Cybersecurity executive with 30+ years in technology and 13 as a security leader in PE-backed and portfolio company SaaS environments, specializing in building, unifying, and maturing enterprise security programs across complex multi-product, post-merger organizations. Deep expertise in payment security dating to Visa's PABP program in 2005, with PCI DSS Level 1 audit leadership since 2014 and zero major findings across a decade of continuous compliance. Experience spans enterprise program development, M&A security integration, multi-framework compliance, and board-level executive advisory.
Proven track record unifying disparate security programs following mergers and acquisitions, managing 20+ global audits annually across PCI DSS, SOC 2, FERPA, HIPAA, GDPR, and ISO 27001, leading post-breach stabilization, and delivering pragmatic risk programs that enable product growth without impeding delivery velocity.
Experienced in establishing AI security governance frameworks, including AI Use Policy development, AI tool adoption risk assessments, and AI tool registry implementation, grounded in a human-in-the-middle governance model.
Certifications:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Data Privacy Solutions Engineer (CDPSE)
• Certified Payment Card Industry Professional (PCIP)