Todd Covert

About Todd Covert

Visionary CISO with a proven track record of aligning cybersecurity strategies with business objectives in the insurance industry. Currently safeguarding a $11 billion insurance organization, I bring a unique blend of technical expertise and business acumen. With an MBA complementing my CISSP and CDPSE certifications, I bridge the gap between complex security challenges and board-level strategic decisions. My approach focuses on:• Translating Cyber Risks into Business Impact: Adept at communicating technical concepts to non-technical stakeholders, ensuring informed decision-making at the highest levels.• Driving Innovation and Digital Transformation: Leveraging cutting-edge technologies to enhance security posture while enabling business growth.• Strategic Risk Management: Implementing robust governance frameworks that align with regulatory requirements and industry best practices.• Cultivating High-Performance Teams: Building and leading global, cross-functional teams that deliver results in high-pressure environments.As a recognized thought leader in cybersecurity, I speak at security leader conferences, sharing insights. My passion for mentoring extends beyond my organization, as I guide the next generation of security professionals in their career development.I\'m committed to fostering a culture of security awareness and resilience across organizations. My goal is to contribute my expertise to forward-thinking boards, helping to navigate the complex landscape of cyber risks in today\'s digital age.Specialties: Cybersecurity Strategy, Enterprise Risk Management, Regulatory Compliance, Digital Transformation, Board Advisory, Team Leadership, Strategic Planning, Vendor Management, Identity and Access Management

Experience

1. CISO at National General

   Allstate

   Jun 2021 — Present

   Advised senior executives and the Board of Directors on security program strategy, risk management, and regulatory compliance (Sarbanes-Oxley, HIPAA, PCI, GDPR), driving informed decision-making in a highly regulated industry.•Enhanced threat detection and incident response capabilities, reducing mean time to detect (MTTD) and mean time to respond (MTTR) to malicious events; aligned response processes with Privacy and Legal teams for comprehensive breach handling.•Cultivated a robust security culture by implementing collaborative training programs, including phishing simulations, streamlined phishing reporting, and secure coding workshops for developers, resulting in heightened organizational awareness and resilience.•Streamlined application security by integrating advanced testing and remediation protocols into the Software Development Lifecycle (SDLC), significantly improving application quality and reducing vulnerabilities.•Achieved a 93% reduction in system vulnerabilities enterprise-wide, mitigating cyber risks while ensuring 100% system availability and operational continuity.•Cybersecurity lead for M&A activities, including cybersecurity evaluation of prospective acquisitions and integration planning

Education

• Beloit College

  Masters of Arts in Teaching, Secondary Education

• Beloit College

  BA, Mathematics and Computer Science & Secondary Education

• Lake Forest Graduate School of Management

  MBA, Organizational Behavior Specialization

  2009 — 2011

Skills

• Security
• Enterprise Software
• Enterprise Architecture
• Resource Management
• Salesforce.com
• Data Center
• IT Governance
• Organizational Change
• Process Improvement
• Project Management
• Outsourcing
• Disaster Recovery
• Compliance
• Business Continuity
• Financial Management
• Vendor Management
• Change Leadership
• IT Management
• Operational Planning
• IT Strategy
• Coaching
• IT Outsourcing
• Business Alignment
• Change
• Hipaa
• Business Analysis
• Risk Management
• Team Management
• Team Leadership
• Strategic Planning
• Program Management
• IT Operations
• IT Service Management
• Security Audits
• Crm
• Itil
• Business Process Improvement
• Fda
• Organizational Development
• Sarbanes-Oxley