Philip Morris International

Acting as the primary responsible for first line of defense functions, I am currently leading PMI’s global cybersecurity program and BAU security/ compliance services across Product/ Device and Operations business units (covering Research & Development, Product Innovation, Product Engineering, Quality Regulatory Affairs, Manufacturing Engineering Services, Manufacturing Solutions and Services, Supply Chain and Track & Trace Solutions).

I am currently overseeing the orchestration and delivery of a global Industrial/ OT cybersecurity program across all PMI factories, in alignment with ISA/IEC 62443 series of standards.

I am also in charge of designing and executing the cybersecurity program for Product to fortify “Device to Cloud” defense for smoke-free portfolio, which includes heated tobacco (IQOS), e-vapor, and oral smokeless products.

My current role, also acting as the global BISO and working closely with the CISO, is to bridge the gap between security and business interests, contributing to security awareness and overseeing the strategy implementation across all areas of the business units. As the cybersecurity champion for the business, my responsibilities span a wide range of activities (from project to BAU), including defining and prioritizing risk treatment strategy, developing capabilities across the cybersecurity value chain, orchestrating the execution of risk treatment activities, and embedding “security by design” across processes and technologies.

Global Head - Product and Operations Cybersecurity

HFS Research

Built and led the Digital Trust and Cybersecurity research practice. I successful managed to setup a global research team and delivered a wide range of initiatives for global service providers and enterprise clients. 

I don’t look at cybersecurity as a tech-only puzzle. My research agenda gravitates around two domains, augmentation and protection, and focuses on six core thematic research pillars: the remit and goals of the CISO in the hyperconnected world, reducing the IT risk and security skill gap, augmenting IT and security functions (across the 3 lines of defense) with intelligent solutions, trusting the cloud security environment, managing identity and access risks, and responding to modern security threats.

My custom research projects allowed me to work very closely with cybersecurity executives in Global 2000 enterprises. The goal of such projects was to provide data-driven analysis and strategic recommendations in areas such as ransomware, zero trust, digital identity, next generation SOC, cyber risk quantification, cloud security, Security-as-a-Service (SECaaS) models, GRC, Cyber Ranges, and security automation and orchestration.

Vice President & Practice Leader - Digital Trust & Cybersecurity/ Applied Automation

I was part of the Core Tech Strategy & Transformation Leadership Team in the capacity of Senior Director. Working closely with the CISO leadership team, my key objective was to build/design/operate a new global Cybersecurity and Control Governance function aimed at managing and governing cybersecurity risks across GSK corporate and business-unit specific areas.

Led the design, build and deployment of a global environment to manage privileged access across IT and OT environments (supported by CyberArk, SailPoint, Splunk and Imperva solutions).

Led the deployment of new breed of managed security services (looking beyond cybersecurity-centric services, delivered through traditional MSSP models, and deploying a more evolutionary model that unifies cybersecurity and compliance “by design”).

Designed the Cybersecurity Target Operating Architecture and Model for Haleon, the new consumer healthcare company.

Led the global Security Governance program with an “automation-first” mindset. I managed the deployment of advanced automation and monitoring mechanisms via different technological enablers (dedicated off-the-shelf solutions, custom build engine, RPA, Intelligent Automation, ML) to continuously monitor and measure the operating effectiveness of existing risks and controls.

Senior Director - Core Tech Strategy and Transformation

Director - Core Tech Strategy and Transformation

My role was to setup a global GRC function to manage risks and controls governing the most critical processes supported by global applications at GSK (such as the global ERP system, SAP, that supports all core operations from manufacturing to finance).  My initial goal was to support the deployment of security framework across all regions and implement a “GRC by design” template to ensure risk and compliance standardization across global and BU-specific IT and Business functions.

I have also led the design and deployment of one of the largest global Intelligent Automation programs across all GSK Business Units (including the implementation of a global Automation Centre of Excellence and enablement of regional scalable Automation Deliver Hubs).

Director - Global Applications and Development

Senior Manager - IT Advisory Services

Senior Manager - Risk Advisory Services

Manager - Technology Security and Risk Services

KPMG

Senior Consultant - IT Audit Services

Follow me if you are looking for an honest, pragmatic and above all funny perspective on technology, workplace, cybersecurity, automation and AI.

The statements, views, or opinions expressed in my LinkedIn profile and related articles represent my own views and not necessarily those of my employer.

This comic perfectly reflects a serious problem where most companies claim to struggle with hiring but reject or ignore applicants for random arbitrary reasons, usually governed by outdated HR screening mechanisms (now “powered” by AI).

What is even more disturbing is that businesses refuse to change their hiring practices, even when it's clear they are, most of the time, the problem. 

Crying about worker shortages while actively ignoring available talent is not the solution.

Just saying.

#technology #workplace #job 

Follow me if you are looking for an honest, pragmatic and funny perspective on technology. Hit the 🔔 on my profile to get a notification for all my new posts.

Ralph Aboujaoude Diaz

No alternative text description for this image

Taplio

Ralph Aboujaoude Diaz's Linkedin Analytics

Ralph Aboujaoude Diaz

What is Ralph talking about?

Who is engaging with Ralph

Ralph Aboujaoude Diaz's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?