Patrick J. Salas Email & Phone Number

In my role as CIO, and as a partner, I have the responsibility to establish strategic alliances, further develop, and grow the vCISO consulting practice, delivering key consulting services like these to our clients:• Information Privacy compliance with HIPAA, CCPA/CPRA, GDPR, and other laws and regulations.• Information security program evaluation and prescriptive recommendations to improve their security posture.• Information Security Program and Policies to assure data protection and readiness for saucerful ISO27001, and for SSAE18 SOC Type 2 attestation audits.• Information • Cloud security (Azure & AWS) services that help clients contextualize the secure architecture of their cloud environments and applications to implement distributed controls and management visibility.• Cyber resilience services that help clients prepare for, respond to, and recover from cyber incidents.• Cyber education and awareness services that help clients train and empower their employees to be cyber savvy.• Business process optimization and proper workflow automation.CPO Solutions delivers specialized business process optimization and information security management and advisory consulting to clients, small (50-100 employees) and large (500+ employees) in order to achieve their strategic goals and digital transformation objectives. We thrive by providing them with best-in-class information security solutions and services tailored to their goals and objectives. CPO Solutions has a team of recognized, and certified information security professionals who have experience and deep expertise in various information security domains. CPO Solutions serves clients across various industries and sectors, including legal, finance, healthcare, education, retail, manufacturing, and government. In addition to the internal responsibilities.

New York, New York, Us

Global Information Security Officer consultant, with global responsibilities for overall information security governance, InfoSec operations, information risk governance, technology strategic planning (TSP), and privacy control and compliance for MARCUM and subsidiaries across the USA and ever-growing International locations. Marcum values its enterprise risk management, assurance, and the protection of client confidentiality! Expert advisory support to several v-CISOs in the professional services Technology subsidiary of Marcum LLP.

New York, Ny, Us

Chief Information Security Officer (CISO) functional role and responsibilities, oversees the information security/privacy program and operation. Chief Data Officer functions with information-related audits/assessment director responsibility, and overall cybersecurity compliance and controls for the firm globally. Manage client audits/assessments of companies in highly regulated industries (financial services, healthcare, etc.) including Privacy sensitive companies under GDPR. • Identifies, reviews, and recommends information security improvements as they relate to the achievement of Kramer Levin’s business goals and objectives, including preparation for GDPR Compliance.• Championed and managed the ISO/IEC 27001 & 27701 Certification initiatives while improving the Firm's Information Security Posture, NIST controls, and ISMS practices. Drive client (in Finance and Healthcare industries) Internal audits and corrective action compliance projects.• Manages operational security SOC, and drives remediation efforts related to information security; remediation may be from incidents, penetration tests, vulnerability scans, internal/external audits and Critical Practice assessments.• Lead and representing information security in delivery / operational meetings; conducting information security operational review meetings with key stakeholders on topics including information security status and performance.• Maintains an information security strategy (forward looking roadmap), aligning services / portfolio components to the strategy in line with SANS top 20 technical controls,Firewall Management Oversight, and FIPS related controls.• Maintains the Business Continuity manual, maintaining all procedures and policies are up to date as required by the firm's CIO. Data scientist and influencer in architecture, data retention/deletion, Document Management, and business intelligence.• Manages the vendors/suppliers' risk assessment and vetting process.

San Francisco, California, Us

Global Chief Security Officer role, oversee all internal and client activities related to the development, implementation, incident response, and adherence to the Firm’s privacy program in compliance with federal and state laws and industry standards including early preparation for EU General Data Protection Regulation ( GDPR ). Manage Audits by client companies in including public sector, and most importantly client assessments of companies in highly regulated companies (financial services, insurance, healthcare, etc.).Functional CPO responsibilities working in concert with the Chief Information Officer (CIO) and Privacy Expertise Partners in the establishment of the Firm's Information Security and Risk Management program to maintain information assurance and prepare for GDRP and NIST compliance throughout the global MoFo enterprise organization distributed over in 17 offices in key technology and financial centers in the United States, Europe and Asia, our clients include some of the largest financial institutions, investment banks, and Fortune 100 companies in America.In charge of multipractice Data Protection Officers (DPO's) around all international offices, and in charge of performing and directing risk assessments (i.e., protected information privacy and security audits, policies and procedures, trends analyses, audits, projects and violation investigations) to ensure Firm-wide compliance with Privacy Shield and GDPR.Advise and partners with Chief Information Officer on information technology risk and control implementation, such requirements as regulatory, external audit and risk management processing, conducting periodic technology risk assessments.As Department Manager, oversee and lead the implementation of information security safeguards, firewall management, and overall IT Strategy.Ensures confidentiality of the Firm’s data, proprietary information and intellectual property. Consistent with the Firm’s policy I documented.

