Portfolio cyber programs
Minimum security standards, continuous monitoring, a shared vendor panel and a cyber insurance framework applied across a private equity portfolio.
Chief Information Security Officer · Boardroom Certified QTE
Security that protects value, and helps create it.
Cybersecurity executive with 26+ years in technology, building and running Information Security and Technology Risk programs across private equity, banking and professional services, from the boardroom to the portfolio.
- 26+
- Years in technology, 23+ leading security & technology risk
- ~130
- Global portfolio companies under a sponsor-led cyber program
- 1 → 12
- Security function grown from a department of one
01 — About
Aligning security posture to business strategy.
I lead a dual-mandate Information Security and Technology Risk program at H.I.G. Capital, a global private equity firm with $69B in assets under management, covering both the firm’s own operations and its portfolio of roughly 130 companies.
My work sits where security meets the business: scaling portfolio-wide cyber programs, leading SEC regulatory readiness, advising deal teams from diligence to exit, and representing the firm in LP fundraising. I’ve built security functions from the ground up again and again, at banks, global law firms and in private equity.
I started my career on a helpdesk in 2000. Today my remit includes AI Operations and DevOps, helping the firm adopt Generative AI and citizen-led development securely.
02 — Focus areas
Where I create value
Deal lifecycle & LP diligence
Technology and cyber diligence, 100-day plans after close, exit readiness, and the cyber risk story in LP fundraising.
Board & regulatory governance
Quarterly board reporting, an Information Security Steering Committee, and readiness for SEC cybersecurity requirements.
Security architecture
Modernized identity, endpoint, network and data protection through SASE, XDR, IAM, PAM, MFA and DLP.
Resilience & incident response
Business continuity, disaster recovery and physical security in one program, with incident response coordinated alongside external forensic firms.
AI governance & DevOps
AI steering and working groups, acceptable-use standards, and platform ownership that let teams adopt GenAI and citizen development safely.
03 — Experience
Career highlights
-
Chief Information Security Officer
H.I.G. Capital · Miami, FL
- Secured a mandate from the firm’s Founders to every Fund Head making cybersecurity a portfolio-wide priority.
- Brought 95% of portfolio companies into minimum standards and continuous monitoring in year one, with ~70% of critical findings closed or covered by compensating controls.
- Recruited the firm’s first Cybersecurity Operating Partner, creating a scalable model for sponsor-led security oversight.
- Grew the security function from one person to a 12-person Security Operations and Cyber GRC organization.
- Established quarterly board reporting and led readiness for SEC cybersecurity requirements for registered investment advisers.
- Co-led the firm’s GenAI strategy from 2022 and founded its AI Working Group, AI Steering Committee and AI Champions Group.
- Stood up AI Operations & DevOps in 2026, owning five GenAI platforms and governing citizen-developed applications. Also serve as Deputy CTO.
-
VP & Information Security Officer
Itaú International · Miami, FL
- Led the program across U.S., Caribbean and Chilean Private Banking and managed a $6M security budget.
- Moved security’s reporting line from the COO to the CRO and delivered quarterly cyber risk reporting to the Board and Head Office.
-
Building first-time security programs
Turnberry Associates · Greenspoon Marder · Greenberg Traurig
- Established the first IT Risk and Information Security programs at two law firms, one of them global.
- Rolled out a firm-wide SIEM, brought Identity & Access Management under security, and launched security awareness training.
- Fixed a deficient PCI compliance program and built an ISO 27001 / COBIT-aligned GRC framework.
-
VP, IT Risk & Information Security Group
Lloyds Banking Group · New York, NY
- Rose from Helpdesk Technician to Analyst, AVP and then Vice President.
- Built and led the North America IT Risk and Information Security program, earning strong audit and regulatory ratings.
- Ran SOX risk assessments, managed a $3M budget and established enterprise security governance forums.
Credentials
- CISSP
- ISSMP — (ISC)²
- Boardroom Certified QTE
04 — Community
Giving back to the field
Co-Chair, CIO/CISO events
Shaping the agenda for Evanta Florida CIO/CISO events and Evanta Global CISO events.
Member, FBI InfraGard
Partnering with the public and private sectors to protect critical infrastructure.
Teaching Assistant, Microsoft TEALS
Helping bring computer science education to high school classrooms.
Customer advisory boards
- NetRise
- ShadowHQ
- Dune Security
- CriticalStart
- BlackKite
- YL Ventures
- Digitalware