Ari Godoy

About Ari Godoy

I\'m a Director of Cybersecurity Operations, Risk and Compliance with CISO-level experience and a background in Information System Architecture, AI-based cybersecurity designs, Project Management, and Economics, and over 17 years of experience in information security, including designing, implementing, building, and supporting complex network and data center environments. I also have over 10 years of experience in business management.My role in M & As provided me with a deep understanding of the complexities of managing the information security integration and separation process. I utilize the NIST Cybersecurity Framework to establish the baseline security posture, identify areas of concern, suggest remediation guidance, and provide a Plan of Action & Milestones (POAM). Identifying irregularities between the NIST best practices and current practices to contribute to Risk Assessments. I create detailed reports providing a high-level overview of the identified vulnerabilities and their associated risks. As a cybersecurity advisor across multiple business units, I work with business stakeholders and cybersecurity partners to review the latest cybersecurity threats, tactics, techniques, and procedures, as well as mitigation strategies. I’m proficient at developing Cybersecurity Programs, Policies and Risk Management, with a focus on Mitigation and Business Continuity, Risk & Compliance (CCPA, GDPR, PCI, HIPAA), Data Governance and Information Security Assessments.

Experience

1. Director Cybersecurity Operations, Risk and Compliance

   Clairos

   Mar 2025 — Present · Milwaukee, WI, US

   Designing AI-based prevention, detection, and response systems, including but not limited to the following:Risk Assessment & Analysis• Identify vulnerabilities in networks, software, and systems utilizing Tenable, Rapid7, Automox, Microsoft Defender Vulnerability Management, Defender for Cloud, Darktrace, Cisco, Palo Alto, Red Canary, CrowdStrike, and Sentinel.• Conduct NIST and industry-based (HIPPA/PCI/HiTrust) security audits.• Penetration testing vendor selection, coordination, and management of findings and remediation.• Assess potential threats and their business impact.• Provide a report on the company\'s security posture and generate a Plan of Action & Milestones (POAM).Security Strategy & Planning• Develop customized cybersecurity policies and protocols.• Lead the design and definition of the comprehensive technical architecture for security platforms, including the integration strategy for core components.• Architect the seamless integration of various security tools, including platforms like Wiz and Microsoft Defender for Cloud, ensuring data flows, correlation, and actionable insights across multi-cloud (Azure, AWS, GCP) and hybrid environments.• Recommend tools, technologies, and best practices to mitigate risk.• Ensure security measures align with business objectives and regulatory requirements (e.g, NIST, GDPR, HIPAA, ISO 27001).• Training & Awareness.• Compliance.Implementation & Monitoring• Collaborate with Security Operations Center (SOC) teams to define operational models, incident response procedures, and threat hunting methodologies that leverage the capabilities of integrated platforms.• Guide IT Ops on perimeter defense systems, intrusion detection systems, endpoint protection, and encryption tools.• Guide and assist in the monitoring, management, and implementation of role management within Azure Identity and Access Management (IAM)/Entra ID and Okta.• Respond to and investigate security incidents or breaches.

Education

• UC Irvine

  Initiating and Planning Projects, Project Management

  2014 — 2015

• UC Irvine

  Managing Project Risks and Changes, Project Management

  2014 — 2015

• UC Irvine

  Budgeting and Scheduling Projects, Project Management

  2014 — 2015

• University of Buenos Aires, Argentina

  Business Administration and Economics., Economics

  1997 — 2001