Christina S.

VP, Global Chief Information Security Officer (CISO)

KIK Consumer Products

Chief Information Officer

Evanta, a Gartner Company

CIO / CISO Governing Body for Evanta (CIO Co-Chair for Florida)

CIO Co-Chair- Evanta FL Governing Body

SPS Commerce

VP, Chief Information Security Officer (CISO) at SPS Commerce

Catalina USA

• Develop Catalina's Global Security Strategy, Implement Cybersecurity Risk Program (US, Japan, EU)
• Mature Security Controls & address business risk via continuous improvement & measurement against the following frameworks: NIST CSF, CIS Critical Controls, & ISO/ IEC TS 27110 
• Led security investigation event, completing forensics analysis and clearing Indicators of Compromise (IOCS) for over 3k systems
• Drastically improve Catalina’s breach detection & response capabilities utilizing real 
time data analytics combined with autonomous response 
• Improve Catalina’s business continuity maturity by developing a ransomware 
plan and utilizing penetration testing to validate risk exposure and prioritize investments.
• Address major gaps in asset management, to enable risk quantification capabilities and improve Incident Response processes
• Identify & protect Catalina’s technology stack of Legacy End of Life Systems by implementing
security monitoring controls to detect & respond to an anomalous event 
• Streamline & automate business processes for performing Third Party Risk evaluations
• Enable business delivery for product teams by introducing self-service models for performing code scans
• Mature Cloud Security controls across 40+ Microsoft & AWS Cloud Environments
(Conditional Access, IRM, Advanced E-Discovery, CASB, DLP)

VP, CISO (Private Equity)

Anchor Glass Container Corporation

25+ personnel, Hands – on role, that required full immersion into the manufacturing plants for developing Digital IOT Products, with ownership for Cybersecurity, IT PMO, & technology enablement for ERP 
• Spearheaded Anchor’s Digitalization Journey, overhauled the IT team, & automated redundant business processes.
•Implemented Anchor’s first cybersecurity program, negotiated the 1st Cyber Insurance policy, and gained support for patching plant’s controls systems (OT)
• Digital Product Leader credited for leading the rollout of Anchor's Manufacturing IOT production system. Delivered 80% increase in IOT Capabilities (.NET/C/Azure/Angular/MQ)
• Replaced Siemens PLCs with Allen Bradley PLCs, and increased OT support ownership
• Partnered with industrial engineers (OT) to enable safety & reduce downtime by rolling out Rockwell Automation’s Factory Talk. 
• Developed automated production report for 6 manufacturing plants. Increased delivery speed to same day vs next day for production performance insight, & dramatically improved data quality standards 
• Reached 97% reduction in plant network outages via redundancy capability 
• Reduced risk of credential theft via MFA rollout for email & remote network access. 
• Rolled out Microsoft M5 security capabilities 
• Enabled plant efficiency by developing automated solution for an industrial palletizer auto-labeler
• Implemented ERP Disaster Recovery capability and reduced data center footprint by 60% by transitioning ERP stack to Cloud Hosting models (PaaS, IaaS)
• Leveraged use of Real Time Data Analytics & machine IOT connectivity, to improve shop floor detection of production issues 24hrs sooner than ERP reporting insight. (Anchor)
• Digitalized & Automated 144-sheet paper processes in Manufacturing Plants (Anchor)
• Improved Cyber resiliency by identifying Anchor’s crowned jewels and implementing MDR
• Drastically improved Anchor’s Recovery capabilities for a ransomware attack by creating off-network data backups

Vice President of Information Technology (Private Equity)

Raymond James

Led Technology Strategy & Execution for the Identity and Access Management (IAM), SecDevOps (Authentication/Legacy/Security/IAM), & Vulnerability Reporting Functions (3 Managers, 3 functions + Offshore Team)

• Reversed 4+ years of major technical service delivery issues for IAM by orchestrating a complete transformation of the team composition, culture, governance standards, and expansion of business partnerships
• Significantly reduced technical debt, simplified the environment, and increased capabilities via migration of 14 custom provisioning systems/connectors to the SailPoint Platform.
• Increased business value and improved SLA’s via implementation of self-service and automated fulfillment capabilities for requesting/approving/fulfilling access; (Service Now / SailPoint Integration)
• Transformed RJ's Access Certification process which improved business adoption, value, and reduced risk to the organization 
• Successfully implemented solution (SailPoint Security IQ) that mitigated business risk of unauthorized access to unstructured Data. Incorporated Quarterly Access review to meet compliance control standard
• Implemented WAM/RBA/Web Access Portal to enable streamlined business processes 
 •Implemented preventative and detective controls for lessening the risk of threat from anomalous authentication
• Improved Program maturity by implementing FFIEC CAT controls to address threats and regulatory requirements 
• Improved data integrity and executive awareness on cyber risk exposure, via implementation of a devsecops function responsible for developing the security vulnerability metrics reporting program
• Served in IT leadership roles to ensure the successful acquisition of two firms 
• Reduced Raymond James’ risk of fraud, destruction, and IP theft by overhauling the Separation of Duties (SOD) Program to identify and mitigate toxic combinations of business and IT access.

