Philip Morris International

Acting as the primary responsible for first line of defense functions, I am currently leading PMI’s global cybersecurity program and BAU security/ compliance services across Product/ Device and Operations business units (covering Research & Development, Product Innovation, Product Engineering, Quality Regulatory Affairs, Manufacturing Engineering Services, Manufacturing Solutions and Services, Supply Chain and Track & Trace Solutions).

I am currently overseeing the orchestration and delivery of a global Industrial/ OT cybersecurity program across all PMI factories, in alignment with ISA/IEC 62443 series of standards.

I am also in charge of designing and executing the cybersecurity program for Product to fortify “Device to Cloud” defense for smoke-free portfolio, which includes heated tobacco (IQOS), e-vapor, and oral smokeless products.

My current role, also acting as the global BISO and working closely with the CISO, is to bridge the gap between security and business interests, contributing to security awareness and overseeing the strategy implementation across all areas of the business units. As the cybersecurity champion for the business, my responsibilities span a wide range of activities (from project to BAU), including defining and prioritizing risk treatment strategy, developing capabilities across the cybersecurity value chain, orchestrating the execution of risk treatment activities, and embedding “security by design” across processes and technologies.

Global Head - Product and Operations Cybersecurity

HFS Research

Built and led the Digital Trust and Cybersecurity research practice. I successful managed to setup a global research team and delivered a wide range of initiatives for global service providers and enterprise clients. 

I don’t look at cybersecurity as a tech-only puzzle. My research agenda gravitates around two domains, augmentation and protection, and focuses on six core thematic research pillars: the remit and goals of the CISO in the hyperconnected world, reducing the IT risk and security skill gap, augmenting IT and security functions (across the 3 lines of defense) with intelligent solutions, trusting the cloud security environment, managing identity and access risks, and responding to modern security threats.

My custom research projects allowed me to work very closely with cybersecurity executives in Global 2000 enterprises. The goal of such projects was to provide data-driven analysis and strategic recommendations in areas such as ransomware, zero trust, digital identity, next generation SOC, cyber risk quantification, cloud security, Security-as-a-Service (SECaaS) models, GRC, Cyber Ranges, and security automation and orchestration.

Vice President & Practice Leader - Digital Trust & Cybersecurity/ Applied Automation

I was part of the Core Tech Strategy & Transformation Leadership Team in the capacity of Senior Director. Working closely with the CISO leadership team, my key objective was to build/design/operate a new global Cybersecurity and Control Governance function aimed at managing and governing cybersecurity risks across GSK corporate and business-unit specific areas.

Led the design, build and deployment of a global environment to manage privileged access across IT and OT environments (supported by CyberArk, SailPoint, Splunk and Imperva solutions).

Led the deployment of new breed of managed security services (looking beyond cybersecurity-centric services, delivered through traditional MSSP models, and deploying a more evolutionary model that unifies cybersecurity and compliance “by design”).

Designed the Cybersecurity Target Operating Architecture and Model for Haleon, the new consumer healthcare company.

Led the global Security Governance program with an “automation-first” mindset. I managed the deployment of advanced automation and monitoring mechanisms via different technological enablers (dedicated off-the-shelf solutions, custom build engine, RPA, Intelligent Automation, ML) to continuously monitor and measure the operating effectiveness of existing risks and controls.

Senior Director - Core Tech Strategy and Transformation

Director - Core Tech Strategy and Transformation

My role was to setup a global GRC function to manage risks and controls governing the most critical processes supported by global applications at GSK (such as the global ERP system, SAP, that supports all core operations from manufacturing to finance).  My initial goal was to support the deployment of security framework across all regions and implement a “GRC by design” template to ensure risk and compliance standardization across global and BU-specific IT and Business functions.

I have also led the design and deployment of one of the largest global Intelligent Automation programs across all GSK Business Units (including the implementation of a global Automation Centre of Excellence and enablement of regional scalable Automation Deliver Hubs).

Director - Global Applications and Development

Senior Manager - IT Advisory Services

Senior Manager - Risk Advisory Services

Manager - Technology Security and Risk Services

KPMG

Senior Consultant - IT Audit Services

Follow me if you are looking for an honest, pragmatic and above all funny perspective on technology, workplace, cybersecurity, automation and AI.

The statements, views, or opinions expressed in my LinkedIn profile and related articles represent my own views and not necessarily those of my employer.

Ralph Aboujaoude Diaz

I know exactly how the smart stuff gets hacked so I choose to live like it is 1995 on purpose.

#technology #cybersecurity

Follow me if you are looking for an honest, sarcastic and funny perspective on technology and workplace. Hit the 🔔 on my profile to get a notification for all my new posts.

