Pippin Wallace

About Pippin Wallace

Senior Security Leader | Risk Advisor | Business EnablerI bridge the gap between technical security controls and business velocity. My approach is simple: Security should not be the \"Department of No,\" but the \"Department of How.\"At Favor, I spearheaded a comprehensive transformation of the security program. Moving beyond simple tool implementation, I focused on aligning incentives between Engineering, Product, and Sales. By treating Engineering Managers as partners in velocity and Sales teams as clients needing trust, I shifted the internal perception of security from an insurance policy to a competitive differentiator.Key Highlights:Risk Reduction: Reduced addressable vulnerabilities by 98% through a custom-architected AppSec ecosystem.Business Growth: Achieved SOC 2 compliance and acted as a sales enabler to help close high-value enterprise contracts.Innovation: Established AI Governance frameworks and served as an Advisory Board member for key security vendors.

Experience

1. Security Leader at Favor Risk Advisor Ai Governance & Appsec Strategy

   Favor Delivery

   Jan 2023 — Present

   Recruited to transform the organization\'s security posture, shifting from a reactive model to a risk-based, business-aligned strategy.STRATEGIC LEADERSHIP & GOVERNANCE• Conducted a foundational risk assessment and defined organizational risk tolerance, aligning security roadmap with business objectives.• Established an AI Governance Council and implemented tooling to secure internal AI usage and development, balancing innovation with protection.APPLICATION SECURITY & VULNERABILITY MANAGEMENT• Orchestrated a unique collaboration between two competing AppSec vendors to create a unified SDLC coverage solution. Result: Reduced addressable vulnerabilities by over 98% while protecting developer velocity.• Implemented Automated Threat & Vulnerability Management and Incident Response workflows to reduce Mean Time to Remediate (MTTR).INFRASTRUCTURE & OPERATIONS• Designed and deployed a Zero Trust Network Access (ZTNA) architecture, replacing legacy perimeter defenses.• Modernized the tech stack with CNAPP, EDR, ADR, APISec, and SIEM implementations.• Secured the Software Supply Chain and successfully automated DLP and IAM platforms to ensure data integrity and access control.COMPLIANCE & TRUST• Led the initiative to achieve SOC 2 compliance, directly enabling sales to close up-market enterprise deals.• Acted as the primary \"Trust Broker\" for Sales, participating in customer calls to validate security posture.

Education

• University of Montana

  Bachelor of Science - BS

Skills

• Firewalls
• Cloud Computing
• Iaas
• Linux Kvm
• Enterprise Software
• Docker
• Computer Networking
• Flannel
• Load Balancing
• Nx-Os
• Mysql
• Saas
• Nomad
• Consul
• Ansible
• Calico
• Istio
• Linux System Administration
• Paas
• Elk
• Kubernetes
• F5 Bigip
• Cisco Asa
• Dns