Global responsibility for protecting company’s information assets and corporate-wide cyber risk management program. Provides overall leadership and direction for global cyber security teams who manage cyber defense, including 24/7 SOC, security governance, security architecture, product security, identity and access management, disaster recovery and security compliance programs.

The position reported to HP’s Global Chief Information Security Officer (CISO) with responsibility for developing cyber strategy, engineering security solutions and securing products through effective collaboration with various engineering teams across HP. Managed a global team comprised of deeply technical cyber security professionals across 3 continents. Key Accomplishments:- Developed overall strategy, roadmap and plans for HP’s cyber security program from the ground-up since split in November, 2015- Developed board-level presentations on cyber security risk posture - Built HP product and application security program from ground-up including security architecture, vulnerability assessment, penetration testing, code signing and incident response services- Defined the vision and led security engineering efforts for rapid transition to public cloud; Delivered custom cloud-native security solutions at scale covering ~1000 cloud accounts in AWS and Azure - Built and operated a highly available & resilient code signing solution to validate authenticity and integrity for all HP products- Led Red Team exercises spanning HP infrastructure, applications and products- Built high performance teams by attracting, mentoring and retaining top cyber security talent- Executed plans for early exit of TSAs with the parent company resulting in multi-million dollar per year savings

Progressive management and leadership positions in client service roles as part of Deloitte’s Cyber Risk Services practice. Oversaw project portfolios with multi-million-dollar budgets involving large global teams. Primarily served clients in the Technology, Media and Banking industries.Solutions Delivered:- Cyber security strategies including roadmaps, action plans, associated timelines and budgets- Product security programs covering security design reviews, threat modeling, static & dynamic code analysis and penetration testing for desktop software, server-side, and cloud products- Cloud security architecture, solution engineering, security operations and compliance - Identity and Access Management solutions including user provisioning, single sign-on, directory integration and federation solution implementation- Security and risk assessments involving execution of technical (e.g., vulnerability) and non-technical (capability/maturity) analysis of networks, applications and systems- Compliance and trust programs including ISO 27001, SSAE 16, SOC2/3, GLBA, FFIEC, NIST, SOX, PCI, HIPAA and FEDRAMP - Chief architect of Deloitte’s Cloud Security practice - Led teams to architect, develop and roll-out of Deloitte’s Privacy & Data Protection portal, a market differentiating client delivery solution, using open source technologies- Security in mergers, acquisitions and divestitures - Intellectual property (IP) protection

Led development of reusable portal components using BEA portal framework for use across SPE lines of business. Defined a framework for customization, integration with enterprise systems, and operational support.

Asera Inc was a Kleiner Perkins funded start-up. Key responsibilities included engineering several key product features including Access Management, Reporting and Usage Tracking.