Lucas L.

About Lucas L.

Hello! I am a performance-driven and meticulous security and technology leader with over 20 years of experience enabling achievement of goals via IT Security Operations, end-to-end security architecture design, and enterprise risk management and compliance. Well-versed in design, architecture, and implementation of Enterprise Information Security and IT Risk Management programs from initial concept to completion while establishing, training, and supporting teams of professionals.Throughout my career, I am recognized for the following:• Preparing detailed presentations for C-level executives and board members to support informed decision-making while ensuring consistent application of policies/standards across all projects, systems, and services.• Meeting Information Security requirements by identifying vulnerabilities/gaps, facilitating risk assessments, responding to security threats, and offering solutions for improving IT compliance and streamlining processes.• Creating robust strategies through collaborative approaches to translate goals into achievements while demonstrating strong analytical and decision-making skills, with a passion for excellence.

Experience

1. Head of Soc, Risk and Red Team

   Wayfair

   Jan 2024 — Present

   Drove reporting to the executive team informing the company on cyber risk to ensure cybersecurity priorities create measurable reduction in enterprise risk. Attained rapid PCI 4.0 compliance, working with auditors to properly scope enterprise assets, reducing compliance burden by over 85%. Oversaw the SOC transformation from in-house scripts to a full SOAR automation and case management platform, reducing reliance on PagerDuty by over 90%. Implemented cutting edge technology stack including GenAI integration into security toolsets.* Lead a Security Operations Center and a Risk and Red Team function, ensuring both robust defensive and offensive capabilities for the company, translating actionable data and insights into proven and quantifiable risk.* Executed FAIR risk assessments, tying enterprise risks to measurable business loss probabilities and expectations.* Ran ISO 27001/27002 maturity assessments, showing year-over-year maturity improvements for the cybersecurity program as baselined against industry peers.*Procured and deployed a next-generation SIEM/SOAR/UEBA/EASM/Threat Intelligence platform, ensuring full operability within 4 months.