Jeremy Kuhl

About Jeremy Kuhl

As an Chief Information Security Officer, Privacy Officer, and Head of Third-Party Risk Management, I lead enterprise security governance, data protection, and regulatory compliance for financial institutions. With 20+ years of experience, I specialize in strategic risk quantification, privacy frameworks, and cybersecurity resilience, ensuring organizations navigate evolving regulatory landscapes while safeguarding their most valuable assets.I’ve successfully implemented vendor and contract management systems, established RFP and onboarding processes, and led third-party governance initiatives, driving significant cost savings while strengthening regulatory alignment. By developing risk frameworks and governance committees, I ensure that third-party vendors adhere to risk appetite and compliance requirements, reducing exposure while fostering security partnerships.As a Privacy Officer, I oversee data governance strategies, ensuring compliance with GLBA, CCPA, and other regulatory mandates. My leadership in privacy-by-design and risk methodologies ensures organizations maintain compliance, resilience, and trust. Passionate about bridging cybersecurity, compliance, and business strategy, I collaborate with C-level executives, regulators, and cross-functional teams to align security goals with organizational vision. Constantly evolving with industry trends, frameworks like NIST RMF & FAIR, and privacy innovations to shape forward-looking security strategies. Dedicated to mentoring teams, fostering high-performance security cultures, and driving operational excellence at an executive level.Let’s connect to explore security leadership, risk governance, and privacy innovation!

Experience

1. SVP, Chief Information Security Officer

   Quontic

   Jan 2023 — Present · Phoenix, AZ, US

   As the Chief Information Security Officer at Quontic, I am accountable for ensuring the security and integrity of customer data, assets, and sensitive information while serving as the Head of Third Party Risk Management and the Banks Chief Privacy Officer. I provide direct oversight to the IT department, identifying and addressing potential risks to safeguard the organization\'s interests and enhance operational resilience. Head of Third Party Risk Management Chief Privacy Officer Crafted a three-year roadmap from an exhaustive assessment of thousands of controls, shaping the strategic direction towards regulatory compliance and operational excellence. Developed and implemented a cyber risk framework and corresponding controls for a comprehensive Risk Control Self-Assessment within six months. Conducted a comprehensive risk assessment of the tool stack, resulting significant cost savings within six months through strategic reduction and optimization. Established and maintained a high-performing team of five direct and eight indirect reports, fostering a culture of empathy and excellence. Liaised with regulatory bodies, including the OCC, to ensure alignment with information security and technology standards. Led and implemented phishing awareness initiatives, revolutionizing the security culture to be more proactive, delivering best practice presentations and weekly updates at company meetings.

Education

• Arizona State University

  BS, Computer Science