Michael S. Oberlaender - Premier Ciso Email & Phone Number

Spring, Texas, Us

GLOBAL CISO - STRATEGY, TACTICS, & LEADERSHIP: How to Succeed in InfoSec and CyberSecurityThis book is written by a C(I)SO for C(I)SOs – and also addresses CEOs, CROs, CLOs, CIOs, CTOs, Security Managers, Privacy Leaders, Lawyers, and even Marketing and Sales executives. It is written by a seven-time career CISO for other visionaries, leaders, strategists, architects, compliance and audit experts, those politically interested, as well as, revolutionaries, and students of IS, IT, and STEM subjects that want to step up their game in InfoSec and Cybersecurity. The book connects the dots about past data breaches and their misconceptions; provides an international perspective on privacy laws like GDPR and several others, about threat actors and threat vectors; introduces strategy and tactics for securing your organization; presents a first glimpse on leadership; explains security program planning and backup plans; examines team building; conceptualizes the governance board; explores budgets; cooperates with the PMO; divulges into tactics; further elaborates on leadership; establishes the reporting structure; illustrates risk assessments; elucidates security processes, principals, and architectural designs; enumerates security metrics; skims compliance; demonstrates attack surface reduction; explicates security intelligence; conceptualizes S-SDLC (SecDevOps); depicts security management; epitomizes global leadership; illustrates the cloud’s weaknesses; and finishes with an outlook on IoT. If you are in need of strong, proven, battle-tested security advice for a progressing security career, if you’re looking for the security wisdom of a global, experienced leader to make smart decisions, if you are an architect and want to know how to securely architect and design using guiding principles, design patterns, and controls, or even if you work in sales and want to understand how (not) to sell to the CISO – this is your almanac – and you will read and reference it many times.

San Jose, California, Us

It's my distinct pleasure serving on the Netenrich Security Advisory Council / Board Advisory and guiding with the strategy and roadmaps to win markets and new business. If you have a need for great security operations and better analytics or you seek synergies for your security teams get in touch and I will help you realize some quantum leaps in your security posture and visibility.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Salem, Oregon, Us

I have been serving on the Advisory Board for ElevateIT: Technology Summits since its inception.In addition, I have been giving speeches / conference talks / moderated CISO panels, and was panelist as well. See listed under volunteering. The company website is: http://www.eitevents.com.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Portland, Oregon, Us

I'm serving on the executive advisory council for SecureWorld since 2011:https://events.secureworld.io/details/houston-tx-2024/Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Schaumburg, Illinois, Us

In September, 2020 I was elected as board member and served on the board for the ISACA Greater Houston Chapter, which has about ~2,500 members. In 2022, I got re-elected as board member and have served on the board till the end of my second term in 2024. It was a great learning opportunity and pleasure to give back to the security and audit community in Houston. Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Boston, Massachusetts, Us

Key Accomplishments:■ Transformed security organization into 7 major pillars, rebuilt 70% (of 50) in 1 yr.■ Hired entire new leadership team, turned around loss of key talent and hired additional roles. Formed a fantastic team and improved survey scores in all dimensions and above "True Benchmark".■ Built new Sec PMO and new Sec Architecture & Engineering functions.■ Built out the SOC in additional region and ensured proper time zone coverage.■ Formed/created and lead (executed) globally the STAR initiative, rolling out & optimizing EDR, tightening MFA, and other such controls. Strong metrics showing improvements (coverage, protection).■ Formed new SPGB - exec leadership committee on security and privacy.■ Created, steered, led the Security & Product Standardization Working group, improved buy-in/standing.■ Introduced the new SecDevOps vision and concept, drove alignment, integration, adaptation with Engineering & technology leadership. ■ Led and improved the IR and RT/PT activities, preventing and stopping attacks. ■ Provided thought leadership to both internal and external entities via video sessions, presentations, and background communications. ■ Created new GRC policy hierarchy, entirely rebuilt or created new policies, standards, procedures to ensure proper guidance, compliance, and protections. Team delivered SOC2, ISO27001, incl. 1st for LP, C5, and similar compliance certs for our products.■ Created / managed budget, drilled into lack of documentation and refocused the spend in key areas.■ Streamlined / centralized approval process and ensured consistency across security org. ■ Introduced new key tools/providers for dev training, threat intelligence, pen testing, CMDB, etc. ■ Led & delivered multiple awareness & engagement videos/material, CEO session Cybersecurity month, communicated threat response to ELT.■ Developed strategy & roadmap for sec org. Prepared LP Spinoff. Engaged cross functional teams to improve resilience.

