Andrew is a globally-experienced award-winning certified Information Security executive and Board Advisor with a track record of success in complex, multi-stakeholder environments across Europe, North America, and the Middle East. In addition to his corporate experience, Andrew has served on the executive boards and advised government agencies on information security. He is a speaker at major security conferences, thought leader in the industry and often the keynote speaker.
Andrew has over 25 years of experience in banking, financial services, startups, and healthcare. His expertise includes building information security teams from the ground up, enabling sales as a customer-facing CISO, maturing systems to reduce risk, preparing for IPO, and developing streamlined reporting to provide executive insight into data risks. Andrew transitions reactive information security environments into a culture where proactive prevention of information security risk is the norm. He has a track record of developing and implementing security strategies from inception through execution.
His strength is collaboration; his goal is to create risk transparency and align security with business objectives.
Andrew's skill set includes Security Risk Management, Security Program Development, Risk Assessment Methodologies, Application, Board Advisory and Infrastructure reviews, Business Continuity (BC) and Disaster Recovery (DR), Security Training and Awareness, Data Loss Prevention (DLP), Audit and Regulatory Compliance, Mainframe, New Technology Research and Implementation, Application Security, Project Management (PM), Change Management (CM), Cloud Adoption Frameworks, and Cloud Security. Additionally, he comes from an IT background, which allows him to understand business requirements outside of the security environment and collaboratively create solutions that work for the business.
He holds the CISSP, CISA, CGEIT, CCISO, CISM, CRISC credentials.
Andrew's regulatory compliance and privacy experience include FSA, NIST, PRA, FDIC, ISO 27K, COBIT, HIPAA, PCI-DSS, GLBA, HITRUST, FedRAMP, Mass 201 CMR 17.00, SOX 404.SAMA, GDPR, CCPA, and NYDFS.
