Security executives on the move and in the news

Find up-to-date news of CSO, CISO and other senior security executive appointments.

1 2 3 4 5 6 7 Page 3
Page 3 of 7

November 13, 2017: Allan Alford joins Forcepoint as CISO

Alford will lead the global cyber security firm’s corporate security and governance program, including the implementation of the company’s internal user and data protection program for 2,700 employees worldwide. As Forcepoint’s CISO, he will play a key role in leading the compliance and certification efforts for the company’s security offerings and partners with engineering teams to drive best practices and real-world learnings into security product development. Alford reports to Meerah Rajavel, Forcepoint, chief information officer, and is based in the Austin, Texas headquarters. 

allan alford headshot 2 Forcepoint

Allan Alford, Forcepoint CISO

“The security industry is at an inflection point, where customers and vendors must partner to build solutions that can bring visibility to risky behavior or abnormal data usage as the means to stop headline-grabbing data breaches,” said Meerah Rajavel, CIO at Forcepoint in a press release. “Allan understands that a new paradigm must be applied to people, process and technology to adequately address these emerging security threats.” 

With more than 25 years of IT and security experience, Alford joined Forcepoint from Pearson, where he was product and business information security officer. Prior to that, Alford held various IT and security positions at Polycom, where he built and managed the product security program and served most recently as CISO. 

“The human point is an exciting frontier that presents both potential for business value and risk for an enterprise or government agency,” said Alford in a press release. “By combining human-centric security with a modern view on IT, HR and compliance programs, companies like Forcepoint can help employees and partners understand the critical role they play in defending against cyberattacks and protecting sensitive information assets. Instead of operating in silos of business units, IT and corporate functions, we have to look at cybersecurity through the lens of ‘everyone to the defense’.” 

October 19, 2017: Egnyte co-founder Kris Lahiri takes on new data protection officer role

As data protection officer (DPO) at the cloud provider of smart content collaboration and governance, Lahiri will be responsible for continuously monitoring Egnyte's regulatory compliance with the new General Data Protection Regulation (GDPR). He will act as the main point of contact for the EU Commission during any audits or reviews.

kris Lahiri egnyte Egnyte

Kris Lahiri, Egnyte DPO

"With so much more at stake under GDPR, we believe that all organizations should make the necessary moves to ensure complete compliance with the new rules and regulations, including appointing a DPO," said Lahiri in a press release. "My team and I take tremendous pride in implementing proper procedures and protocols to ensure Egnyte's compliance with all regulations, not just the GDPR, and we will continue to make sure all of the data we handle is properly managed and secured."

Prior to Lahiri's appointment, he served as Egnyte's CISO, responsible for creating and implementing global information security strategies that protect all customers' content and users. Prior to Egnyte Lahiri spent many years leading the design and deployment of large-scale infrastructures for Fortune 100 customers Valdero and KPMG Consulting.

October 18, 2017: Gene Fredriksen moves from CISO to chief information security strategist at PSCU

Fredriksen’s new role is part of an effort at the largest credit union service organization (CUSO) in the U.S. to further strengthen its information security and compliance (IS&C) teams. In this newly created role, Fredriksen will report on several strategic functions primarily focused on relating PSCU’s perspective and stance on cybersecurity to existing clients, prospective clients, consultants in the credit union space and the industry as a whole.

Fredriksen has over 25 years of information technology experience, with the past 20 focused in information security. He joined PSCU in 2013. Since then, he has grown the IS&C teams and service offerings, implemented advanced tools and processes, and advanced PSCU’s relationship with numerous partners. His previous roles include global CISO for Tyco International, VP of technology risk management and CSO for Raymond James Financial, and adviser on various cybersecurity steering committees for the administrations of George W. Bush and Bill Clinton. Fredriksen has served on the R&D committee for the Financial Services Sector Steering Committee of the Department of Homeland Security and was recently appointed to represent credit unions in the Global Forum to Advance Cyber Resilience.

“PSCU’s Information Security & Compliance teams have evolved into a world-class operation, and this is in large part thanks to Gene’s leadership,” said David Bryant, PSCU’s newly appointed CISO, in a press release. “I look forward to working closely with Gene and the rest of the IS&C teams to ensure the highest level of service and security for our Member-Owners and their members alike.”

October 17, 2017: Ely Pinto joins Leumi as CISO 

In this role, Pinto is responsible for leading and executing the bank’s information and cybersecurity programs, and will also be tasked with redeploying an end-to-end information security program. Pinto reports directly to Martin Droney, Leumi’s chief operations and technology officer. The two will work together on developing and expanding the bank’s established information and data security culture with a risk-based approach.

ely pinto leumi Leumi

Ely Pinto, Leumi CISO

“Cybersecurity is a critical area of focus at Leumi, and we are pleased to have Ely on board as we continue to build our bank-wide information security infrastructure,” said Droney in a press release. “Ely’s extensive experience in financial services and technology will bolster Leumi’s information security efforts at a time when banks need to be hypervigilant in the face of heightened cyber activity.”

Pinto brings more than 20 years of leadership experience in providing security solutions at large financial and corporate institutions. Most recently, he spent 12 years as an information security specialist at Sumitomo Mitsui Banking Corporation, where he had also previously served as a solutions architect. In these roles, he was responsible for developing the strategic direction of the bank's cybersecurity program and the overall security of bank systems, data and networks. Pinto also led the design and implementation of new security technologies and spearheaded security integration and risk mitigation efforts across all technology platforms and business applications, including cloud-based technologies.

