Portfolio cyber programs
Minimum security standards, continuous monitoring, a shared vendor panel and a cyber insurance framework applied across a private equity portfolio.
Chief Information Security Officer · Boardroom Certified QTE
Security that protects value, and helps create it.
Cybersecurity executive with 26+ years in technology, building and running Information Security and Technology Risk programs across private equity, banking and professional services, from the boardroom to the portfolio.
- 26+
- Years in technology, 23+ leading security & technology risk
- ~130
- Global portfolio companies under a sponsor-led cyber program
- 1 → 12
- Security function grown from a department of one
01 — About
Aligning security posture to business strategy.
I lead a dual-mandate Information Security and Technology Risk program at H.I.G. Capital, a global private equity firm with $69B in assets under management, covering both the firm’s own operations and its portfolio of roughly 130 companies.
My work sits where security meets the business: scaling portfolio-wide cyber programs, leading SEC regulatory readiness, advising deal teams from diligence to exit, and representing the firm in LP fundraising. I’ve built security functions from the ground up again and again, at banks, law firms and in private equity.
I started my career on a helpdesk in 2000. Today my remit includes AI Operations and DevOps, helping the firm adopt Generative AI and citizen-led development securely.
02 — Focus areas
Where I create value
Deal lifecycle & LP diligence
Technology and cyber diligence, 100-day plans after close, exit readiness, and the cyber risk story in LP fundraising.
Board & regulatory governance
Quarterly board reporting, an Information Security Steering Committee, and readiness for SEC cybersecurity requirements.
Security architecture
Modernized identity, endpoint, network and data protection through SASE, XDR, IAM, PAM, MFA and DLP.
Resilience & incident response
Business continuity, disaster recovery and physical security in one program, with incident response coordinated alongside external forensic firms.
AI governance & DevOps
AI steering and working groups, acceptable-use standards, and platform ownership that let teams adopt GenAI and citizen development safely.
03 — Experience
Career highlights
-
Chief Information Security Officer
H.I.G. Capital · Miami, FL
- Secured a mandate from the firm’s Founders to every Fund Head making cybersecurity a portfolio-wide priority.
- Brought 95% of portfolio companies into minimum standards and continuous monitoring in year one, with ~70% of critical findings closed or covered by compensating controls.
- Recruited the firm’s first Cybersecurity Operating Partner, creating a scalable model for sponsor-led security oversight.
- Grew the security function from one person to a 12-person Security Operations and Cyber GRC organization.
- Established quarterly board reporting and led readiness for SEC cybersecurity requirements for registered investment advisers.
- Co-led the firm’s GenAI strategy from 2022 and founded its AI Working Group, AI Steering Committee and AI Champions Group.
- Stood up AI Operations & DevOps in 2026, owning five GenAI platforms and governing citizen-developed applications. Also serve as Deputy CTO.
-
VP & Information Security Officer
Itaú International · Miami, FL
- Led the program across U.S., Caribbean and Chilean Private Banking and managed a $6M security budget.
- Moved security’s reporting line from the COO to the CRO and delivered quarterly cyber risk reporting to the Board and Head Office.
-
Building first-time security programs & consulting
Turnberry Associates · Mercantil Bank · Greenspoon Marder · Greenberg Traurig
- Established the first IT Risk and Information Security programs at two law firms, one of them global.
- Rolled out a firm-wide SIEM, brought Identity & Access Management under security, and launched security awareness training.
- Fixed a deficient PCI compliance program and built an ISO 27001 / COBIT-aligned GRC framework.
- Served as Information Security Consultant to Mercantil Bank and Turnberry Associates.
-
VP, IT Risk & Information Security Group
Lloyds Banking Group · New York, NY
- Rose from Helpdesk Technician to Analyst, AVP and then Vice President.
- Built and led the North America IT Risk and Information Security program, earning strong audit and regulatory ratings.
- Ran SOX risk assessments, managed a $3M budget and established enterprise security governance forums.
Credentials
- CISSP
- ISSMP — (ISC)²
- Boardroom Certified QTE
04 — Recognition
Awards & honors
-
2026 · 2025 · 2022
Top Global CISO, Cyber Defense Magazine
Honored three times, most recently at the Cyber Defense Conference 2026.
