Alex S.

Vice President, Cybersecurity Risk Management @ Ares Management

About

As the Vice President of Cybersecurity Risk Management within the Cyber GRC team at Ares Management, I lead the global cyber and technology risk management program and the cyber third-party risk management program within the global cyber team, driving strategic initiatives to strengthen security and ensure regulatory alignment. With extensive experience in Governance, Risk, and Compliance (GRC), I specialize in developing robust cyber risk frameworks aligned with standards like ISO 27001, SOC2, and NIST CSF. My IT advisory background and leadership in global organizations enable me to deliver pragmatic, value-driven solutions that balance risk and business objectives. Connect with me to discuss cybersecurity, GRC, or technology risk management!

Country

United States

City

New York

Industry

Wine & Spirits

Skill

Governance, Risk Management, and Compliance (GRC), SOC 2, ISO Standards, Risk Management, Critical Thinking, Microsoft 365 Security, Identity & Access Management (IAM), Board of Directors Reporting, Planview Enterprise, Third Party Risk Management (TPRM), Building Relationships, Risk Assessment, IT Audit, Sarbanes-Oxley Act, Financial Accounting, Social Media, Slack, Internal Audit, Internal Controls, Cloud Computing

Experience

Vice President, Cybersecurity Risk Management

Ares Management

2025-5 - Present · 1 yr 5 mos

New York, NY

Global Cyber Risk Director

Diageo

2023-4 - 2025-4 · 2 yrs 1 mo

New York, New York, United States

- Lead the development and execution of a global security risk management framework to strengthen the organization’s cyber resilience - Collaborate with cross-functional teams to align risk strategies with enterprise priorities and regulatory requirements - Drive key initiatives in security governance, compliance, and risk reporting to support organizational objectives

Senior Manager, Cyber Risk & Analysis

Capital One

2022-3 - 2023-3 · 1 yr 1 mo

New York, New York, United States

- Oversaw cybersecurity risk management processes across multiple business units, ensuring alignment with industry frameworks and regulatory expectations - Enhanced governance practices and led initiatives to improve organizational awareness of cyber threats - Partnered with stakeholders to manage risk assessments and implement effective mitigation strategies

Senior Manager, Technology Risk Management

Commonwealth Bank

2020-12 - 2022-2 · 1 yr 3 mos

Sydney, New South Wales, Australia

- Provided strategic guidance on technology and cybersecurity risks to senior leadership across key corporate functions - Led governance processes and risk assessments to ensure compliance with organizational frameworks and industry standards - Championed initiatives to improve risk culture and operational efficiency

Manager, Technology Risk Management

Commonwealth Bank

2019-11 - 2020-12 · 1 yr 2 mos

Sydney, New South Wales, Australia

- Managed technology risk profiles and control frameworks to support business objectives and regulatory compliance - Conducted risk analysis and advised on control enhancements to mitigate identified vulnerabilities - Collaborated with stakeholders to ensure alignment with enterprise risk management strategies.