Global Head - Digital & Tech Governance, Risk, and Compliance @ Haleon

By far one of the most accurate and universal depiction of a workplace environment.

#technology #workplace

Follow me if you are looking for an honest, sarcastic and funny perspective on technology and workplace. Hit the 🔔 on my profile to get a notification for all my new posts.

No alternative text description for this image

The man who invented autocorrect should burn in hello. Go duck yourself! 

#technology #workplace

Follow me if you are looking for an honest, sarcastic and funny perspective on technology and workplace. Hit the 🔔 on my profile to get a notification for all my new posts.

BravoTECH

- Design and build dashboards, reports and portals for users of the Cherwell Service Management platform.  Apply data analysis skills to translate general information on organizational workflows and processes into clearly defined indicators that serve to drive improved visibility and efficiency.

- Serve as software developer for the Cherwell platform. Design and build framework to support software and application requests via Service Catalog as well as general-purpose dynamically defined workflows.

Data Informatics Analyst II - Choctaw Nation of Oklahoma

Marriott Vacations Worldwide

Provided visionary leadership and strategic direction in implementing business processes within the framework of the Cherwell Service Management suite. Managed the process through all stages – requirements gathering, design, testing and final review and acceptance by the business owner. Served as business analyst, process designer and system administrator. Drove fundamental changes from static to dynamic, data-defined services.

- Greatly expanded a limited custom development framework previously unable to support highly complex business processes. Along with substantial framework improvements, also built first service instances showcasing new framework capabilities. These now serve as the guiding blueprints for ongoing service catalog development. 
- Established a Business Intelligence development framework that could support reconfiguration and basic enhancements by business stakeholders. Applied expertise to transform data into metrics, automating reports and dashboards as well as providing actionable insights to improve decision-making at all levels of the business. 
- Worked with key personnel to provide high-quality strategic leadership beyond the scope of my design responsibilities to drive resolution of application issues interfering with our team’s productivity. Made use of my unique perspectives as system developer, system administrator, and accidental DBA to identify sources of elusive performance bottlenecks.

Lead Service Designer, Cherwell Service Catalog

Interval International

Architected customized solutions and implemented best practices for a steadily growing suite of systems supporting service management, system monitoring, business intelligence and analytics, and workload automation. Leveraged the extensive and growing footprint of my administration domain into process leadership and subject matter expertise in several key business processes spread across multiple departments inside and outside of IT.

-	As responsibilities grew, developed a deep familiarity with a variety of applications and data sources supporting the organization, both through direct analysis and relationships with department’s subject matter experts.  Applied this knowledge to automate and streamline manual and repetitive staff onboarding, leave-of-absence, and termination processes with CA Service Management suite of applications and other systems.
-	Took on ownership of new CA Workload Automation Autosys platform and existing Spectrum monitoring software with minimal training. Worked closely with multiple business teams to analyze existing systems to migrate AS/400, Oracle, PeopleSoft, and Spring Batch jobs from built-in schedulers to Autosys.
-	Built strategic partnerships with stakeholders to align application capabilities and business priorities and facilitate mentorship and training of colleagues that showed potential as departmental application owners. Their support made it possible to juggle growing responsibilities as time went by.

IT System Administrator

How can I distill my professional self after 27 years of working in the Information Technology field, and what is most important for you to know about me? 

I am a dedicated, hard-working IT professional with multinational organization experience, most recently in the hospitality industry.  I am known for my ability to ensure application systems work effectively and efficiently. I get to the root cause of system issues to ensure they are resolved and make sure my systems support the broader organization.

My goal is to simplify these systems to make the jobs of those who depend on them easier, not more complicated. I am dedicated to understanding any obstacles preventing people from doing their jobs effectively and removing those obstacles as quickly as possible.

I love taking away drudgery--being able to simplify or automate some hated busy work that must be done. I love being able to help skilled and talented colleagues add useful time to their day to do what they truly want and need to do.

I take pride in cross-functional collaboration. I reach out to colleagues often to understand what they need from the system to do their work effectively. They trust that I will address their concerns with immediacy.

When all is said and done, I am often told, "The IT guy really gets it and has my back."  I'm there for my colleagues, so my colleagues can do what they do best.

taplio

The Battle

Ralph Aboujaoude Diaz

Luis Marquez Jr

Followers

Posts

Engagements

Likes

Performance ScoreRalph Aboujaoude Diaz's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Ralph Aboujaoude Diaz

Luis Marquez Jr

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Ralph Aboujaoude Diaz's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreRalph Aboujaoude Diaz's LinkedIn Performance