Mar 2025 – Present · 1 yr · Greater Boston

• In my role as Chief Information Security Officer & Enterprise Architecture at RITE AID, I'm spearheading security strategy and enterprise architecture to enhance resilience and drive innovation. By collaborating with talented teams, we are strengthening cybersecurity measures and optimized IT infrastructure to enable a secure digital future.

Sep 2021 – Feb 2025 · 3 yrs 5 mos · Greater Boston

• Leading the security strategy, enhance risk management, and drive cyber resilience to protect our customers, employees, and business. Collaborating with an incredible team to strengthen security, compliance, and innovation in the ever-evolving threat landscape.
• #CyberSecurity #CISO #RiskManagement #Leadership #Innovation

Dec 2023 – Present · 2 yrs 3 mos

Oct 2018 – Sep 2021 · 2 yrs 11 mos

• As Vice President & Chief Information Security Officer at BJ's Wholesale Club, I led a strategic shift in our security approach, transforming it into a proactive, business-enabling function. By driving key initiatives such as cloud migration and digital transformation, we not only enhanced in-club member experiences but also fostered strong collaboration with engineering and development teams, earning recognition as an "approachable leader."

Jun 2018 – Present · 7 yrs 9 mos · Boston, Massachusetts, United States

Jan 2018 – Present · 8 yrs 2 mos · Boston, Massachusetts, United States

Jul 2014 – Sep 2018 · 4 yrs 2 mos

• Accountable for defining the vision, strategy, and successful execution of a comprehensive Global Information Security program, built from the ground up across multiple domains—including IT, connected products (IoT, hardware, software, mobile, and cloud security), and customer privacy (GDPR, data security, and governance).
• By aligning security measures with the organization’s risk appetite and fostering trust-based relationships, I transformed the company’s approach to operate securely while enabling business growth.

Jan 2010 – Jun 2014 · 4 yrs 5 mos

• Responsible for successful delivery of Enterprise & Product Security, Policy, Risk Management & Compliance programs to 34+ countries globally
• Transformed and uplifted Haemonetics security to prevent the next generation threats but still achieved excellent ‘User Delight!’
• With a great focus on Governance, Security Architecture & Business Alignment provided and managed a multi-year roadmap for ISO 27001 compliance
• Led multiple global security initiatives to successful delivery including Perimeter Security Transformation (firewall replacement, FIM & building DMZs), Customer, Partner & Vendor access, Network Segregation & Controls (NAC), Seamless & Centralized Authentication (SSO), Advanced threat protection deployment, Establishing SOC, Seamless authentication for mobile devices, etc
• Prioritized and provided ROI based Security Initiatives and incorporated Security into
• Haemonetics employee culture by launching multiple Security Awareness & Training programs
• Initiated a cross-departmental corporate-wide Enterprise Risk Management strategy

Jan 2009 – Jan 2010 · 1 yr

• Responsible for security strategy and execution of Kronos Security & Regulatory compliance programs from ground-up
• Developed an Information Security Strategic Plan; Utilized industry standard frameworks to define the future security state based on the regulatory and environmental security trends
• Built a dedicated team for regulatory compliance and operationalized it

Aug 2007 – Sep 2009 · 2 yrs 1 mo

• Part of the leadership of Starwood Hotel’s global IT Infrastructure services, responsible for a successful delivery of Identity Management System for 100k+ employees & partners worldwide.

Oct 2004 – Aug 2007 · 2 yrs 10 mos

Jan 2003 – Jan 2004 · 1 yr

Jan 2000 – Jan 2003 · 3 yrs