Ronald Palermo

About Ronald Palermo

With over seven years as Chief Information Security Officer at Sphera, I lead the development and execution of the company’s Information Security Program. My role focuses on transitioning the security culture from reactive to proactive, supporting business growth through compliance initiatives like GDPR, and fostering customer trust via pre- and post-sales engagement. Through expertise in information security management, I ensure the implementation and maintenance of an Information Security Management System, empowering the organization to prioritize \"Privacy by Design.\" My commitment lies in aligning security initiatives with organizational objectives, enabling sustainable growth and compliance in an evolving regulatory landscape.

Experience

1. Chief Information Security Officer

   Sphera

   Sep 2018 — Present · Chicago, IL, US

   Senior Executive responsible for the development and execution of Sphera’s Information Security Program. Drove the transformation of the company\'s information security culture from being reactive to proactive. Served as the point of contact for customer security concerns both pre and post sales. Supported the firm’s business development process through customer audit and query responses. Enabled the business to implement \"Privacy by Design” by developing a compliance program for GDPR and other national/regional regulations. Developed several business cases to expand resources in line with company growth. Accountable for the implementation and maintenance of an Information Security Management System and subsequent ISO 27001 certification. Board & Executive Engagement: Regularly briefed board, audit committee, and other senior leadership on enterprise risk, compliance status, and incident readiness. Secured increased funding and executive alignment by translating complex security risks into business language.Business Enablement: Led ISO 27001 and SOC 2 certifications that enabled $300M+ in SaaS revenue growth and accelerated enterprise sales cycles.Risk Reduction: Reduced phishing susceptibility by 83%(30% → 5%) through targeted training, mitigating reputational and financial risk.M&A / Growth Support: Conducted cybersecurity due diligence for acquisitions, ensuring integration readiness and regulatory compliance across global markets.

Education

• Illinois Institute of Technology

  BS, Computer Science

  1992 — 1997

Skills

• Governance
• Vulnerability Management
• Business Process Improvement
• Infrastructure
• Information Technology
• Outsourcing
• Penetration Testing
• IT Management
• Risk Management
• Integration
• Computer Security
• Security Audits
• Firewalls
• Itil
• IT Strategy
• Vendor Management
• Consulting
• Pci Dss
• Leadership
• Vulnerability Assessment
• Information Security Management
• Analysis
• Security
• Enterprise Architecture
• Iso 27001
• Identity Management
• Process Improvement
• IT Audit
• Cissp
• Disaster Recovery
• Networking
• Information Security
• Business Continuity
• Management
• Network Security
• Strategy