October 9, 2017: John O’Driscoll named first CISO of Australia’s Victoria state

The appointment of a CISO is part of a shift in Victoria’s cyber security strategy from an agency-by agency approach to a whole-of-government approach, to better protect public services and information. As CISO, O’Driscoll will focus on leading collaboration across Victoria’s departments and agencies helping with ongoing work to assess, monitor and respond to cyber security risks, as well as engaging with Commonwealth and private sector experts to deliver a resilient and cohesive cyber security environment.

Other key actions from the Cyber Security Strategy that will be led by the CISO include:

  • Develop cyber emergency governance arrangements with Emergency Management Victoria, so that risks are better understood and planned for as part of ongoing work to protect government assets and services
  • Strengthening partnerships across all levels of government and the private sector to share best practice, intelligence and insights
  • Rationalizing and better coordinating the procurement of proven cyber security services
  • Developing a workforce plan to attract, develop and retain skilled cyber security public sector workers
  • Presenting a quarterly cyber security briefing to the Victorian Secretaries Board and the State Crisis and Resilience Committee, so government is better informed of cyber security issues and assessments. 

“John O’Driscoll’s extensive experience working across information technology and cyber security make him ideally suited to be Victoria’s first Chief Information Security Officer, as we seek to secure government services,” said Special Minister of State Gavin Jennings in a press release. 

October 3, 2017: Former Salesforce CSO Brendan O’Connor named ServiceNow security CTO.

O’Connor will lead ServiceNow’s efforts to help enterprises rethink security operations and reduce business risk. ServiceNow Security Operations enables customers to connect security and IT teams, respond faster and more efficiently to threats, and get a definitive view of their security posture. O’Connor will help ServiceNow introduce automation to the security response workflow, elevate the role of security teams, and better orchestrate threat response.

brendan oconnor ServiceNow ServiceNow

Brendan O'Connor, ServiceNow security CTO

Before joining ServiceNow, O’Connor spent 10 years at Salesforce where he led Salesforce's global information security organization as CSO. Prior to his role as CSO, O’Connor was vice president of product security at Salesforce. He has also worked in the financial services and communications sectors as a vulnerability researcher, security engineer, and privacy advocate. 

“I joined ServiceNow because I want to help enterprises rethink security operations and how they manage risk in the age of cloud computing,” said O’Connor in a blog post. “We can provision infrastructure with the press of a button and deploy workloads to the cloud in minutes.  Our security operations need to keep up.  As a former CSO, I am acutely aware of how important it is to respond quickly to new threats and scale security to meet the needs of the business.”

September 28, 2017: Societe General appoints French air force general Antoine Creux as CSO

Creux joins Societe Generale in the newly created role to help improve bank’s defenses against cyber attacks and to mitigate other risks. Prior to Societe Generale,  Creux spent 38 years with the French Defence Ministry, and he was named Chief Inspector of the Armed Services in 2015. Creux will also serve as a member of the bank’s management committee. "In a time of increasing challenges in terms of safety for assets, individuals and information systems, his mission will be to ensure that Societe Generale continues to adopt the most appropriate strategic and operational answers to protect the Group's assets," the bank said in a press release. 

September 27, 2017: Phillip Mazzocco joins Peraton executive team as CSO

Mazzocco is expected to lead Peraton’s compliance programs and ensure the safety of its employees, data, and assets. “Phil brings to Peraton more than 20 years of experience providing industrial security for Fortune 500 companies,” said Stu Shea, Peraton CEO, in a press release. “He understands full-spectrum security – the complex interplay among such aspects as risk management, crisis management, program security, international operations, training and insider threat.”

mazzocco phil peraton Peraton

Phil Mazzocco, Peraton CSO

Mazzocco comes to Peraton from Leidos, where he served as vice president, Sector Security, leading security operations across a multi-customer $4 billion portfolio of national security programs. Most recently, he managed the security team fundamental to the multi-billion-dollar modernization of the Defense Healthcare Management Systems for the Department of Defense. He also served on the Board of Directors for the Industrial Security Working Group.

Mazzocco earned his Bachelor of Arts degree in history from the John Carroll University and completed Master of Arts coursework in Central Eurasian studies at Indiana University.

September 21, 2017: McDonald’s names Timothy Youngblood CISO 

Youngblood will lead global food service retailer McDonald Corp.’s global information security organization. Reporting to the executive VP of operations, digital and technology, he will work closely with the McDonald's senior leadership team and board of directors to drive information security strategy and operations. Youngblood oversees risk management and brand protection on a global scale for the company.  

timothy youngblood mcdonalds McDonalds Corp.

Timothy Youngblood, McDonalds CISO

He has 30 years of industry experience ranging from cyber security strategy and operations, product security, IT audit, disaster recovery, risk assessment, and management consulting. Youngblood has served in multiple industries across his career including financial services, healthcare, oil/gas, retail, and manufacturing. 

Prior to McDonald's, Youngblood was the CISO for Kimberly Clark Corp., and was also the CISO for Dell, Inc. Timothy has held leadership roles at KPMG LLP, EDS, and Siemens Medical Services. He serves on the top security boards in the industry and has been recognized as a top ten CISO leader and 100 top global CISO’s in the industry. 

“McDonald’s is rapidly transforming into the next wave of customer experience and digital platforms,” says Youngblood. “The leadership recognizes the importance of maintaining customer loyalty and trust with cyber security and information risk management being critical foundational elements.  I’m proud to lead the organization that supports this for one of the leading brands globally.” 

Related:
1 2 3 4 5 6 7 Page 3
Page 3 of 7
New! Download the State of Cybercrime 2017 report