Ruben D. Chacon Email & Phone Number

Northbrook, Il, Us

Dublin, Ireland, Ie

Vernon Hills, Il, Us

Rochester, New York, Us

Greater Chicago Area, Il, Us

As Mondelēz International improves its cybersecurity posture, I am accountable to define and implement the global cybersecurity strategy. Such strategy has a transformational impact on all the global organization as it touches governance, risk, and compliance processes, applications, Information Technology (Corporate IT) / Operations Technology (Manufacturing OT), people behavior and accountability.• Enabling centralized visibility and effective detection, alerting, and response of malicious events both internal and external by implementing a Security Operations Center (SOC) incorporating advanced security capabilities and practices, including Cyber-Threat Intelligence (CTI), Vulnerability Management, and other capabilities.• Designed a robust global cybersecurity strategy, roadmap, and scorecard based on the NIST Cybersecurity Framework and the 20 Critical Cybersecurity Controls. This incorporates Information Technology (Corporate IT) and Operations Technology (Manufacturing OT).• Evaluated ad provided input to cyber insurance coverage as part of the information risk management process.• Led incident containment, response and recovery efforts to a significant malware incident (NotPetya). Partnering with law enforcement (FBI). Led forensic analysis to find root cause. Defined specific actions to avoid re-incidence and ensured reliable recovery of IT services.

Greater Chicago Area, Il, Us

Assessed the current Privacy and Information Risk Management programs. Using formal frameworks as a reference (such as GAPP for Privacy; ISO 27001/2/5, CobIT, and the NIST Cybersecurity Framework), enhanced MDLZ privacy and cybersecurity programs.• Led the approach and started implementation of the new EU General Data Protection Regulation (GDPR)• Educated MDLZ Leadership Team on how to respond to a cyber incident by using tabletop exercises• Optimized the management, quality, use, and security of data by implementing a Data Governance program.• Updated and implemented MDLZ Data Protection and Privacy policies and guidelines.

Atlanta, Ga, Us

Established a global information risk management program in order to address cyber security and information-related compliance risks across The Coca-Cola Company and its bottling divisions (The System).• Selected and implemented a formal methodology to assess and manage risk• Improved the global cybersecurity program by incorporating the use of the NIST Cybersecurity Framework• Increased productivity by enhancing due diligence processes and artifacts, including the simplification of contract language and integration of risk management assessments into Enterprise Architecture and other IT processes• Saved 1MM+ by optimizing the security tools and capabilities landscape used within the company

Greater Chicago Area, Il, Us

After separating Kraft Foods into two independent public companies, I continue working for Mondelez International. I have received the ‘Values in Action’ award for the effective leadership shown during the separation process.• Led the Data Separation track during the split providing clear and actionable guidance to all users on how to separate and deal with structure and unstructured data• Ensured privacy compliance and risk mitigation during and after the split partnering with Internal Audit, Legal and Business Integrity

Managed strategy, development, design, staffing, budgeting, and integration of information security solutions for the business. Define and coordinate Kraft’s global Privacy strategies (Global Privacy Lead).Work with cross functional teams to ensure the consistent alignment and implementation of information protection solutions in terms of efficiency, delivery of business value, and compliance with applicable regulations worldwide.• Fostered a culture of increased user accountability towards best information protection practices through the use of targeted educational programs. Led the implementation of specialized security tools such as data leakage prevention, encryption, and second factor authentication.• Defined and implemented a holistic data privacy strategy to help Kraft Foods achieve its business goals in sync with company values and satisfying international regulatory requirements.• Brought relevant IT and business processes (in-house and outsourced) into security and privacy compliance.• Developed and published corporate Information Security and Privacy Policies, standards and guidelines.• Oversaw the implementation of the overall risk management program and its integration within relevant business processes, third parties, and technologies.

Recruited, hired, and developed a staff of 18+ information security professionals geographically dispersed across the U.S., Canada and Latin American countries (the Americas), responsible for the implementation and monitoring of the information security program.• Ensured solid alignment of security strategies with business goals across the region serving as a liaison with different business units and relevant corporate functions.• Achieved $2 MM on cost reductions by distributing and standardizing regional information security processes and tools across the Americas.• Simplified regional SOX GCC process for the Americas by identifying and reducing the number of applications and controls to be tested.

Created and consolidated the Latin American Voice and Data Communications Shared Service Center managing a regional staff of 22 IT professionals, 14 of them distributed across the LA region. Provided centralized communication services for the region leading to 18% of cost savings.

Improved Kraft Mexico’s IT infrastructure supported by 8 IT personnel and 8 subcontractors. Managed the transition to Y2K for Kraft and Phillip Morris Mexico. Led the integration between Kraft Mexico and Nabisco Mexico, then the integration of the combined company to Kraft NA.

Munich, De

Munich, De