We empower large enterprises to overcome complex security challenges and achieve a robust cybersecurity posture. We guide tech startups to build market-winning products, secure enterprise deals, and accelerate funding opportunities.

Oversaw security strategy and risk management for all businesses from credit cards to deposits to commercial banking. Transformed a global team of over 150 Divisional Information Security Officers into a set of standardized services driven by a product roadmap. Established security assessment practices to consistently identify, avoid, and treat security concerns in the business and uplifted enterprise controls to address patterns in security concerns. Led the Enterprise Secure SDLC program, resulting in uplift of the enterprise release pipeline, rehydration tooling, application security, and cloud security controls, to achieve consistent board and regulatory risk management expectations for the first time

Oversaw security strategy and risk management for consumer businesses and millions of sensitive records. Businesses covered: personal loans, high interest savings, personal finance, financial insights, wealth management, and credit cards. Scaled security team from 5 to 50 people globally. Securely launched new businesses including Apple Card, which required delivery of an AWS cloud platform compliant with multiple standards and regulations like PCI, SOC 1, SOC 2, NYDFS, and SOX. Established security practices to manage controls to further the security roadmap. Security practices included application security, cloud security, incident management, access management, third party risk, and vulnerability management

Built a security team and program from the ground up, meeting the needs of the board, SOX and SOC compliance, and a major new business partnership with JPMorgan Chase. Led build of policies and security services, enabling company to achieve its first SOC 2 Report. Services included application security, network security, endpoint security, incident management, access management, third party risk, and vulnerability management. Established a board and executive presence through quarterly risk briefings. Influenced peers and senior leaders by growing a security mindset within the company culture through branded marketing campaigns and engagement

Turned around weak internal and external security perceptions at leading educational software firm by building a security program, team, and product roadmaps for all products. Grew Security Team from 1 to 11 people globally. Established executive presence through regular presentations to senior management on the State of Security. Amplified customer presence through first-ever Product Security Roadmap to deliver security features, a process to address customer and third party reported security issues, and publication of customer-facing security marketing and hardening materials. Built customer relationships through BbWorld customer conference that has 2000+ attendees. Established Secure SDLC with CI/CD integrated dynamic analysis security testing, static analysis security testing, and software composition analysis scanning