Chief Information Security Officer (CISO) & Cybersecurity Executive
Over 20 years of experience in Security Operations, Threat Intelligence, Incident Response, and Client Advisory.Before joining Brier & Thorn as its CISO, I led managed security services at Herjavec Group, reporting directly to CEO Robert Herjavec. I managed 150 staff across multiple business units, driving cybersecurity initiatives and client engagements.* Security Operations Centers (SOC) Development: Directed the design and implementation of global SOCs in Las Vegas, Singapore, Macau, and Pennsylvania for Sands Corporation. Oversaw strategic planning, facility design, and the integration of SIEM, EDR, and SOAR systems to enhance threat detection and response capabilities while ensuring compliance with regional and international security standards.* Client Advisory & Sales Initiatives: Supported sales teams by participating in client discussions, offering technical expertise, and designing custom cybersecurity frameworks. Conducted pre-sales technical consulting and provided security assessments that strengthened client trust and contributed to key contracts. Led client advisory workshops to educate stakeholders on security best practices and risk management.* Board-Level Presentations: Presented cybersecurity strategies and operational performance to boards of directors and C-level executives. Translated complex technical data into actionable business insights, regularly updating leadership on compliance, threat landscapes, and incident response, advocating for security investments.* SOC Operations Oversight: Managed global SOC operations, ensuring high efficiency across both on-premise and cloud environments. Developed operational playbooks and procedures to maintain compliance with PCI-DSS, GDPR, and ISO 27001, optimizing threat detection, real-time monitoring, and incident response.* Threat Management & Incident Response: Built advanced threat management programs, integrating real-time analytics and external threat intelligence feeds to detect and neutralize APTs and zero-day attacks. Developed and led IR plans, tabletop exercises, and simulations to ensure preparedness for major cyber incidents.* Cross-Functional Collaboration & Compliance: Collaborated with legal, IT, and compliance teams to align cybersecurity initiatives with business goals and regulatory requirements. Engaged with local authorities and auditors to ensure SOC readiness for audits and certifications, providing strategic recommendations to bolster resilience and continuity.