Summary
Overview
Work History
Education
Skills
Websites
Certification
Presentations
Personal Information
Publications
Accomplishments
Languages
Timeline
Generic

STEPHEN SINGAM

SEATTLE,WA

Summary

Stephen Singam is a Chief Information Security Officer with proven experience in the Defense, Biopharmaceutical, Consulting, Technology Services, and Financial Services sectors, especially FinTechs. Stephen has had senior cybersecurity responsibilities at Salesforce.com (San Francisco), Commonwealth Bank of Australia (Sydney), The 21st Century Fox (Los Angeles), IBM Corp (New York and Singapore), Hewlett Packard (the Asia Pacific and Japan), Nokia (Helsinki, Finland), Guidehouse LLP (Washington DC) and cybersecurity start-up at Distil Networks (San Francisco), Versive (Seattle) TwoSense.ai (New York), and FinTech start-ups advisories at SingLife (Singapore), Bank Jago (Jakarta, Indonesia) and TribalCredit (San Francisco). He has built cybersecurity programs from the ground up at three FinTec startups (Bank Jago, Bank Amman, and Tribal Credit), which led to ISO 27001 certifications and PCI-DSS Level 1 Compliance. At Guidehouse LLP (formerly PwC's Public Sector), he was the Technical Program Manager at the United States Department of Defense (DoD)'s Credential Enterprise Solution & Services Program (ICEs2), serving the following agencies: US Air Force, US Army, US Marine Corps, and US Navy and the following services Defense Counterintelligence and Security Agency (DCSA), Defense Information System Agency (DISA), Defense Logistics Agency (DLA), Defense Threat Reduction Agency (DTRA), Missile Defense Agency (MDA), National Reconnaissance Office (NRO), White House Communications Agency (WHCA) and White House Military Office (WHMO). He holds a Secret Clearance from the Department of Defense (DoD). At the Department of Homeland Security (DHS), he was deployed as a Trusted CSO Advisory personnel conducting technical reviews, creating security advisory alerts, conducting technology risk management workshops, and guiding Cybersecurity and Infrastructure Security Agency (CISA)'s Federal Operational Cybersecurity Unified Strategy for the Fiscal Year 2021. At the 21st Century Fox, he created its first Anti-Piracy Standards and Intellectual Property (IP) Security Architecture for the most successful movie release of all time, James Cameron's Avatar - a $US3.8B asset encompassing the engagement of 60+ vendors worldwide with multiple technology platforms, legal requirements, and culture from the movie script to the theatrical release in December 2009. He has managed direct reports ranging from a team of 16 to 135 security personnel with $US5M to $US$50M annual budgets. He holds an MS in Management of Technology from the Wharton Business School & the School of Applied Science & Engineering. He is a Moore Fellow in Management of Technology at the University of Pennsylvania. Additional certifications are Certified Information Systems Security Professional (CISSP). He has been on the panels and presented at Tech ROI, New York Times Business-Innovation, Silicon Valley's ISACA Annual Meetings, RSA Conference, B-Sides, UK's KTN, and PwC's Data Privacy & Big Data. He presented 'ML Cybersecurity Programs & Emerging Audit Risks' - at the Federal Reserve Bank of San Francisco Audit Summit and 'Unmasking Chatbots: Hacking API.' B-Sides in Orlando, Florida. Moreover, Stephen is a founding member of the Cloud Security Alliance (CSA) and a certified trained professional in Artificial Intelligence Governance Professional (AIGP) by the International Association of Privacy Professionals (IAAP). He serves on the advisory boards for numerous AI Security startups, including one funded by the founders of OpenAI and Hugging Face. Director of Security with [Number] years of experience managing investigations, personnel matters and sensitive information and intelligence. Leads, maintains and improves operations and functions of security department while effectively managing crises in fast-paced environment. Thorough knowledge of advanced security systems, computerized access control, and security-related legislation and regulation.

Overview

26
26
years of professional experience
1
1
Certification

Work History

Chief Information Security Officer

TribalCredit

Chief Information Security Officer

Bank Jago

Chief Information Security Officer

DigitalResilient
04.2016 - Current
  • Providing continuous hands-on technical processes in monitoring security and privacy management, incident response planning, architecture reviews, policy reviews, vendor risk management, penetration & vulnerability management, and security technology assessments, as well as managing IT Operations and Cloud Site Reliability Engineering (SRE) that has led to PCI-DSS Level I Compliance

Management Consultant - Advanced Security Solutions

Guidehouse LLP
12.2019 - 08.2023
  • Managed the Department of Defence's ( DoD ) GRC for Credential Enterprise Solution & Services (ICEs2) for the US Air Force, US Army, US Marine Corps, and US Navy.

Chief Information Security Officer & Machine Learning Security Architect

Versive
04.2016 - 01.2020
  • Designed and GoToMarket strategies on Versive End Point Detection and Response (EDR), which eSentire acquired in 2020.

Associate Partner

IBM Global Security Services
04.2015 - 04.2016
  • Led Strategic Advisory & Remediation Program for Deutsche Bank Asset & Wealth Management for the Monetary Authority of Singapore Technology Risk Management (TRM) compliance mandate.

Chief Security Officer

Hewlett-Packard Security Services
08.2011 - 04.2015
  • Led the creation, implementation, and management of a diverse series of security strategies and innovative programs to reduce cybersecurity risk across business, social, and technology enterprises.

