1
Fortune 1000 Companies
The October CISO Hot Sheet contains 23 new CISOs, including nine at Fortune 1000 accounts. In addition, there are four new CISOs at healthcare companies, five at tech-‐related companies, and two at government agencies.
In this issue….
October 2015 OCTOBER 2015
CISO HOT SHEET
Mike Elmore was promoted to CISO at Cigna, where he has worked since 2011, most recently serving as a senior director of enterprise network engineering. From 2007 to 2011 he worked at Cisco as a system architect. Prior employers include United Healthcare, ING, and Andersen Corporation. He earned a BS from the University of Minnesota in 1998. Deb Cody, Cigna’s previous CISO, now works for Gartner. Connecticut-‐based Cigna was ranked #90 on the 2015 Fortune 1000, with $35 billion in revenue and 37,200 employees.
Cigna Mike Elmore
Bobby Ford was named CISO at Abbott Laboratories. He previously served as CISO for Exelis from 2012 to 2015. Previous employers include ITT Information Systems, the Department of Energy, and General Dynamics. He began his career in cyber assurance as an analyst for the U.S. Army, and was a member of the Pentagon Computer Incident Response Team. He earned his undergraduate degree from George Mason University and holds CISSP certification. Illinois-‐based Abbott was ranked #134 on the 2015 Fortune 500 with 77,000 employees and $22 billion in revenue.
Abbott Laboratories Bobby Ford
www.cisodatabase.com
2
Jack Clark was named Chief Information Security Officer at Hewlett-‐Packard. He previously served as CISO for Siemens since 2009. He worked at Siemens since graduating from Virginia Commonwealth University, where he was a member of Pi Lambda Phi fraternity. He has spent 28 years with Siemens in various roles relating to systems programming and customer service and had been responsible for Information Security at Siemens in various roles for the past 11 years. Palo Alto-‐based Hewlett-‐Packard was ranked #19 on the 2015 Fortune 500 with $112 billion in revenue and 302,000 employees
Hewlett-‐‑Packard Jack Clark
Adam Lance was promoted to CISO at Joy Global, where he has worked in a variety of information security roles since 2006. He is a 2009 graduate of DePaul University. He holds CISSP and CISA certifications. Adam is an avid fisherman, and enjoys backpacking, hunting, skiing and snowmobiling. He is a Chicago Bears fan. Milwaukee-‐based Joy Global, a manufacturer of mining equipment, was ranked #642 on the 2015 Fortune 1,000, with 15,400 employees and $4.4 billion in revenue.
Joy Global Adam Lance
James Powell was named CISO at LPL Financial. From 2005 to 2015 he worked at TIAA-‐CREFF, most recently serving as Managing Director of Security Operations. Prior to that, he worked in information security for Bristol-‐Myers Squibb for six years. He holds CISSP certification. He earned a BA in Music from Illinois Wesleyan University in 1995, and a Master of Music, Vocal Performance degree from the Manhattan Music School in 1998. He enjoys golf, travel, tennis and the opera. Boston-‐based LPL Financial was ranked on #591 on the 2015 Fortune 1000, with 3,369 employees and revenue of $4.3 billion.
LPL Financial Jim Powell
OCTOBER 2015 CISO HOT SHEET
www.cisodatabase.com
3
XPO Logistics Christopher Hudel
Gary Owen was named CISO at Time Warner. He previously served as a director at Promontory Financial Group from 2013 to 2015. Prior to that, he was Vice President of Technology Risk at Goldman Sachs from 2009 to 2013. He worked at Citigroup from 2000 to 2009. Prior employers include Scientific Atlanta and Turner Broadcasting. He is a 1989 graduate of the University of Vermont. New York-‐based Time Warner was ranked #104 on the 2015 Fortune 500, with 26,000 employees and revenue of $29 billion.
Time Warner, Inc. Gary Owen
Kostas Georgakopoulos was named CISO at Procter and Gamble. He previously served as Head of IT Security at UBS from 2012 to 2015. Prior to that, he was CISO at Nasdaq from 2010 to 2011. Previous employers include Bank of China, Deutche Bank and Citigroup. He has a Masters Degree from Tufts University and holds CISSP and MCE certifications. He has taught at Fairfield University. In an October 19, 2015 article in Forbes, CIO Linda Clement Holmes stated, “I just hired our Chief Information Security Officer from the outside because the world changed so much in the last two years when it comes to cyber security. Those skills are not ones that we naturally have internally and have grown up with. “ Cincinnati-‐based Procter & Gamble was ranked #32 on the 2015 Fortune 500, with $84 billion in revenue and 118,000 employees.
