Global information security and privacy leader with a business mindset and strategic focus on transforming programs to deliver business value while effectively managing risk. Builds strong relationships with business leaders, technology leaders, and Boards serving as a trusted advisor. Adept at communicating security and privacy risk in business terms with demonstrated results developing, implementing, and overseeing global risk-based strategies and solutions aligned with business objectives.A published author and speaker with more than two decades of information security, privacy, physical security, continuity & resilience, crisis management, and enterprise/technology risk leadership experience. Expertise in global risk frameworks (e.g., ISO, NIST, FFIEC, COBIT, PCI) and regulations (e.g., GLBA, SOX, Reg S-P, PIPEDA, HIPAA, SEC/FINRA, OCC, FDIC, GDPR/CCPA, Singapore Cybersecurity Act, China Cybersecurity Law). Maintains National Association of Corporate Directors Directorship Certification (NACD.DC), Certified Information Systems Security Professional (CISSP), and Certified Information Privacy Professional (CIPP/US) designations.
Listed skills include Information Security, Security, Risk Management, Governance, and 5 others.