Head of Consumer Security and Innovations

Commonwealth Bank of Australia
04.2010 - 07.2011
  • Deployed Control Objectives for Information and Related Technologies ( COBIT) for IT governance and control to ensure security innovation was aligned with business objectives, regulatory compliance, and risk management.

Vice President of Content Security

Twenty-First Century Fox, Inc.
07.2008 - 04.2010
  • Responsible for worldwide Intellectual Property (IP) security; Digital Rights Management (DRM) and encryption technologies used across all platforms worldwide; developing and implementing an enterprise risk management program.

Senior Security Engineer/Director of Information Security

Salesforce.com
12.2005 - 07.2008
  • Developed and created a multi-year strategic plan for enterprise risk management.

Chief Security Information Officer and Principal Architect

The InfoSecurity Group Inc.
07.2002 - 12.2005
  • Developed, performed, and managed a comprehensive Information Security Risk Assessment methodology for a multimillion-dollar SDLC project for a large health insurance company, considering compliance with the Health Insurance Portability and Accountability Act (HIPAA) and Sarbanes-Oxley Act (SOX) Section 404.

IT Advisory Consultant

IBM Corporation
05.1998 - 07.2002
  • Led a four-member architecture team and conducted an entire life cycle B2B Demand Chain eCommerce implementation - analysis, design, coding, and implementation, including the front-end, middleware, and back-end processing for Sony Entertainment.

Education

MS in Management of Technology & Elected Moore Fellow in Management of Technology -

The University of Pennsylvania, the Wharton Business School, and the School of Engineering and Applied Science School
Philadelphia, PA

Certified in Economics & Policy Analysis and Risk Management - undefined

Harvard University
Cambridge, MA

BS in Biology with a minor in Chemistry - undefined

St. Mary College
Orchard Lake, MI

Skills

  • Vulnerability Assessment
  • Penetration Testing
  • Incident Response
  • Compliance Management
  • Intrusion Detection
  • Patch management
  • Disaster Recovery Planning
  • Information Governance
  • Application security
  • Team building
  • Analytical Thinking
  • Attention to Detail
  • Security metrics
  • Continuous Improvement
  • Active Listening
  • Risk Assessment
  • Security assurance
  • Organizational Skills
  • Teamwork and Collaboration
  • Adaptability
  • Data Security
  • Security Planning
  • Disaster Recovery
  • Data Encryption

Certification

Certified Information Systems Security Professional (CISSP)

Presentations

  • The Economic Impact of Malicious Bots, NG Security 2017, Austin, Texas
  • Banking Industry and API Security Breaches: A Lesson to be Learned, FS-ISAC European Summit 2017, Barcelona, Spain
  • Unmasking Chatbots: Hacking API, B-Sides Orlando 2017, Orlando, Florida
  • Securing a US$2.8B Digital Asset: The Movie - Avatar, RSA Conference 2017, Singapore
  • Building a Real-Time State Storage and Machine Learning Algorithm to Mitigate Advanced Persistent Threats (APTs), International Symposium on Big Data Management and Analytics - BIDMA 2017
  • Cyber Security 2017 - Track 3: Cyber Security in the Movie Industry, 2017 International Conference on Cyber Security and Protection of Digital Services, London, United Kingdom
  • ML Cybersecurity Programs & Emerging Audit Risks, Federal Reserve Bank of San Francisco Audit Summit, San Francisco, California
  • Overcoming Software Supply Chain Risks and Mitigation Strategies, Tech in Asia x Snyk Virtual Event

Personal Information

Title: CISSP

Publications

  • Technical Editor for the Cloud & Virtualization Security and Big Data Security for McGraw Hills' Information Security: The Complete Reference, 3rd Edition, McGraw Hills, February 22, 2013, 0071784357
  • Technical Reviewer for Real-World Cryptography, Manning Publications, October 15, 2021, 978161729671

Accomplishments

  • Achieved [Result] through effectively helping with [Task].
  • Collaborated with team of [Number] in the development of [Project name].
  • Resolved product issue through consumer testing.
  • Supervised team of [Number] staff members.
  • Documented and resolved [Issue] which led to [Results].

Languages

Tamil

Timeline

Management Consultant - Advanced Security Solutions

Guidehouse LLP
12.2019 - 08.2023

Chief Information Security Officer

DigitalResilient
04.2016 - Current

Chief Information Security Officer & Machine Learning Security Architect

Versive
04.2016 - 01.2020

Associate Partner

IBM Global Security Services
04.2015 - 04.2016

Chief Security Officer

Hewlett-Packard Security Services
08.2011 - 04.2015

Head of Consumer Security and Innovations

Commonwealth Bank of Australia
04.2010 - 07.2011

Vice President of Content Security

Twenty-First Century Fox, Inc.
07.2008 - 04.2010

Senior Security Engineer/Director of Information Security

Salesforce.com
12.2005 - 07.2008

Chief Security Information Officer and Principal Architect

The InfoSecurity Group Inc.
07.2002 - 12.2005

IT Advisory Consultant

IBM Corporation
05.1998 - 07.2002

Chief Information Security Officer

TribalCredit

Chief Information Security Officer

Bank Jago

MS in Management of Technology & Elected Moore Fellow in Management of Technology -

The University of Pennsylvania, the Wharton Business School, and the School of Engineering and Applied Science School

Certified in Economics & Policy Analysis and Risk Management - undefined

Harvard University

BS in Biology with a minor in Chemistry - undefined

St. Mary College
STEPHEN SINGAM