Tom C.

About Tom C.

I am an accomplished CISO with a proven track record of success in the information security industry. With over 25 years of experience, I possess a deep understanding of developing and implementing robust processes, policies, and infrastructures. Throughout my career, I have played a pivotal role in facilitating the security and compliance measures necessary for high-growth startups and public companies to achieve successful IPOs.What sets me apart is my ability to think strategically and envision the broader security landscape. I recognize that security solutions cannot be one-size-fits-all; they must be tailored to meet each organization\'s unique requirements. Drawing on my wealth of experience and expertise, I conceptualize and execute solutions that not only bolster security but also fuel business growth.My commitment lies in establishing security processes that mitigate risks, ensure regulatory compliance, and empower organizations to embrace new opportunities and technologies. By leveraging my skills, I enable businesses to navigate the evolving security landscape while capitalizing on emerging trends.

Experience

1. Chief Information Security Officer

   Twin Health

   Apr 2022 — Present · NY, US

   As the Chief Information Security Officer at Twin Health, I oversee a multifaceted role encompassing global risk and compliance, IT, security program management, leadership duties, and client management. Global Risk and Compliance - proactively identify, assess, and mitigate risks, spearheading certifications such as ISO 27001, HITRUST CSF E1, and SOC 2 Type 1 and 2, while also developing and maintaining information security policies and procedures. Security Program Management - architected and implemented comprehensive security strategies, develop incident response protocols, and lead initiatives like penetration testing, vulnerability scanning, and third-party vendor risk management. Leadership - mentoring teams, ensuring cross collaboration between, IT, engineering, and security teams, and establishing metrics for program effectiveness. Working directly with health plans and enterprise customers, managing security reviews, and developing customer-facing security literature. Overall, I ensure a culture of security awareness, continuous improvement, and client satisfaction across the organization.

Education

• New Horizons

  Certification, Microsoft/Cisco

  2002 — 2003