Procter & Gamble Kostas Georgakopoulos
www.cisodatabase.com
Chrisopher Hudel was named CISO at XPO Logistics. He previously served as CISO at SPX Corporation from 2011 to 2015. Prior employers include Bank of America, LendingTree, Wachovia and HP. He holds CISSP certification. He is a 1994 graduate of the University of Waterloo with a degree in rhetoric. He is on the faculty at UNC Charlotte. He is an avid cyclist and scuba diver. He enjoys science fiction. You can follow him on Twitter at https://twitter.com/hudelc. Connecticut-‐based XPO Logistics is ranked #909 on the 2015 Fortune 1000, with 10,100 employees and $2.3 billion in revenue. XPO agreed to acquire Con-‐Way in September and will increase their revenue to $15 billion.
OCTOBER 2015 CISO HOT SHEET
4
Ken Greene was named Interim Chief Information Security Officer at Care New England, following the departure of former CISO Christopher Logan, who took a position with VMware. Ken has been with Care New England since 2012, serving as a security analyst. He also held analyst positions at Staples, Royal Bank of Scotland, Concordant and Inacom. He served in the Marine Corps for 9 years. He’s working on a BA at Northeastern University. Care New England is based in Rhode Island and has 6,200 employees.
Care New England Ken Greene
Yahoo! named Bob Lord CISO. He will lead Yahoo’s cybersecurity group, known internally as the Paranoids. He previously served as CISO for Rapid7. He is an advisor to the Council on Cybersecurity. He was Twitter’s first information security hire, where he worked from 2010 to 2014. Prior employers include AOL, Redhat, and Netscape. He earned a BA from the University of Chicago in 1998. He is the third executive to hold the CISO position at Yahoo! in six months. Alex Stamos left in June, and Ramses Martinez lasted only a few months before departing for Apple. Sunnyvale-‐based Yahoo! was ranked #561 on the 2015 Fortune 1000, with 11,000 employees and $7.5 billion in revenue.
Yahoo! Bob Lord
www.cisodatabase.com
Lance Harris was named CISO at Esurance. Previous employers include eBay, Qualys, Copart and Mastercard. He earned a BA from the University of North Texas in 1999 and an MS from the same school in 2003. He holds CISSP certification. He is an adjunct professor at the University of Maryland. San Francisco-based Esurance is a subsidiary of Allstate, with 3,500 employees and $1 billion in revenue.
Esurance Lance Harris
Healthcare and Insurance
OCTOBER 2015 CISO HOT SHEET
5
Bridget Kravchenko was named CISO at Meridian Healthcare. She previously worked for Meritor from 2007-‐2015, most recently serving as Director of Information Security. Prior to that, she worked from GM from 2000 to 2007, most recently serving as a contract manager. She earned a BA from the University of Michigan in 19992, and an MSBIT in information assurance from Walsh College in 2006. She holds CISSP certification. She is a member of Infragard. Meridian Healthcare is based in New Jersey and has 7,500 employees.
Meridian Healthcare Bridget Kravchenko
Former Intel Corporation CISO Malcolm Harkins was named CISO at Cylance. He had worked at Intel since 1992. He is involved in numerous information security organizations. He graduated from UC Irvine in 1989 and earned an MBA from UC Davis in 1992. Brent Conran replaced Malcolm at Intel in September. Cylance is an information security software vendor with 130 employees.
Cylance Malcolm Harkins
www.cisodatabase.com
Jorge DeCesare was named Chief Technology Risk Officer at Kaiser. He previously served as CISO for Dignity Health, where he worked from 1994 to 2015. He worked for Catholic Healthcare West from 1994 to 2008, serving in both as in-‐house counsel and as Director of Information Technology. He earned his undergraduate and JD degrees from Northwestern CU and an MBA from Columbia Pacific University. Kaiser Permanente has 150,000 employees and $34 billion in revenue.
