Christian Ciliberti

LIBERTY MUTUAL INSURANCE – Miami, FL                                                            April 2018 – Present 

Cybersecurity Director

• Directed global cybersecurity initiatives across international markets, leading high-performing teams across Europe, Latin America, and Asia aligning technology strategies with business objectives, drive risk reduction, and strengthen enterprise resilience.
• Led a global team of thirty-two Cybersecurity Analysts and Engineers across Europe and Latin America, fostering innovation and professional growth through regular coaching, development plans, and quarterly performance reviews.
• Represented Cybersecurity in executive governance, risk, and regulatory forums, including steering committees, regulatory exams, RFPs, and due-diligence reviews and ensuring transparency and enterprise audit readiness (NIST CSF, GDPR, NYDFS, DORA, SOC 2).
• Reduced enterprise reporting workload by 90% across 8 business units through NIST CSF alignment and automated Power BI dashboards, delivering real-time KPIs, KRIs, MTTR, and trend analytics that strengthened executive visibility and enabled data-driven prioritization of initiatives.
• Provided Second Line of Defense oversight through regulator-ready and Operational Risk/CISO dashboards tracking remediation progress, KPIs, KRIs; enhancing transparency, accountability, and closure of regulatory findings.
• Established enterprise vendor risk framework integrating continuous posture scoring (SecurityScorecard), contractual security clauses, and quarterly assurance reviews.
• Managed SLAs for security operations, reducing out-of-SLA vulnerabilities from 40% to 2% in 10 months via dashboards, reviews, and automation while extending SLA governance to incident response and investigations.
• Defined and executed the enterprise monitoring and threat-detection strategy integrating Splunk SIEM, DLP, and SOC operations, advancing Agile/Kanban detection-engineering sprints to enhance visibility, automation, and response effectiveness.
• Led Incident Response (IR) operations, coordinating cross-functional containment, eradication, and recovery efforts; developed and maintained IR playbooks, conducted post-incident reviews, and validated controls through yearly tabletop exercises.
• Launched a Security Champion Program and AppSec training program (OWASP Top 10) to enhance developer engagement and remediation rates; formalized AI/ML governance and partnered with Engineering and SOC to embed security-by-design into AI pipelines, validate controls through Red Team testing, and ensure regulatory readiness.
• Partnered with Product, Program Management, and PMO leaders to integrate security into design roadmaps and apply formal Change Control governance, ensuring scope discipline and proactive risk identification across global initiatives.
• Delivered the security services roadmap (i.e., application security, vulnerability remediation, and incident response), prioritized through a risk-based prioritization framework and resource allocation to align initiatives with business objectives and regulatory priorities.
• Reported on product security posture through KPI/KRI dashboards and risk scorecards linked to executive and regulatory objectives.
• Coordinated annual penetration testing programs and validated results with SOC and Red Team functions, delivering executive-level reporting to strengthen organizational resilience and overall security posture.
• Achieved enterprise-wide adherence to data protection and privacy controls, ensuring compliance with U.S. regulations, EU GDPR, and customer contractual requirements.
• Hosted “Ask Me Anything” sessions to foster transparency, share cybersecurity insights, and promote a culture of open dialogue.
• Partnered with Talent and L&D teams to deliver enterprise cybersecurity awareness programs via LMS, lead Cybersecurity Awareness Month campaigns, and run quarterly Proofpoint phishing simulations, achieving 100% training completion and measurable improvement in phishing resilience through data-driven content refinement.
• Partnered with Audit, Compliance, and Technology to automate control validation and embed a continuous improvement program enhancing GRC maturity by integrating lessons learned and risk trends into evolving policies, training, and control frameworks.

LIBERTY MUTUAL INSURANCE – Miami, FL                                                           April 2013 – April 2018

IT Security Project Manager

• Directed enterprise IT security initiatives across Europe and Latin America, leading programs from design through execution to align strategies with business goals, ensuring timely delivery, ensure regulatory compliance, and strengthen global security resilience.
• Managed cybersecurity budget, optimizing vendor spend and redirecting savings to automation and training initiatives.
• Represented Cybersecurity in external due diligence reviews and RFP responses, providing control documentation, audit evidence, and compliance assurance that accelerated client onboarding and contract approvals.
• Developed and implemented threat modeling and vulnerability management training programs for security professionals and developers, aligning technical practices with business objectives and strengthening the organization’s secure SDLC maturity.
• Conducted comprehensive data privacy and security reviews to ensure compliance with GDPR and global regulations.
• Implemented standardized security policies and controls across multiple regions, ensuring alignment with corporate standards, SOC 2, ISO 27001, and NIST CSF frameworks.
• Defined and enforced enterprise security architecture standards, leading initiatives to mitigate vulnerabilities, prevent breaches, and improve risk posture across on-premises and cloud environments.
• Provided strategic guidance and risk assessments for large-scale public cloud adoption, reducing exposure and accelerating secure migration.

LIBERTY MUTUAL INSURANCE – Boston, MA                                                                          January 2011 – April 2013

IT Audit Supervisor

• Managed and mentored audit staff while conducting risk-based IT audits across enterprise environments, driving continuous improvement, performance development, and professional growth.
• Oversaw periodic control effectiveness testing across infrastructure, cloud, and application environments to validate risk mitigation and ensure regulatory readiness.
• Led internal and external IT and compliance audits, overseeing evidence collection, remediation tracking, and coordination with auditors to maintain certifications and ensure compliance with GDPR, NYDFS, SOX, and NIST CSF frameworks.
• Acted as Information Security SME during audit engagements, participated in walkthrough meetings, and coordinated evidence preparation and submission to internal and external auditors.
• Coordinated audit planning with operational and IT leaders to align objectives with business strategy and regulatory expectations.
• Performed detailed control testing across diverse platforms, enhancing internal control effectiveness and overall risk management.

LIBERTY MUTUAL INSURANCE – Boston, MA                                                                  July 2008 – January 2011

Senior IT Auditor

Planned and executed IT General Controls audits for international subsidiaries, collaborating with external auditors on certification reviews to strengthen internal controls and risk management practices. Conducted integrated and technical IT audits across infrastructure, applications, and databases to ensure compliance and reinforce technology controls and risk governance across enterprise environments.

STATE STREET CORPORATION – Boston, MA                                                                February 2006 – July 2008

IT Auditor

Performed SOX and ITGC control testing across global financial systems, documenting evidence, validating control effectiveness, and contributing to continuous improvement in audit readiness and control maturity. Developed and implemented standardized procedures aligning corporate policies with audit requirements, enhancing overall governance effectiveness and compliance consistency.

EF EDUCATION CENTER – Boston, MA                                                                       February 2002 – January 2005

Sr. Systems Engineer

Led hardware and software deployment and standardization across global server and desktop environments, improving consistency, reliability, and performance. This early experience in global IT operations established my grounding in technology governance, system integration, and service delivery; skills that allowed me to evolve into cybersecurity, risk, and regulatory assurance.

HULT International Business School – Cambridge, MA - Master of Business Administration (MBA)

Universidad Católica de Córdoba – Argentina - Bachelor’s degree in Systems Engineering

Certified Information Systems Auditor (CISA)

CISM – Certified Information Security Manager (in progress)