Information Security Director

QuikTrip

CISO, responsible for the QuikTrip’s enterprise information security, privacy, & disaster recovery program.

Accomplishments:
• Created the company’s 1st CSIRT to improve breach readiness, protect IP, and reputation. 
• Implemented QT’s first Security Operations Center (SOC) Function to enable detection & response 
• Delivered Cybersecurity Maturity Assessment & Roadmap updates to QT’s Board of Directors 
• Led several breach incidents caused by skimmer attacks. 
• Established key relationships with local, state, and federal authorities to improve intelligence 
• Collaborated with Peers in the OK RH-ISAC to improve QT’s threat intelligence
• Improved business awareness on enterprise risk exposure, by communicating gaps between BIA plans and IT capabilities. Developed Disaster Recovery Program
• Matured the security awareness training program via implementation of revamped training 
• Architected the implementation of an Identity and Access Management solution 
• Revamped QT's PCI program to ensure readiness for the PCI 3.0 & 3.1 requirements. QT is a Level 1 Merchant. 
• Matured QuikTrip’s enterprise risk posture by evolving the cybersecurity strategy to focus on investments that identified & protected critical data / information assets from internal & external threats.  
• Enabled QT to adopt a “Cloud First” business strategy by Implementing the Cloud Security Alliance Controls Matrix for assessing supplier risk

Information Security Manager - (CISO)

Phillips 66

Storage Manager:
• Transformed Global Data Storage team, surpassing Operation Excellence Standards.
• Enhanced business resiliency, reducing Local Recovery Time Objective (RTO) from 28 hours to <1 hour and Disaster Recovery time from 72 hours to <2 hours.
• Delivered $360k savings for Phillips 66 by modernizing Data Backup Infrastructure, eliminating physical tape use, and consolidating backup software.

SAP Development Manager:
• Led 18 employees as part of P66's "High Potential Program."
• Spearheaded global Work Management process (SAP PPM) implementation, improving project visibility, resource utilization, skill set analysis, and headcount planning.
• Revamped SAP application module UI to enhance business usability.

IT Manager-  Storage Infrastructure & SAP Application Development

Walmart

Walmart (Security Manager):
•  Led the Security Engineering & Development team, responsible for developing security centric solutions for the enterprise. Simultaneously managed the business application development teams for Walmart’s Legal, Travel, & Asset Protection functions. 
• Credited for identifying the solution used for Walmart's first enterprise SSL Certificate management product, which reduced the risk of lost profit from outages due to expired web certificates.
• Implemented “Risk Based Authentication” for WalmartOne, Global Benefits website for 1.5M Employees


Walmart Vendor Partner (RSA Security Advisor / EMC) - 6/2006 - 4/2011:
• RSA Onsite Security Advisor, responsible for the support and technical oversight of RSA’s Product implementations at Walmart (MFA, DLP, Encryption, PKI, Web Access Management, SAML 2.0 for federating websites) 
 • Served as Walmart’s ambassador and gained inclusion for over 40 different RSA security product enhancements 
• Effectively drove escalation efforts with the RSA SecurID Product Team to correct authentication replication issues encountered when deploying SecurID internationally to meet PCI compliance
• Delivered RFP for Walmart’s Brocade SAN/RSA Key Manager Solution to encrypt SAN PCI data at rest.

IT Security Manager, Walmart Vendor Partner (Onsite Technical Manager & Engineer - RSA Security)

CIO at KIK Consumer Products | 4x CISO

Christina Shannon is an accomplished Chief Information Officer (CIO) in the CPG chemical manufacturing sector, with a career spanning over two decades. She started her career in a technical capacity, transitioning to senior security leadership roles in Fortune 100 companies, to executive technology and security positions in mid-to-large-sized, private equity-owned firms. 

Christina has served as a Chief Information Security Officer (CISO) four times, gaining extensive experience in developing effective strategies to address enterprise cyber risk across various industries.

As CIO at KIK Consumer Products, Christina focuses on building a high performing team, who partners with the business to realize value through securely exploiting technology.

Opinions expressed in Christina's posts do not reflect the views or positions of employers or associated organizations.

Taplio

Christina S.'s Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Christina S.'s Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Christina S.'s Linkedin Analytics