-
2023
Top 100 CISO (C100), CISOs Connect
Later served on the C100 board of judges in 2023 and 2024.
-
2021
Security Leader of the Year: Ethics, GDS
-
2020
Global CISO 100, HotTopics
-
2014
Top 100 CISO of the Year nominee, CISO Platform
05 — Speaking & media
On stage, on air and in print
Podcasts
Podcast · Jul 2026
The Black Hat Files: Different industries, same cyber battle
With Margarita Rivera, Global CISO of Carnival Corporation, on identity, visibility, resilience, AI and quantum, from a cruise line to a PE portfolio.
Listen → Podcast · Aug 2025Tech Jobber Podcast: Secrets of a 3x Top 100 CISO
With host Chris Schwenk, on going from a college help desk to global security leadership, and on passwordless systems and AI-driven threats.
Watch → Podcast · May 2024Risk and Reels: Want to be a successful CISO? Know your audience
With host Jeffrey Wheatman, former Gartner analyst, on moving at the speed of the business and being a master communicator.
Listen →In the press
-
Nov 2025
Inc. Arabia: “Speakers to Watch at Black Hat MEA 2025”
Why cybersecurity is a strategic and cultural discipline, and why compliance alone never equals security.
-
Apr 2025
Harmonic Security: “A passion for cybersecurity is the key to success”
An interview on how the field has changed and the path to becoming a CISO.
-
Aug 2024
Security Current: “CISO Spotlight: Marcos Marrero, H.I.G. Capital CISO”
On demonstrating the CISO’s value through risk reduction, and on mentoring the next generation.
-
Mar 2021
Hispanic Executive: “For Marcos Marrero, Technology Is More Than a Job”
A profile tracing the path from the Dominican Republic to global security leadership.
- Mar 2019
Speaking engagements
-
2026
SecureWorld: “Ask Us Anything! A Live Conversation with Security Leaders”
Returning panelist, alongside Michael Calderin and Vladislav Ryaboy.
-
Jan 2026
Abnormal AI webinar: “Bridging the SOC Talent Gap With Automation”
Chapter 14 of The Convergence of AI + Cybersecurity, with Patricia Titus (Abnormal AI) and Dwayne Smith (Vensure), on hiring for passion, automating low-value work and upskilling lean teams with AI.
-
Dec 2025
Black Hat MEA 2025 · Riyadh
Speaker representing H.I.G. Capital at the region’s largest cybersecurity event.
-
Oct 2025
Global Cyber Conference 2025 · Zurich: “Resilience by Design: CISO Perspectives”
Panel with the CISOs of Sunrise and Swisscard, moderated by Samir Aliyev of the Swiss Cyber Institute.
-
Oct 2025
Global Cyber Conference 2025 · Zurich: “Emerging Cybersecurity Business Models”
Panel with Dr. Daniel Risch, former Prime Minister of Liechtenstein, and Marc Furrer, Chairman of Salt Mobile, on cyber insurance, resilience-as-a-service and public–private alliances.
-
2025
Veza webinar: Identity governance
On identity hygiene and who really has access to sensitive data in Microsoft 365 and SharePoint.
Writing
-
May 2026
Speaking Tech Is Your Job. Speaking Executive Is Your Superpower.
How to connect technical and security work to the outcomes each executive cares about.
-
Jun 2025
From Adoption to Accountability: Why AI Governance Starts with Learning
Why learning and development is the missing link in most AI governance strategies.
-
Jun 2025
From Compliance to Culture: The Leadership Shift Cybersecurity Needs
Why security leaders have to become culture architects, not just policy authors.
06 — Community
Giving back to the field
Co-Chair, CIO/CISO events
Shaping the agenda for Evanta Florida CIO/CISO events and Evanta Global CISO events.
Member, FBI InfraGard
Partnering with the public and private sectors to protect critical infrastructure.
Teaching Assistant, Microsoft TEALS
Helping bring computer science education to high school classrooms.
Volunteer, Habitat for Humanity
Building homes with Habitat for Humanity of Greater Miami since 2008.
Advisory roles
- Harmonic Security
- NetRise
- ShadowHQ
- CriticalStart
- Black Kite
- YL Ventures
- Digitalware