CV

Note: A detailed Curriculum Vitae (CV) is available upon request via email

Education

• Master of Science on Computer System Engineering, San Francisco Bay University, Freemont, California, USA 1998
• Coursework on Computer Science, University of California Berkeley, Berkeley, California, USA 1996
• Engineering Degree in Mechanical Engineering, University of Padua, Padova, Italy 1987

Work experience

• Avocado Systems, Remote, USA, November 2024 - Present, Field CISO, Lead for Financial Services and Product Security Engineering

• Vertex Inc, Remote, USA, September 2022 - October 2024, Head of Security in the SDLC (S-SDLC), Commercial Software Engineering Security Architect Lead

• JP Morgan Chase Payments, North America, Tampa, FL May 2020 - September 2022, Executive Director, Head of Security Architecture

• Citigroup, North America, Tampa, FL August 2016 - May 2020, Senior Vice President, Application Security Architect And Cloud Security Lead

• Citigroup EMEA, London, UK October 2011 - July 2016, Senior Vice President, Application Security Architecture Risk Lead

• Citigroup USA, Cincinnati, OH March 2007 - October 2011, Vice President, Senior Technology Information Security Officer

• Foundstone Inc, Atlanta, GA September 2005 - February 2007, Senior Software Security Consultant

• ExcellNet, Atlanta, GA April 2004 - April 2005, Software Security Architect

• VISA, Milwaukee, WI May 2003 - November 2003, Software Application Security Development Consultant

• BridgeFex LLC, Atlanta, GA January 2003 - April 2003, M&A Consultant

• EWA, Dulles, VA November 2001 - September 2002, Manager of European Security Operations

• ABB Inc, Rochester NY, April 2001- November 2001, Software Development Consultant

• IBM Internet Security Systems, Atlanta, GA August 1998 - April 2001, Security Tools Developer Lead

• ESG Consulting, Santa Clara, CA, February 1998 - August 1998, Software Development Consultant

• Sterling Software, Mountain View, CA, April 1997 - February 1998, Senior Software Development Engineer

• Lockheed Inc, Santa Clara, CA, June 1996 - April 1997, Software Development Engineer

Publications

Security Architecture In Theory and in Practice

Marco Morana, (2022). "August Issue ." CIO Magazine. 1(1).

Attention CISOs: There is NO Security Without A Risk Strategy

Marco Morana, (2013). "October Issue ." CSO Magazine

Enhancing the Development Life Cycle to Produce Secure Software

by KM Goertzel, Morana Marco (Reviewer) " October Issued Guideline from DHS " Marco Morana (Reviewer)

Security Flaws Identification And Technical Risk Analysis Through Threat Modelling

Marco Morana & Tony Ucedavelez (2008). Page 85 "Insecure Magazine." Issue 17. 1(3).

Producing Secure Software With Software Security Enhanced Processes

Marco Morana, (2008). "Issue no 16, page 57-67." Issue 16. 1(2).

Root Causes of Web Application Vulnerabilities

Marco Morana, (2008). "Issue 15 ." InSecure Magazine. 1(1).

Secure Code Reviews

Marco Morana, (2008). "Presentation at CSI Conference, San Diego, USA "

Building Security in the Software Development Life Cycle (SLDC), a business case

Marco Morana, (2006). "Presentation at BlackHat Conference, Las Vegas, USA " Turbo Talks. 1(3).