Chief Strategy Officer | Cybersecurity Evangelist | Bestselling Author | Teacher
Building Security Programs with Purpose
At eBay, I managed a global security budget and shaped policies for PCI and SOX compliance. But I quickly learned that effective security isn’t just about frameworks—it’s about building a culture of resilience and trust. By partnering with executives and translating technical challenges into strategic insights, I helped turn our program into a true business enabler.
At Zynga, I led efforts to prepare the security program for IPO, embedding practical security practices that supported our fast-paced development environment. At Symantec, I guided the Control Compliance Suite, helping clients like HSBC and government agencies operationalize security standards to minimize risk. Later, at Cigital, I helped global companies establish resilient software security practices that grew with their needs.
Pioneering "Pentesting as a Service" at Cobalt
When I joined Cobalt in 2016, “Pentesting as a Service” was uncharted territory. I championed this model, connecting with the cybersecurity community and building a scalable delivery framework.
Over time, I led our teams as we grew from 10 to 250 employees, conducted over 15,000 pentests, and made high-quality security testing accessible for companies of all sizes.
Making Cybersecurity Accessible to All
Beyond my corporate roles, I’m passionate about educating the broader community. My book, Security Metrics: A Beginner’s Guide, was inducted into the Cybersecurity Canon Hall of Fame, and my LinkedIn Learning courses have reached over 100,000 professionals.More...