements in Europe.• Assisted a hospitality company deal with remediation after a data breach in the US.• Provided trusted advisory services to a large transportation entity meet PCI requirements in Africa.• Assisted a large call center provider evaluate a portfolio of security technologies to meet compliance mandates. This organization employs 30,000 employees on 70 contact centers across 27 countries. Based in Europe.• Provided Application Security training to 20 developers of a software development organization in South America.• Performed a risk assessment for a medium sized business process outsourcing organization hoping to perform fraud management processes on behalf of a large retail company in the US.• Assisted a large state government agency in creating a risk mitigation roadmap to address HIPPA violations and fines.

Protected the integrity, confidentiality and availability of all systems and business processes serving over 5 million customers in a highly regulated environment (PCI level 1 merchant).Created from the ground up the Information Security and Privacy Office (ISPO) at the Florida’s Turnpike Enterprise in reaction to security demands and compliance requirements. Based the security program on industry best practices (ISO and NIST) and on compliance and industry regulations (PCI and privacy laws).Led a multi-million dollar project to achieve PCI Level 1 PCI compliance in a record 6 months. Achieved all PCI compliance requirements for 5 consecutive years. Created a security governance process with the full support of executive management. Implemented a security risk management process following industry best practices (ISO, NIST). Implemented a Security Compliance Management program that tracked and measured compliance to Payment Card Industry Security Standards (PCI), internal policies, State of Florida Administrative Codes, Laws, policies and standards. Managed the Security Operations team. Led the initial implementation and the daily management of many key security infrastructure controls.Provided Security Architecture subject matter expertise to all projects. Created, managed and led the Security Incident Response process and protocol in close alignment to industry best practices and PCI requirements. Implemented a Security Awareness Program, which included Computer Based Training, security bulletins, pamphlets and posters.Implemented and managed the enterprise Disaster Recovery and Business Continuity program. This program included the creation and updates of technology recovery plans, business continuity plans and hurricane preparation plans.Implemented an Application Security framework and associated processes.

Contribute on a regular basis with subject matter expertise to develop and update the security exams for the gold standard of information security certifications – Certified Information Systems Security Professional (CISSP) and Information Systems Security Architecture Professional (ISSAP).

Joined Cybertrust, one of the largest security pure-play firms in the world, to help lead the security professional services organization. Provided trusted advisory services to Cybertrust customers with heavy focus on Security Program Management, Compliance to the Payment Card Industry Data Security Standards (PCI-DSS) and Managed Security Services.

Joined CheckFree Corp., a global provider of financial electronic commerce and the leading provider of online banking, online bill payment and electronic bill payment services. The main task was to stabilize and modernize the security infrastructure in order to provide highly available services to most of the largest US banks.Built and managed a security engineering and operations team consisting of 8 senior level security engineers who protected CheckFree’s online bill payment environment which serviced most large bank customers in the US, including Bank of America, Chase, Wells Fargo and Wachovia.Led a massive project to replace the aging network security infrastructure with leading edge next generation technology and leveraging load balancing technologies across multiple data centers.Met stringent SLAs and KPIs for all security infrastructure and successfully met all six sigma requirements for availability.

Created and managed the Enterprise Security Engineering team. Provided leadership and technology direction in the areas of Network, Mainframe, Client/Server and application security. Managed a team of 10 security engineers and analysts.Implemented a comprehensive enterprise strategy for security, which included: Implementation of Public Key Infrastructure (PKI), authorization, encryption, Firewalls, Intrusion Detection, and security management services. Laid the foundation for a modern business-centric security organization to handle governance risk and compliance. This truly was a visionary approach at the time.Responsible for all security aspects and successful initial deployment of Delta’s SkyLinks website. This website was the first ever to provide customers with the ability to book travel on-line. This website became the gold standard and model for the airline industry. Responsible for the architecture and all the security aspects of the “Wired Workforce Initiative” which provided home computers and VPN connectivity to over 50,000 employees worldwide at minimal cost. This project was recognized as visionary and won many industry awards.