Enterprise & Product security (engineering, cloud, hardware, IoT & supply chain).

CISO, responsible for Citrix's product and corporate security programs, including board reporting. My role is to orchestrate ultra-talented and brilliant Citrix engineers via collaborative programs to ensure our portfolio of products and services are worthy of our customers' trust.

Responsible for implementing quantitative risk programs to ensure customer trust. Product security, privacy operations, data lifecycle governance, threat detection & response. Partner with business unit leaders to design modern and effective ways to automate the execution, remediation, monitoring, and enforcement of controls.

Oversee the development, implementation, maintenance and monitoring of CrowdStrike’s information security, risk and compliance programs across all products and services. Responsibilities include management of assurance programs and audits, DevSecOps, AntiBribery & Corruption, Global Privacy, Internal security, Vulnerability management and business continuity programs. My role is to ensure employees are appropriately trained and CrowdStrike’s internal controls adequately protect the integrity and confidentiality of our customer’s data and adhere to the ever-changing regulatory landscape.CrowdStrike is the leading provider of next-generation endpoint protection, threat intelligence, and pre- and post incident response services. CrowdStrike Falcon is the first true Software as a Service (SaaS) based platform for next-generation endpoint protection that detects, prevents, and responds to attacks, at any stage - even malware-free intrusions. CrowdStrike assists corporations, non-profits and governments worldwide prevent and mitigate the theft of their most sensitive information by nation- state actors and others. Changing the security paradigm...by helping organizations use intelligence, be more proactive, and implement strategy into their network security.

Oversee Compliance & Ethics, ESG, Enterprise Risk Management, and Privacy programsProactively identify and create policies and programs to ensure compliance with global regulations and mitigation of cybersecurity risks including; Data protection, Privacy, HIPAA, Export controls, Government contracting, Employee hotline, Antitrust, Anti-bribery, and corruption (FCPA & UK Bribery Act), Employment law, CTPAT, OSHA, DOT, Homeland Security, and state, federal and international regulatory matters.

Developed corporation’s first global privacy business unit to ensure the secure collection, storage and transmission of sensitive consumer and employee data and ensure compliance with complex state, federal and international privacy regulations. Managed global payment systems and credit card compliance program. • Implemented vendor compliance program which included; review and renegotiation of contracts, vendor training, SAS70 reviews, performed on-premises compliance review of 3rd parties hosting sensitive data. Created governance structure which incorporated Internal Audit to provide continuous monitoring and ensure adherence to regulatory compliance and contractual obligations.• Architected and oversaw implementation of cloud based, SOA web hosting platform which consolidated global marketing websites and customer databases. Project reduced time to production by 30%, and reduced operational & legal costs.• As a member of the compliance committee, developed policies, training and monitoring programs to address global corporate risks for issues such as employee hotline, global employment procedures, records retention, FCPA, vendor ethics and procurement.• Led project to consolidate global HR data in the US. Devised solution to comply with international HR & privacy laws by working with internal and external counsel in USA, Asia Pacific, German works counsel and multiple data regulators across Europe. • Enabled global marketing business unit to re-establish online, social media and mobile promotions representing $20M of marketing budget, by creating compliance program to ensure adherence with multiple state, federal and international privacy regulations.

Advised and implemented solutions for global multi-national & Fortune 500 corporations on mitigating business and technology risks, implementing security and data privacy programs, mergers and acquisitions due diligence, aligning technology initiatives with business objectives, and architect technology solutions.

Responsible for global security operations, payments security, OFAC & KYC controls.

Responsible for global IT operations, including network infrastructure, application development, app support and business SLA management, BC/DR, vendor relationships, strategic planning, and OpEx budget management.

Network engineer and application support for North & Latin America regions.