Guillermo Guerra
Details
Industrial Engineering
Georgia Institute of Technology
1999 : 2000
Bachelors
Mechanical Engineering & Management
Tecnológico de Monterrey
1991 : 1995
Built from the ground up the information security team covering all the necessary disciplines and functions to protect the company information assets. Implemented governance and risk-based strategy that is empowered by being part of the company's leadership team, working with C-Suite executives and Board of Directors to constantly address new and emerging threats.
Expanded responsibilities and scope becoming also the Chief Technology Officer to lead all IT operations, End User, Back Office, Cloud Migration, Data Center, and Networks. ensuring resiliency and security across all Jackson technology environment.
2021 : Present
Jackson
SVP, Chief Technology Officer and Chief Information Security Officer (CTO & CISO)
Responsible for the overall information security program at Jackson-a leading provider of retirement solutions in USA and subsidiary of Prudential PLC.
Built from the ground up the information security team covering all the necessary disciplines and functions to protect the company information assets. Implemented governance and risk-based strategy that is empowered by being part of the company's leadership team, working with C-Suite executives and Board of Directors to constantly address new and emerging threats.
2014 : 2021
Jackson
Chief Information Security Officer
Promoted to oversee the overall group information security programme globally covering multiple countries across Africa, Asia, Europe and North America. Responsible for centralising cybersecurity disciplines to have a consistent approach to protect the group's reputation of over 170 years of providing financial security and safeguarding its information assets covering 26+ million customers and over £669bn under management.
2018 : 2021
Prudential plc
Group Chief Information Security Officer
Responsible for providing consulting services to clients particularly on the financial services industry addressing their risk and security initiatives. Helping clients define their security strategy and roadmaps to protect themselves from emerging threats and attack vectors. Managed delivery teams and worked in developing relationships with clients.
Multiple engagements covering :
- Security Strategy
- Data Loss Prevention
- Vulnerability & Threat Management
- Enterprise Security Architecture
- Information Security Policy
2013 : 2014
PwC
Information Security Advisory | Financial Services - Cyber Security - CISSP
Responsible for developing and fostering strategic alliances within the financial services sector, looking for partnership opportunities that result in further deployment of Webroot’s security solutions and most importantly add value to our partners and customers.
Developing new markets (domestic and international) and distribution channels for new security solutions that are strategic for company positioning and growth. Including solutions to protect against cyber fraud, providing cloud security intelligence offerings and securing mobile platforms.
Challenges : International market development, new product / services launches, marketing efforts, development of strategy.
2013 : 2013
Webroot
Information Security Executive - AE Strategic Alliances - CISSP
Skills
antivirus, authentication, business process improvement, capability assessment, centralization, CISSP, computer security, cost reduction strategies, dlp, F5, f5 bigip, firewalls, Global Management, global operations, identity management, information se, Information Security, information security management, infrastructure, internal audit, internal controls, it asset management, it audit, itil, it management, it operations, it service management, lead, leadership development, legal compliance, network security, resource management, revenue optimization, Risk Assessment, sarbanes-oxley act, Security, security architecture design, security engineering, security monitoring, Security Operations, security tools, service delivery, siem, sox, strategic and operational planning, strategic technology planning, technology integration, threat monitoring, vulnerability assessment, vulnerability management, Cost Reduction, Business Process, Strategic and, Security Architecture, Strategic Technology
About
Global Chief Information Security Officer (CISO) with extensive experience and a history of success in building, turning around and strengthening information security programs. Global and strategic leader, who partners with business leaders to enable their digital strategies, create efficiencies, mitigate risks, secure their environment via the optimization of security ROI.
Adaptable, flexible and able to manage in rapid change environment in large complex organizations dispersed across multiple global locations. Diverse IT and security background combined with deep understanding of the intersection between technology, business, and operational needs, and a proven talent for conveying complex technical issues to board of directors and c-suite levels
Progressive leadership roles at different levels and domains of information security programs. Experience running security operations, architecture, as well as, policy and program management including business development activities and negotiation of large/complex contracts. Worked with large organizations leading multi-million dollar budgets on complex IT environments.
Specialties:
Cybersecurity Strategy, Board of Directors Reporting, Turnaround of Information Security Programs, Post Data Breach Strategy, Building Information Security Program, Green field CISO, Security Incident & Response, Security Optimization, Security Orchestration, Risk Assessment & Mitigation, Cyber Threat Intelligence, Large Project Implementation, Security Talent Development, GDPR Implementation, Data Protection, NY DFS Cybersecurity Regulation, PCI, HITRUST, SOX, GLBA, NIST, Security Governance & Oversight, Business Process Compromise (BPC), Cost Reduction & Avoidance, Mentoring & Leadership,, Culture Change Agent, Audit, M&A, Contract Negotiation, Business Development Activities, DDoS Mitigation, Continuity of Business, Encryption, Security Operations Center,, Anti-Fraud, Call Center Security, Cybersecurity.