Beaverton, Or, Us

FIDO Alliance Leadership - Board MemberMichael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Mountain View, California, Us

Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

San Jose, California, Us

Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

I have served as the first Global CISO and GVP.Key Accomplishments:■ Transformed to first-ever integrated global enterprise security organization comprised of six functional areas spanning the whole security life-cycle (plan-build-run-monitor) and delivered a security & privacy by design approach. ■ Centralized resources and budgets, developed program, and planned further strategy and budget. Hired key leaders for multi-pillar security organization independent of IT, CS, R&D, PS.■ Performed full RT exercise and developed the response, IR, validated by table tops. Managed multiple incidents via enhanced SecOps and enforced continuous improvement cycles. ■ Forming world-class team and building security into the SecDevOps model via S-SDLC. Consolidated formally approved policies, standards, procedures, published via Intranet. ■ Attracted & retained security experts against market competition via charisma, leadership, and vision. ■ Quarterly Board and A/C presentations, ISSB, maturation and process optimization.■ EDR, 2FA, SIEM, SOC, IR, TVM, PAM, Password Vault, and many more key components of enterprise security program introduced, enforced CCTVs and physical control improvements.■ Envisioned, planned & implemented enterprise SOC, BCM/DR, SOC1/2, ISO27k etc. ■ Enhanced contract languages, team performed 90+ 3rd party RAs & 360+ other risk activities. Setup new security portals via SharePoint and Teams, introduced metrics, and -reporting template for enhanced tracking and management.■ Lead creation of new security logo, mascot, video messaging to new hires, anti-phishing, awareness. ■ Lead establishment of new vulnerability and threat management program; consolidating pentests and vulnerability scans; PoCs & rollout for new scanners, password vault, GRC tool, and tokens.■ Aligned global title structure for scaling and global growth.■ Invented, and guided my direct leadership team to build world-class security services and engagement model.

Santa Clara, California, Us

Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Houston, Texas, Us

I've served as the first Global CISO. ■ Completely created, launched, and instituted enterprise security program & organization: plan, strategy, organization, budget, operations. ■ Presented to board and audit committee full security program and got approval.■ Protected enterprise from multiple major incidents and secured systems before external visibility. ■ Assessed current state, defined purpose, vision, mission, strategy, IS program.■ Achieved savings of $10M+ via negotiations of new tool (re-)placements & service purchases.■ Sextupled FTE team size, built trust & collaboration across functions.■ Established fully outsourced SOC, negotiated 3rd party contract.■ Attracted & retained expert security specialists against market trends and within budget. ■ Led initiative for secure data handling, shredder, vault (safe).■ Managed daily contract negotiations and security controls SSAE16 / SOC1 SOC2 SOC3.■ Lead high level metrics definition, building IS dashboard. ■ Executed multiple full table top IR simulations & pen-tests. Led, built, and managed complete ISDBRP using sim. results, intel. feeds.■ Enforced RCA & LL sessions / reports. Prepared 9 quart. audit committee meetings as SME. ■ Accountable for PCI DSS 3.2 re-certification, successfully obtained for 2015-2017ff. ■ Improved SOX, HIPAA, and sec controls by implementing privileged IDAM. ■ Oversaw all security policies, standards & procedures. ■ Steered full-size awareness prg, incl. all COM channels, ~85% improvements.■ Led and performed enterprise wide IS Risk Assessment. Run full red team exercise. ■ Prepared & budgeted enterprise-wide encryption plan, vendor selection / multi-PoC performance. ■ Introduced and managed security lab, steered and structured VM program, PMO alignment.■ Defense in depth / attack surface reduction: CASB, EE, DC, AWL, DAST, SAST, secure portal, WAF, FW refresh, DAM, 2FA, netw. segm. design, SIEM, NAC, and Sec Arch design. ■ Envisioned new DevSecOps approach.

San Jose, Ca, Us

■ Trusted adviser to the CIO/CISO/CSOs of the largest companies of the world (Global F100)■ Providing thought leadership and global expertise■ Alignment of security strategies to customer business strategies■ Partnering with other executives to drive change in the world■ Influenced and contributed to the 2014 Cisco Annual Security Report■ Build the Service definition and scope material■ Blogging and publishing thought leadership material in the market■ Defining and aligning the Risk Control Framework for Process Control NetworksMichael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

North Sydney, Nsw, Au

Major accomplishments:■ Department leadership of the globally dispersed group of strategy and architecture, spanning locations between USA, Canada, Australia, and Malaysia, and consisting of a team of 5-6 architects. Disciplinary and budgetary responsibility for the group and team building efforts and certifications (i.e. TOGAF).■ Analysis, gathering, and documentation of the “Current State Document” resulting in a concise overview.■ On-going development of the architectural roadmaps to support the Global iM Strategy.■ Formulation and consolidation of the “Guiding Principles” (in total 36 principles based on TOGAF and internal requirements). Obtained full leadership buy-in across the IM organization to support those high level design principles. ■ Development of a full-blown “Ueber-Roadmap” (1700+ items) of detailed strategy pieces in a teamed approach, leading to a clear understanding of work efforts, costs and inter-dependencies. ■ Development of an architecture governance framework, definition of an Architectural Governance Board, project governance, and alignment (including a comprehensive scoring matrix). Formulation of a 160 line items RACI chart matrix covering all major pillars of enterprise architecture. Also delivered an approach to succinctly evolve the architecture realm into a full enterprise level.■ Reviewed solution designs (e.g.: EMSAS, Encompass, BYOD, intranet, Citrix, enterprise network architecture, global data center design, DC tiers and mapping thereof, collaboration and communication, data classification, ESB/SOA design, and various other concepts).■ Teaming with the security team to achieve integrated and aligned security architecture across the board.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

