Krystian W.

About Krystian W.

Forward-thinking Information Security Leader with 15+ years of global leadership experience driving application security transformation, embedding Zero Trust principles, and implementing Shift Left strategies across cloud-native, regulated, and high-demand environments. Proven ability to build and scale elite security engineering teams, establish threat modeling and secure SDLC practices, and architect measurable, enterprise-wide security solutions. History of transforming security posture in Fortune 50 companies, enhancing developer enablement, and aligning risk-reduction efforts with business growth. Passionate about proactive threat prevention, privacy, and high-scale software protection—from logistics networks to ecommerce platforms.Core Expertise Security Architecture & Shift Left Practices Threat Modeling & AppSec Enablement Zero Trust Engineering & Risk Management GCP/AWS/Azure Cloud Security DevSecOps, Purple Teaming, Secure SDLC Executive Stakeholder Collaboration Compliance: SOX, HIPAA, PCI, CMMC, GDPR Generative AI for Security Automation

Experience

1. Manager, Software Engineering - Global Security Compliance

   UPS

   Aug 2020 — Present · Mahwah, NJ, US

   Director-level cybersecurity and privacy leader with expertise in application security, cloud security, privacy engineering, and enterprise risk management. Proven ability to translate security strategy into scalable, execution-focused programs that reduce risk, meet regulatory requirements, and enable secure digital transformation.Lead pre assessments for Security Risk Assessments, Privacy Impact Assessments (PIAs), and threat modeling across enterprise application portfolios, driving proactive risk remediation in regulated environments. Extensive experience supporting compliance and audit readiness across PCI DSS, SOX, HIPAA, GDPR, and PII/data protection frameworks, while maintaining engineering velocity.Provide hands-on leadership securing multi-cloud environments (AWS, Azure, GCP), with focus on cloud security architecture, IAM, DevSecOps, secure CI/CD, and cloud governance. Support adoption of Generative AI (GenAI) and AI-enabled applications by defining security and privacy guardrails for LLMs, data usage, access controls, and emerging AI risks.Lead and mentor high-performing security and engineering teams delivering application security, cloud security, and risk management programs. Partner closely with engineering, product, legal, privacy, and compliance stakeholders to embed security-by-design and privacy-by-design across the SDLC.Key member of the Standards Practice Manual (SPM) Committee, aligning software security standards with NIST CSF 2.0, NIST SP 800-57, NIST SP 800-171, ISO/IEC 27001, PCI DSS, SOX, and GDPR.Serve as a Business Information Security Officer (BISO) partner, acting as a liaison between Software Engineering and Information Security to operationalize risk management and regulatory controls within technology delivery.

Education

• University of Phoenix

  Master of Science (MS), Management of Information Systems

• Baruch College

  BS, Information Technology

• Borough of Manhattan Community College

  AAS, Computer Operations

Skills

• Software Development
• Data Modeling
• Configuration Management
• Business Intelligence
• Leadership
• Routing and Voip Administration
• IT Audit
• Web Architecture
• Business Analysis
• Sdlc
• Administrative Reporting
• Project Management
• Microsoft Sql Server
• Integration
• Cloud Computing
• Sql Databases
• Analysis
• Training and Development
• IT Audits
• Enterprise Resource Planning (Erp)
• Quality Assurance
• System Implementation
• Business Process
• IT Management
• Testing
• Sharepoint
• Access
• Management
• Sql
• Visio
• Customer Relationship Management (Crm)
• Strategic Planning
• IT Strategy
• Resource Management
• Data Center
• Networking
• Forensics IT
• Data Warehousing
• Customer Service
• Erp