Philip Morris International

Acting as the primary responsible for first line of defense functions, I am currently leading PMI’s global cybersecurity program and portfolio across Product/ Device and Operations business units (covering Product Innovation, Product Engineering, Quality Regulatory Affairs, Manufacturing Engineering Services, Manufacturing Solutions and Services, and Supply Chain Solutions).

I am currently overseeing the orchestration and delivery of a global technical OT cybersecurity program across all PMI factories, in alignment with ISA/IEC 62443 series of standards.

My current role, also acting as a BISO and working closely with the CISO, is to bridge the gap between security and business interests, contributing to security awareness and overseeing the strategy implementation across all areas of the business units. As the cybersecurity champion for the business, my responsibilities span a wide range of activities (from project to BAU), including defining and prioritizing risk treatment strategy, developing capabilities across the cybersecurity value chain, orchestrating the execution of risk treatment activities, and embedding “security by design” across processes and technologies.

Global Head - Product and Operations Cybersecurity

HFS Research

Built and led the Digital Trust and Cybersecurity research practice. I successful managed to setup a global research team and delivered a wide range of initiatives for global service providers and enterprise clients. 

I don’t look at cybersecurity as a tech-only puzzle. My research agenda gravitates around two domains, augmentation and protection, and focuses on six core thematic research pillars: the remit and goals of the CISO in the hyperconnected world, reducing the IT risk and security skill gap, augmenting IT and security functions (across the 3 lines of defense) with intelligent solutions, trusting the cloud security environment, managing identity and access risks, and responding to modern security threats.

My custom research projects allowed me to work very closely with cybersecurity executives in Global 2000 enterprises. The goal of such projects was to provide data-driven analysis and strategic recommendations in areas such as ransomware, zero trust, digital identity, next generation SOC, cyber risk quantification, cloud security, Security-as-a-Service (SECaaS) models, GRC, Cyber Ranges, and security automation and orchestration.

Vice President & Practice Leader - Digital Trust & Cybersecurity/ Applied Automation

I was part of the Core Tech Strategy & Transformation Leadership Team in the capacity of Senior Director. Working closely with the CISO leadership team, my key objective was to build/design/operate a new global Cybersecurity and Control Governance function aimed at managing and governing cybersecurity risks across GSK corporate and business-unit specific areas.

Led the design, build and deployment of a global environment to manage privileged access across IT and OT environments (supported by CyberArk, SailPoint, Splunk and Imperva solutions).

Led the deployment of new breed of managed security services (looking beyond cybersecurity-centric services, delivered through traditional MSSP models, and deploying a more evolutionary model that unifies cybersecurity and compliance “by design”).

Designed the Cybersecurity Target Operating Architecture and Model for Haleon, the new consumer healthcare company.

Led the global Security Governance program with an “automation-first” mindset. I managed the deployment of advanced automation and monitoring mechanisms via different technological enablers (dedicated off-the-shelf solutions, custom build engine, RPA, Intelligent Automation, ML) to continuously monitor and measure the operating effectiveness of existing risks and controls.

Senior Director - Core Tech Strategy and Transformation

Director - Core Tech Strategy and Transformation

My role was to setup a global GRC function to manage risks and controls governing the most critical processes supported by global applications at GSK (such as the global ERP system, SAP, that supports all core operations from manufacturing to finance).  My initial goal was to support the deployment of security framework across all regions and implement a “GRC by design” template to ensure risk and compliance standardization across global and BU-specific IT and Business functions.

I have also led the design and deployment of one of the largest global Intelligent Automation programs across all GSK Business Units (including the implementation of a global Automation Centre of Excellence and enablement of regional scalable Automation Deliver Hubs).

Director - Global Applications and Development

Senior Manager - IT Advisory Services

Senior Manager - Risk Advisory Services

Manager - Technology Security and Risk Services

KPMG

Senior Consultant - IT Audit Services

Follow me if you are looking for an honest, pragmatic and above all funny perspective on Tech, Automation, AI and Cybersecurity. 

The statements, views, or opinions expressed in my LinkedIn profile and related articles represent my own views and not necessarily those of my employer.

Breaking news: Apple's ubiquitous iPhone 16 is about to break new ground with a shift into artificial intelligence that will allow you to create customized emojis on the fly.

What a time to be alive.

#technology #ai #apple 

Follow me if you are looking for an honest, pragmatic and funny perspective on technology. Hit the 🔔 on my profile to get a notification for all my new posts.

Taplio

Ralph Aboujaoude Diaz's Linkedin Analytics

What is Ralph talking about?

Who is engaging with Ralph

's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?