Kaiser Permanente Jorge DeCesare
Technology
OCTOBER 2015 CISO HOT SHEET
6
Steven Murray was named CISO at SparkPost. Prior to SparkPost, he spent four months at Concur as Director of Worldwide Security Operations. From 2012 to 2015 he worked in security positions at ServiceNow. He served 11 years in the U.S. Army, most recently as the Commander of the Western Information Operations Center. He earned a BA at Central Washington University and an MBA from Embry-‐Riddle.
SparkPost Steven Murray
www.cisodatabase.com
Michael Iwanoff was named CISO at iconective, a wholly-‐owned subsidiary of Ericcson. He previously served as Chief Security Officer for the Property Casualty division at AIG. Prior employers include Barclays, Comcast and AT&T. He holds a BS from the New Jersey Institute of Technology (2000) and is currently pursuing a Masters of Science degree in information assurance. He holds CISSP, CISM and CISA certifications.
iconective Michael Iwanoff
Abe Chen was named CISO at Pivotal Software. He previously served as Director of Information and Product Security at Tesla Motors from 2012 to 2015. He holds CISSP and CISA certifications. Since graduating from UC Irvine in 1999, employers have included UCLA, National City Corp, K/P Corporation and Apple. He also earned a MS in Information Assurance from Norwich University in 2007. He teaches information security courses at UC Santa Cruz extension. Pivotal Software is a 1,700 employee company that is a spin-‐off from EMC and VMware.
Pivotal Software Abe Chen
Lucas Moody was named CISO at Palo Alto Networks. He most recently served as Director of Information Security Operations at Intuit from 2014 to 2015. Prior employers include eBay, Oracle and KPMG. He is a graduate of USF and is a member of ISACA.
Palo Alto Networks Lucas Moody
OCTOBER 2015 CISO HOT SHEET
7
www.cisodatabase.com
Council on Foreign Relations Nick Levay
Bob Cheong was named CISO for the County of Riverside. He previously served as the CISO for Los Angeles World Airports from 2008 to 2015. He holds a BS degree in Computer Science from California State University and CISSP and CISM certifications. He is a board member of Southern California CISO Executive Summit and the Los Angeles INFRAGARD Chapter.
County of Riverside Bob Cheong
Government
Scott Baron was named CISO at Finance of America Holdings. From 2013 to 2015 he served as Chief Security Officer for Bit9. He previously served as an IT/Information Security Director for the Center for American Progress, a DC based think tank. He’s worked in IT since 1997. He earned a BS from Middle Tennessee State University in 2007. He holds CISSP certification.
Higher Education
University of Georgia Alfred Barker
Scott Barker was named CISO for the University of Georgia System. He previously served as the CISO for the University of North Georgia from 2013 to 2015. From 1999 to 2013 he worked at Gainesville College. He served in the U.S. Marine Corps. He holds numerous certifications. He earned an undergraduate degree from Gainesville State College and an MS from Lewis University.
OCTOBER 2015 CISO HOT SHEET
8
www.cisodatabase.com
Landry’s Damian Taylor
Scott Baron was named CISO at Finance of America Holdings. From 2011 to 2015, he served as a director of information security and risk at Nationalgrid. Prior employers include Delta Airlines, Northwest Airlines and Berbee. He holds CISA and CRISC certifications, and is a member of ISACA. He founded a professional services company called iNETech. He attended the University of Massachusetts. Finance of America is based in Pennsylvania and employs 3,000 people.
Finance of America Holdings Scott Baron
Hospitality
Damian Taylor was named CISO at Landry’s, following a 22 year caereer working for the United States Government. He grew up in Fayetteville, North Carolina. Shortly after graduation from high school, he enlisted into the U.S. Navy from 1993 to 1998. After receiving a Bachelor's Degree from North Carolina State University in 2003, he was commissioned as a U.S. Navy Surface Warfare Officer. In 2005, he attended Trident University and earned his master's degree in information technology management in 2007. His decorations include the Bronze Star Medal. He served as the CISO for the Joint Special Operations Command from 2012 to 2015. Houston-based restaurant operator Landry’s has over 60,000 employees and $3.1 billion in revenue.
Finance
OCTOBER 2015 CISO HOT SHEET