Eric Leonard

About Eric Leonard

I’m a senior security leader focused on Product Security, Application Security, and…

Experience

1. Executive Director Product Security Security Operations Deputy CISO

   JPMorganChase

   Nov 2023 — Present · Seattle, WA, US

   Directed a global cybersecurity organization supporting a 24/7 travel platform, with teams across North America, EMEA, and APAC. Unified US and EMEA security teams to provide around the clock security support and team integration of the travel platform. Accelerating risk reduction roadmaps in some situations by half of the forecasted timeline. Global Security Integration: Aligned Chase Travel with JPMorgan\'s enterprise controls, enabling faster delivery and regulatory compliance.• Defined and led implementation of an enterprise-aligned information security strategy focused on threat resilience and business continuity. Compliance Enablement: Embedded PCI, SOC 2, PII, GDPR safeguards and auditability across cloud-native applications and legacy environments.• Integrated DevSecOps practices into CI/CD pipelines including SAST/DAST, container scanning, and infrastructure-as-code security. This modernization achieved a 90% reduction in critical exposures via continuous scanning and risk-based prioritization.• Optimized AWS cloud security baselines, security guardrails, encryption, and access controls for multi-region deployments. Incident Response Modernization: Cut MTTD/MTTR by over 50% through playbook automation, SIEM integration, and global threat intel collaboration. This enabled a 33% reallocation of headcount from the cloud operations team. Also enabling the ability for automated data classifications and encryption at rest/in-transit.• Operational Efficiency: Automated GRC workflows and optimized tooling, reassigning resources and saving over $500K annually.