Experience
CISO
Netlify
Mar 2022 – Present · San Francisco, California
As CISO at Netlify, I lead enterprise-wide security, compliance, fraud & abuse, and IT initiatives to protect infrastructure and customer data while enabling business growth. I oversee a high-performing team focused on risk management, detection and response, and compliance with PCI-DSS, HIPAA, ISO 27018, and SOC 2. By embedding security into infrastructure, systems, and customer-facing services, I ensure resilience and trust at scale. My leadership emphasizes measurable impact implementing programs in vulnerability management, secrets management, and fraud prevention transforming security into a business enabler that allows Netlify to innovate and expand with confidence.
vCISO
Crescendo.AI
June 2025 – Present · San Francisco, California
As the Virtual Chief Information Security Officer at Crescendo.AI, I established and led a security and compliance program tailored for an AI-driven environment. In this role, I developed frameworks supporting SOC 2, ISO 27001, and HIPAA readiness, while implementing policies for risk management, incident response, and responsible AI use. I worked closely with engineering and product teams to embed security into the development lifecycle and cloud infrastructure, ensuring scalable guardrails without slowing innovation. My efforts strengthened Crescendo.AI's security posture, safeguarded customer data, and built the trust required to support enterprise adoption and growth.
vCISO
EarnUp Inc.
December 2020 – Present · San Francisco, California
As the Virtual Chief Information Security Officer at EarnUp, I provided strategic leadership in developing and enforcing cybersecurity policies aligned with business objectives and regulatory requirements. I conducted risk assessments, built incident response strategies, and ensured compliance with industry standards such as SOC 2 and PCI. Collaborating closely with executive and technical teams, I embedded security into operations, fostered a culture of awareness, and enhanced the company's resilience against evolving cyber threats. My work protected sensitive financial data and strengthened client trust, enabling the business to scale securely.
Head of Infrastructure Security
Dropbox
Mar 2019 – Dec 2021 · San Francisco, California
As the Head of Infrastructure Security at Dropbox, I led security and infrastructure operations across both organizations. At HelloSign, I strengthened the security framework for digital transactions, driving compliance, risk management, and employee security awareness. At Dropbox, I oversaw infrastructure security for large-scale data environments, optimizing architectures and deploying advanced protections to reduce risk. This dual role allowed me to harmonize security initiatives across both platforms, ensuring the protection of sensitive data, regulatory compliance, and trust at scale.
Head of Security
HelloSign
Mar 2018 – Mar 2019 · San Francisco, California
As Head of Security at HelloSign, I led security operations spanning compliance, risk management, and vulnerability assessments. I implemented comprehensive policies and controls that strengthened the company's security infrastructure and safeguarded sensitive customer data. By embedding proactive threat management, regular monitoring, and employee training into daily operations, I built a resilient security culture that reduced risk and reinforced customer trust. These initiatives ensured HelloSign maintained a strong reputation for security and reliability in digital transactions.
Head of Information Security and Technology
Cloud Lending Inc.
May 2017 – Mar 2018 · San Mateo, California
As the Head of Security, Compliance, and Information Technology at Cloud Lending Inc., I led the strategic oversight of compliance, risk management, vulnerability assessments, and infrastructure initiatives. A key member of the CLS Leadership Team, I prioritized the protection of customer data above all else. I directed the development and enforcement of robust security controls, significantly reducing risk exposure and ensuring compliance with industry standards. My leadership was instrumental in consistently achieving zero medium and high severity vulnerabilities in external audits, as verified by third-party assessors. I also managed cross-functional teams in a dynamic environment to support large-scale SaaS and IaaS frameworks, enhancing operational efficiency and security posture.
Director of Infrastructure and Security
Qualys Inc.
May 2011 – May 2017 · Redwood Shores, California
As Director of Infrastructure and Security, I led compliance, risk management, vulnerability, patch management, and infrastructure initiatives. I implemented continuous security monitoring programs that consistently resulted in zero medium or high-severity vulnerabilities, validated by third-party assessments including SOC and FedRAMP. To support growth from under 1 million to over 3 billion scans annually, my team launched and managed 30 multi-tenant cloud deployments, transitioning from physical to virtual infrastructure and improving availability by two 9's. Through DevOps automation, we reduced cloud deployment times from 9 months to 3 days, cut planned downtime by 75%, and delivered multi-million dollar annual savings while accelerating time to market.
Information Security Officer
iPass Inc.
February 2006 – May 2011 · Redwood Shores, California
As Information Security Officer at iPass, I directed cross-departmental teams across Information Security, Systems, Database, and Network functions. I oversaw the design, implementation, and re-architecture of critical infrastructure, driving initiatives in virtualization, high availability, and disaster recovery to ensure resilience and reliability. By aligning technology and security strategies across departments, I improved operational efficiency and strengthened the organization's overall security posture. This role combined strategic leadership with hands-on technical oversight, resulting in greater system stability and trusted network operations.
Information Security Architect
GoRemote Inc.
November 2000 – February 2006 · Milpitas, California
As Information Security Architect at GoRemote, I led the Information Security, Systems, Database, and Network teams to enhance infrastructure through strategic design, re-architecture, and management. I drove initiatives in virtualization, high availability, and disaster recovery, ensuring system integrity and operational continuity across the network. By fostering cross-departmental collaboration and embedding security into core IT practices, I strengthened technological capabilities and improved resilience, positioning GoRemote as a secure and reliable provider in a competitive market.
Solutions Engineer
Globix
March 2000 – November 2000 · Milpitas, California
As a Solutions Engineer at Globix, I specialized in designing and administering large-scale systems across diverse environments. I collaborated with stakeholders to translate business requirements into optimized technical solutions that improved efficiency, performance, and scalability. My work delivered robust, adaptable systems that supported client growth and helped Globix maintain a competitive edge in a rapidly evolving technology landscape.