London, Gb

I have been serving as CSO for Kabel Deutschland for the last 2 years at their corporate headquarters in Unterfoehring near Munich, Germany. Major accomplishments:■ Increased the maturity status (CMMI model) from 0 to 3, by turning around an unstructured, chaotic security situation into a process and metrics driven environment. ■ Built & formed a world class security team from scratch (1) to now (10) full time and (3) external resources.■ Built trust, security organization, security policies. Assessed processes, systems, gaps and delivered the strategic master plan.■ Audited the major technical operations and ticketing system against ISO27002 and best practices. Influenced change in the development process and quality controls. ■ Influenced and enforced the adoption and roll-out of a secure browser, saving approx. 5 million EURO/year as positive side-effect due to productivity gains.■ Introduced security cameras at a neuralgic point of theft and convicted the thief in an extremely short time frame.■ Planned, built and run the corporate security awareness program "security first", consisting of several phases focused on certain subjects using all kind of channels and education methods. Success rate of more than 80%.■ Enforced physical and information security policies and measures, leading to a more secure condition of the corporation.■ Executed the strategic security program and delivered the agreed milestones.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Houston, Texas, Us

Protected and secured strategically all company information assets and developed and run the corporate awareness and security program. Defined targets, created solutions, succeeded against competitive information espionage. Performed risk based information security.Major accomplishments:■ Revised the corporate information security policy.■ Secured the major engineering system against cyber-attacks.■ Created and introduced the global risk assessment process for all IT.■ Heightened security awareness throughout the enterprise.■ Managed (and succeeded in) global information security crises.■ “safe harbor” in regards to EU directive 95/46/EC and FTC.■ Executed information security program planning.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Heidelberg, De

Strategically designed and managed the IT Security program and steered the internal and external involved people. Created awareness, improved reliability (C-I-A) and was responsible for overall performance. Tracked and adjusted security incidents and problems and created/optimized processes to reduce global impact.Major accomplishments:■ Centralized the security framework including policies.■ Streamlined the whole group intranet-security-structure.■ Significantly reduced (>95%) un-patched servers, leading to a more resilient state, resulting in less downtime / business loss.■ Introduced ITIL into the information security department.■ Global department management and team building.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Mannheim, De

Introduced and managed security as enterprise IT target, created awareness, designed policy and detailed plans of internet infrastructure, built and run the whole DMZ structure. Secured network and servers, documented handbook of security, managed certificates, hold lectures and trained employees about IT and security.Major accomplishments:■ Completely redesigned, planned, built and run the new internet architecture resulting in a secure, reliable, highly available and load-balanced infrastructure.■ Established a complete 4-tier antivirus-software-concept with automatic updating, and reduced the virus-impact 4 orders of magnitude.■ Redesigned the Backbone.■ Corporate Security Policy development.■ Certificate-management (Post-Ident-procedure).Take a look at how I enabled a better business process:http://www.vordel.com/customers/suedzuker.htmlMichael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Fernwald, Hesse, De

Assisted department head in designing / developing features, on-site and off-site of large customers, responsibly headed the source-code transfer project, developed collaboration tools (UNIX/Windows). Optimized database-usage and documentation.Major accomplishments:■ Project leader NT-source code transferring for the ERP solution, including external contributors.■ Introduction of MS Visual Studio and MS Visual Source Safe, in particular the integration of these Windows systems into the existing UNIX-environment (own scripts).■ Installation and coordination of a central timeserver (using a radio controlled clock) for all computer systems.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Wiesbaden, De

Developed with 4GL software features in main (LOGA) and side product lines, engineered db-structure -queries, visited customers and quality-assured the products. Special task force contributor.■ Automation scripts for software development tests (WinRunner).■ Enabled "web-front end" for the travel module.■ First replication project of a distributed oracle 7.3 database.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Planning, Designing, Programming, Administering 4 GL Progress Database and the entire ERP system, Network planning and maintenance, support of all IT operations.■ Autonomous software development projects, such as electronic data-exchange with other companies and banks (instead of paper-work).■ Development of a CASE-Tool to automate the creation of full programs (masks, logic, db-structures).■ Migration from a WANG system to a PC based Novell LAN.Michael Oberlaender, Chief Security Officer (CSO)Michael Oberlaender, Chief Information Security Officer (CISO)

Abitur, Mathematics, Physics

Master Of Science (Dipl. Phys.), Physics