Security Executive · CISO · Advisor
Head of Security, IT & DevOps
Enterprise Security & Technology Executive with 15+ years leading Information Security, IT, and DevOps across Finance, Payments, Healthcare, Retail, and Analytics. Zero major audit findings across SOC 2 and PCI. Trusted advisor to executive leadership and boards — translating cyber risk into business impact.
Measurable Outcomes
Sectors
Security leadership across regulated and high-growth environments — building programs that meet the specific risk profile of each sector.
Core Competencies
From boardroom risk conversations to hands-on cloud controls — leading security, IT, and DevOps as a unified function that protects revenue and enables growth.
Building enterprise security programs aligned to NIST CSF, ISO 27001, and CIS Controls. Risk governance, GRC frameworks, board-level KPI reporting, and security roadmap ownership — delivered with measurable maturity gains.
Zero major findings across SOC 2 Type II and PCI DSS programs. Deep practitioner across ISO 27001, NIST CSF, CCPA/CPRA, GDPR, and HIPAA — owning the full lifecycle from control design through external auditor management.
Securing AWS and Azure environments with Zero Trust architecture, CIS-hardened systems, and SAST/DAST/SCA embedded into CI/CD. 45% reduction in cloud misconfigurations. IAM transformation via Okta and Azure AD.
Career
15+ years of progressive security leadership across Finance, Payments, Healthcare, Retail, Semiconductor, Manufacturing, and Analytics — always owning more than just security.
Full executive ownership of Security, IT Operations, and DevOps for a high-growth payment analytics platform. Achieved SOC 2 Type II with zero major findings. Improved security program maturity by 30% in 12 months. Reduced critical vulnerabilities by 50%+, cloud misconfigurations by 45%, and MTTD/MTTR by 40% via SIEM/EDR deployment. Led Zero Trust architecture using Zscaler and Okta/Azure AD, reducing orphaned accounts by 60%. Integrated SAST/DAST/SCA into CI/CD, cutting pre-production vulnerabilities by 35%. Currently supporting confidential M&A due diligence — security risk assessment, control evaluation, and integration planning.
Led enterprise security strategy, roadmap, and compliance programs at one of the world's largest fintech firms. Built and scaled security teams, acted as principal security architect for enterprise initiatives, and led threat hunting and SIEM operations. Supported PCI DSS, SOC 2, and maturity assessments at scale.
Led security engineering and operations initiatives across enterprise systems. Strengthened threat detection and response capabilities. Supported enterprise compliance, risk management, and M&A integration — including post-merger security integration of Ondot Systems, aligning IAM, compliance controls, and consolidating security tooling across merged environments.
Led enterprise security programs for fintech and payment platforms. Designed and implemented security architecture and controls from the ground up. Built SIEM and monitoring capabilities, improving detection coverage by 50%. Implemented IAM, DLP, and endpoint security. Led PCI DSS, SOC, and ISO compliance initiatives through multiple audit cycles.
Implemented enterprise security controls, monitoring, and risk assessments. Conducted security audits and compliance support. Assisted in the implementation of enterprise security frameworks — building the foundational practitioner depth that underpins all subsequent leadership.
The CISO Case
Most security leaders own one dimension. I've been running three simultaneously — and delivering measurable outcomes in each.
50%+ reduction in critical vulnerabilities. 40% improvement in MTTD/MTTR. 45% fewer cloud misconfigurations. Zero major audit findings across SOC 2 and PCI. These are the metrics boards care about — and I deliver them.
Most CISO candidates own security in isolation. I own the full technology operating layer — infrastructure, pipelines, and security controls — which means I speak the language of every stakeholder and eliminate the silos that create risk.
Regulated industries demand more than checkboxes. With hands-on depth across SOC 2, PCI DSS, ISO 27001, NIST CSF, GDPR, CCPA, and HIPAA — and 8 active certifications — I bring the rigor complex environments require without slowing the business down.
M&A is where security programs get exposed. I've led security diligence, post-merger integration, and IAM consolidation at both Fiserv (Ondot acquisition) and in a current confidential transaction — providing boards with real risk visibility at the most critical moment.
Tools & Platforms
Hands-on depth across the full security and infrastructure toolchain — from SIEM to DevSecOps pipelines.
Credentials
Eight active credentials spanning security leadership, audit, ethical hacking, cloud, and governance.
Education
What I'm Pursuing
Actively exploring Chief Information Security Officer roles, fractional CISO engagements, board-level security advisory positions, and strategic consulting. Fintech, payments, SaaS, and high-growth companies are a natural fit.
Send a Message