Modern CISO Network: Board Book

Mark Gibaldi is a strong executive leader with over three decades of deep technology and cybersecurity experience. Possessing over 20 years of combined experience in CISO and Chief Information Officer (CIO) roles in both fast-growth startups and large multi-billion-dollar international companies, Mark guides complex organizations to identify enterprise risks and develop cross-functional plans to successfully mitigate them.

Mark was an early champion and promoter of a risk management based-approach to cybersecurity. This includes managing cybersecurity as a business risk and helping companies to understand and articulate their own risk appetite. Mark has held the executive role as CISO at GMAC, Ally Bank, Travelport, Linq3, and Insight Global, where he is currently employed. As CISO at Insight Global, Mark was brought in for the same purpose that brought him into GMAC and Travelport — to take a traditional cybersecurity function and transform it into a world class cybersecurity and risk team. Mark led Travelport’s cybersecurity and risk team to being the first company in their industry to achieve ISO 27001 certification. By the end of his first year at Insight Global, Mark built a program that Bitsight scores as the highest scored cybersecurity and risk program in Insight Global’s industry.

Mark has advised boards of directors at large and small companies, ranging from an internationally based NYSE-listed public company to a privately held tech startup. His breadth of experience covers the tech industry and more traditional businesses where managing technology risks is essential to survival. Mark has served as a CISO since the emergence of cybersecurity as a distinct and separate function from information technology. Before cybersecurity was an independent discipline, Mark had executive roles as a CIO, including positions at an innovative medical services company and a top five Microsoft cybersecurity partner.

Mark’s career began working with the schools of criminology and computer science at The Ohio State University to create a custom program of study in computer security. His early career demonstrated a natural technology talent that landed him positions with Chemical Abstracts and AT&T, before moving into the banking industry to help the migration from mainframes and physical cash letter reconciliation to microprocessor-based services and same day cash letter reconciliation.