Paul Rainbow

About Paul Rainbow

The last 20 years of my life have been spent building an understanding of Information Security, Cyber Security, Risk Management, and Privacy. I specialize in building and maturing security and risk management programs to ensure that the organization’s strategy meets the risk appetite and needs of the business. I build productive and loyal teams that collaborate and provide guidance, oversight, and direction to key stakeholders across the enterprise. Through many years in security consulting, I’ve acquired a broad understanding of various industries and the challenges faced by both large and small organizations. My experience and knowledge has assisted a large number of organizations in the development and maturity of IT risk assessments, information security risk assessments, disaster recovery and business continuity programs, security control and framework implementation, vendor risk assessment, business impact analysis, and various other programs. One of the critical areas of my work has been the evaluation and development of all aspects of an organization’s information security program. This includes a deep understanding of regulatory requirements and how those requirements are implemented across industries. Managing Information and Cyber Security involves addressing both technology and human aspects. My experience in banking, and specifically with banking regulators (FDIC, OCC, FRB, NCUA), provides a solid framework of understanding and resources to draw from. My experience extends to a variety of audit and technology frameworks. This includes participation and leadership roles in projects programs related to GLBA, ISO27001, ISO27002, NIST, COBIT, Sarbanes Oxley, COSO, SSAE16, FISMA, FFIEC, TR-39, TG-3, PCI DSS, SysTrust, WebTrust, and HIPAA.

Experience

1. Chief Compliance Officer

   KirkpatrickPrice

   Jun 2025 — Present

Education

• Corban University

  BS Accounting, Accounting

  1995 — 1999