Paul Falor

Accenture · Atlanta, GA

• Lead the Secure, Responsible AI & Data Protection practice across the Americas (US, Canada, and LATAM), helping enterprises adopt AI safely while protecting the data underneath.
• Advise C-suite, CISO, and CDO clients on Security for AI, AI for Security, and Data Protection, translating fast-moving technical risk into business-aligned roadmaps.
• Drive growth across a rapidly expanding practice spanning AI governance and guardrails, AI-augmented security operations, and data protection.

North Highland · Atlanta, GA

• Led global technology operations across 5 countries and time zones, overseeing security, compliance, product development, infrastructure, data & analytics, and enterprise applications.
• Established global secure digital core spanning cloud, network, data, and platform security. Reduced MTTD by 75%, MTTR by 60%, decreased average vulnerability age from 45 to 12 days, and achieved 99% critical patch compliance.
• Led multi-year digital transformation, replacing 19 legacy systems with comprehensive ERP, HRIS, PSA, FIN, and CRM implementation.
• Led technology due diligence and post-deal integration for 6 acquisitions, creating a repeatable M&A playbook to execute at scale.
• Built and led high-performing technology team with 86% engagement scores, consistently 15% above organizational average. Reduced attrition by 40%.
• Championed AI-assisted product development methodology, reducing cost and time to market by over 90%.
• Created comprehensive risk and compliance program aligned with ISO27001, HITRUST, HIPAA, GDPR, and UK CyberEssentials. Achieved certification on first audit with zero critical findings.
• Executed full-scale cloud migration, reducing TCO by 30%. Architected near real-time disaster recovery, achieving 99.95% uptime and reducing RTO from 48 hours to 4 hours.

Global Payments · Atlanta, GA

• Led the Threat & Vulnerability Management (TVM) program for one of the world's largest payment processors, transforming cyber risks into actionable data-driven insights.
• Built and managed high-performing security teams, including vulnerability analysts, application security assessors, penetration testers, and data loss prevention specialists.
• Developed a robust governance framework with policies, standards, and procedures to ensure regulatory compliance with PCI-DSS and SOC2 guidelines.
• Optimized security operations by implementing advanced vulnerability assessment methodologies. Reduced time to remediate by 87% and time to detect by 91%.
• Served as a strategic security advisor, integrating security best practices into all phases of software development lifecycle.

Truist · Atlanta, GA

• Led end-to-end technology audit engagements, including planning, scoping, risk assessment, control testing, results validation, and reporting.
• Served as the primary liaison and trusted advisor to Truist's Technology & Risk teams, strengthening collaboration and risk mitigation strategies.
• Provided strategic technology audit insights to executive leadership, leveraging prior security leadership experience and industry best practices.
• Engaged with technology leadership in steering committees, project meetings, and strategic planning sessions.
• Conducted quarterly enterprise risk assessments to identify emerging threats and inform the IT audit roadmap.

TRX · Atlanta, GA

• Established the first Information Security program for a leading SaaS travel provider, building a strong security foundation to protect global technology assets.
• Led a team of cybersecurity professionals safeguarding critical information assets for a global technology hosting company.
• Owned and maintained compliance programs, including PCI-DSS and NIST SP 800-53.
• Designed and implemented an enterprise Threat & Vulnerability Management program, enhancing risk detection, mitigation, and security posture.
• Served as the primary security liaison for customers and conducted vendor security assessments.

KPMG · Atlanta, GA

• Conducted and managed internal and external vulnerability assessments and penetration testing, leveraging both manual and automated tools.
• Supported compliance initiatives for PCI-DSS, HIPAA, and ISO 17799, driving readiness assessments and remediation efforts.
• Developed and deployed enterprise-wide Security Policies and Procedures, enhancing governance and security best practices.
• Led strategic Identity and Access Management (IAM) planning and implementation.
• Provided subject matter expertise for Security and Logical Access controls in Financial Statement and SOX audits.