Alain Espinosa

Partner with senior leadership team in developing global strategy and managing cyber risk. Leads the cybersecurity operations team, directs the business resilience program, and oversees security awareness activities throughout the organization. Responsibilities include incident response, operational KPIs, disaster recovery, business continuity, vulnerability management, third-party risk management, and security awareness training/testing/communication. ◇ Enhanced Detection and Response Maturity: Expanded enterprise security monitoring coverage by over 40% and reduced mean time to detect (MTTD) and mean time to respond (MTTR) through the deployment of advanced analytics, playbooks, and automated containment workflows. ◇ Business Resilience Program Modernization: Designed and implemented a unified Business Continuity and Disaster Recovery (BC/DR) framework covering all critical functions and applications, enabling Upbound to achieve consistent resilience readiness metrics across all business units. ◇ Third-party risk management: Implemented program that reduced risk of third-party vendor related incidents (example: they are breached, and our data is exposed) impacting revenue from very high to moderate. ◇ Data governance program: With Privacy Principal, co-created program allowing company to classify and track critical data assets, reduce overall data loss risk from very high to moderate. Also addressed risk of data loss to breaches, misuse, and insider-threat, which can lead to regulatory (PCI & SOX) fines and reputational damage. ◇ Cybersecurity awareness program: Created successful and robust enterprise cybersecurity awareness program. The program, which includes education, phishing exercises, and awareness campaigns, helps reduce risk and meet regulatory requirements.

◆Board Director Experience◆ InfraGard National Members Alliance Board Director & Technology Committee Chair 2017-2020 P.E.T.A.L.S. Board Director (Chair) 2015-2020 InfraGard North Texas Members Alliance Board Director (Vice President & Secretary) 2014-2017 FBI Dallas Citizens Academy Alumni Association Board Director & Communications Committee Chair 2016-2018 ISSA North Texas Board Director (Secretary) 2015-2016 ◆Advisory Board Experience◆ Private Directors Association Dallas-Fort Worth Chapter President 2026-Present Cisco CISO Advisory Board Member 2024-Present CyberRisk Collaborative Leadership Board Member 2023-Present Security Advisor Alliance Advisory Board Member 2019-2025 HMG Strategy Advisory Board Member 2023-Present DallasCISO Advisory Board Founding Member 2023-2025 InfraGard North Texas Members Alliance Advisory Board Member 2017-2023 Gartner Dallas CISO Governing Body Member 2023-2025 Cyber Law Consortium Advisory Board Member 2017-2019 Strategic Cell Ministries International Advisory Board Member 2008-2020 ◆Committee & Advisory Panel Experience◆ Professional Associations of CISOs Chapter Advisor & Founding Member 2024-2025 Collin College Cybersecurity Advisory Committee 2020-2024 Lexus Advisory Board Panelist 2015-2023 Intego Advisory Panelist 2014-2017

◆Instrumental in building managed security services practice◆ Led client-facing engagements and developed/implemented internal operations programs. SELECTED ENGAGEMENTS $6 billion global real estate & supply chain logistics company ◇ Data governance: Helped company to reduce risk by conducting a comprehensive risk assessment of their data governance program and introducing enterprise-wide program control improvements to mitigate data loss and ensure compliance requirements were met for data privacy across multiple countries. $160 million city government in Canada ◇ Security infrastructure: Worked closely with executives in implementing continuous monitoring capabilities, assessing vulnerabilities & remediation, and advising them on security program best practices for reducing risk and securing critical city assets. Key Internal Operations Projects ◇ Security operations center (SOC): Created a new organization including staffing, technology stack, processes & procedures, and policies. Designed to monitor clients’ systems and ensure compliance with PCI, HIPAA, and other regulatory requirements. Provided rapid response to client incidents. ◇ Mentoring program: Championed a companywide mentoring program that increased employee satisfaction, engagement, and pathways to grow professionally within the company.

◆Facilitated strategy and program development for clients with significant security challenges enabling them to reach business and technical goals◆ Led client-facing engagements to strengthen cybersecurity capabilities and meet regulatory requirements. SELECTED ENGAGEMENTS $1 billion retailer: ◇ Regulatory compliance: Selected to lead project ensuring that a $1 billion retailer remediated gaps and meet regulatory (PCI) compliance in time to avoid shut down. Accomplished successfully by being embedded in the retailer’s headquarters daily and working closely with the security and IT teams. ◇ Process Improvement: Ensured that all security projects progressed according to plan by improving structure and accountability in the management process. National healthcare technology provider: ◇ Detection & Response Capability: Helped a leading national healthcare technology provider increase their detection and response capabilities by introducing a continuous monitoring platform that enabled them to protect client healthcare data (PHI). National insurance forensic engineering and investigation firm: ◇ Forensic Proficiency: Forged partnership resulting in increased capabilities of client to perform forensics on IoT devices and determine root cause of failures or malfunctions.