Business Intelligence, Privacy, Compliance, Cloud Architecture & Security operations, Governance, Information Security, Enterprise Risk Management, & Technology Strategic Planning. Responsibilities for in-house infrastructure and client advisory.• In his dual role as Chief Information Officer (CIO) and Chief Information Security Officer (CISO). Patrick, provided overall Technical Vision and Leadership for the company’s acquisition of technology infrastructure, Systems Control and Compliance, Vendor Management and Product, RFP, and Audit ISQ's Development programs, for all CPO’s eCommerce outsourcing contracts.• Simultaneously maintained CPO’s outsource consulting teams on client-site to provide pre-sales consultancy to CPO’s Executive-level Clients in Pharmaceutical, Finance, Media, and Manufacturing industries, all including COO, CFO, CIO, and CEO management consulting.• At CPO, Patrick established a world-class outsourcing team specializing in Application Development Platforms with an overall team of Application Developers (local and offshore) to operate in accordance with the high-availability Software Development Lifecycle (SDLC) standards and Salesforce.com & Force.com implementation.• Map-out business requirements and produce specific highly scalable and reusable Software Development Objectives to be achieved by the App. Development teams, both local and offshore.• Leadership addressing ISO17799, SOX and PCI related controls and compliance gap analysis to ensure successful compliance. Research and testing of new Information Security Products and Standards including Identity Management Solutions, Information Security Policy, Enterprise Application Integration, (EAI) and its proposed architecture.• Enterprise Project Planning and Vendor’s Management of outsourced services, including management of co-hosted Data Center facility and personnel. • Trained junior Internal Audit team on IT Audit principles using ISACA’s CobIT framework principles.

Paris, Fr

Executive Management Contractor -- CISO for hire, and Risk Management responsibilities in the the Americas division. Provided subject-matter expertise to Executive Management and managed the Strategic Information Security Program to attain maximum results while addressing regulatory compliance, privacy, and internal audit issues.Monitoring and Oversight of strategic and tactical operations including Identity and Access Management (IAM) and Role-based Access Controls

Tokyo, Jp

Chief Privacy Officer for hire services, leading the Privacy and Information Security function at the firm, and managing the appointed team, handling strategic planning and tactical monitoring of information security controls, including local Information Security Policy and Standards.Responsibities for oversight of the IT management in accordance to CobIT and ITIL best practices.Chair the Information Risk Management and Systems Security Governance Committee, with representation of the main lines of business for the Americas. Facilitate executive management reporting in a regular basis.Champion information security related projects and initiatives.

Arlington, Virginia, Us

CPO's on-site advisory to the CIO and the CFO with interim responsibility for the Information Security Program, CObIT, ISO 27002, PCI DSS compliance, Privacy Laws and Regulatory Compliance advisory. Best Practices in eCommerce Marketing and Information Technology Optimization.

Melville, Ny, Us

Enterprise Resource Planning (ERP) proposed to the CIO as the strategy to automate the most critical businessprocesses. In this effort worth over $20 Million in budget responsibilities include the following:• Oversee Canon’s Application and Infrastructure Vulnerability Testing and documentation and tracked and reported toExecutive Management on progress of corrective actions.• Enterprise-level Projects Planning, Executive Presentation, Project Management/Oversight.• Role-Based Access Control Analysis and role re-engineering.• Oversight of enterprise-level projects scoping and budget allocations.• Document the Security Architecture rules and review process.• Establish the Development QA standards and Security Review Process.* Championed major improvements on the existing state of Information Security and Enterprise Risk Management accross the organization including PCI DSS compliance campaign and remediation.

New York, New York, Us

Line of business information security officer (BISO), responsible for improvement, and expansion of the global Informaiton Security and Privacy Program. Provided Information Security Management and Architecture expertise for enhancement of the application development and business expansion iniciatives of the Global Investment Division.Worked in concert with the Chief Compliance Officer to address multiple federal regulatory compliance and strategic control issues closing multiple audit gaps across the Citigroup conglomerate worldwide.

New York, Ny, Us

Chief Architecture responsibility in charge of setting the standars for advanced application development and Enterprise Resource Planning solutions and implementation of N-tier application development architecture framework. Iniciated Proof of Concept for new development platforms including J2EE Architecture and Oracle systems implementation for Web Services.Chief Information Security Officer responsibility in liaising with Federal Regulators, Auditors, and the Merrill Lynch's Legal department.

Montreal, Qc, Ca

Increased daily transactions handling volume adding up to $11M in revenues by providing the High Yield, Credit and Research divisions by managing the design, implementation and support of a Business Process Optimization, and managing the development of an automated system that facilitated enhanced financial processingdaily financial product portfolio updates directly into the NASDAQ’s mainframe system.Optimization and Risk Management managing a multi-million capital budget for technology related solutions. Implemented a Documents Management solution for records archival and retrieval for legal records retention and EDiscovery. Delivered first-time integration of Web-based Stock Market and M&A’s research distribution to their financial research subscribers. (Great enhancement over plain text distribution that was previously possible exclusively through Bloomberg terminals.)

Des Moines, Iowa, Us

Lead IT Administrator with broad responsibility for Bankers Trust Globally.

Des Moines, Iowa, Us

Championed the strategic planning and implementation of business-critical infrastructure enhancements and services optimization for improved SLA's and technical capabilities.

Bs, Electronics Engineering

Mba, Information Technology Management

Cissp Certification, Certified Information Systems Security Professional