10 CISOs in Banking
Bank of America, Santander and Türkiye İş Bankası CISOs sit alongside security chiefs at KeyBank, Bank OZK, Apple Bank, Flushing Bank and three other banks in this group. Three have held the CISO title at two different banks, and one was CISO of the US Capitol Police. A bank or credit union planning its security program, budget and board reporting, or a vendor selling security tools to banks, can talk with someone whose institution looks like theirs.
Professionals to explore
Anthony Scarola
LinkedInExperience: EVP, Chief Information Security Officer · Apple Bank
For a small-team view, Anthony Scarola serves as enterprise security executive for a $19B regional bank as EVP, Chief Information Security Officer at Apple Bank since July 2025, leading a 10-person information security team across 12 program domains and overseeing the security budget and vendor portfolio. Anthony was SVP, IT GRC Director at Apple Bank (2020-2025), Security Consulting Senior Manager at Accenture (2018-2019) and VP, IT Governance, Risk and Compliance Manager at Fifth Third Bank (2016-2018).
Is this you? Claim your profile and get paid for calls.
Emrah Duran
LinkedInExperience: Chief Information Security Officer (CISO) & Head of Information Security · Türkiye İş Bankası
At Türkiye İş Bankası, described as the largest private bank of Turkiye, Emrah Duran has been Chief Information Security Officer (CISO) & Head of Information Security since April 2024. Earlier roles at the bank were Information Security & IS Risk Management Unit Manager (2022-2024), Information Security & Data Protection Unit Manager (2021-2022), Information Security Manager (2017-2021) and Senior Information Security Architect (2014-2017).
Is this you? Claim your profile and get paid for calls.
Hazel Diez Castaño
LinkedInExperience: Global Chief Information Security Officer · Santander
Governance, risk and compliance questions suit Hazel Diez Castaño, Global Chief Information Security Officer at Santander since June 2023, in Madrid. Other Santander roles were Global Head of Cyber GRC & CISO Central Services (2021-2023) and CISO Central Services & Head of IT SOX (2020-2021), alongside Chief Information Security Officer at Santander Digital Services (2018-2021), after Global CISO at Dufry (2017-2018).
Is this you? Claim your profile and get paid for calls.
James OBrien, CISSP, CISA
LinkedInExperience: Chief Information Security Officer · Banc of California
Chief Information Security Officer at Banc of California since December 2025, James OBrien, CISSP, CISA was Deputy Chief Information Security Officer at First Republic (2013-2025) and Chief Information Security Officer at East West Bank (2007-2013), and held Operations Manager and Software Tester Program Manager roles at the Federal Home Loan Bank of Chicago (2000-2007).
Is this you? Claim your profile and get paid for calls.
Jeffrey Evans
LinkedInExperience: Chief Information Security Officer · Bank OZK
Reporting to the Chief Risk Officer, Jeffrey Evans is CISO for a $40B+ publicly traded financial institution, responsible for cybersecurity, cyber fraud risk, data privacy, third-party risk and AI governance programs with direct Board engagement. Chief Information Security Officer at Bank OZK since June 2022, Jeffrey was also Director of Information Security (2021-2022), Information Systems Security Officer (2019-2021) and Third Party Risk Officer (2018-2019) there.
Is this you? Claim your profile and get paid for calls.
Kristopher Fador
LinkedInExperience: Chief Information Security Officer · Bank of America
Cyber Security Defense is the function Kristopher Fador leads as Chief Information Security Officer at Bank of America since April 2023, after Deputy CISO and Head of Cyber Security Operations (2022-2023), Cyber Security Defense Executive (2019-2022) and Business Information Security Officer (2014-2019) there. Kristopher sits on the FS-ISAC Board of Directors and chairs the bank's Women in Technology and Operations group, a fit for cyber defense and security operations questions.
Is this you? Claim your profile and get paid for calls.
Lance Murray, CISA, CRISC
LinkedInExperience: Chief Information Security Officer · First Financial Bank
Lance Murray, CISA, CRISC has held the CISO title twice, at Fifth Third Bank (2009-2013) and at First Financial Bank since July 2024. In between, Lance was Senior Vice President, Technology & Security Business Controls at Fifth Third Bank (2015-2017), and Vice President, Head of Information Security Risk Oversight (2017-2019) and Senior Vice President - Head of Technology & Security Risk Oversight (2019-2023) at U.S. Bank, a fit for risk oversight questions.
Is this you? Claim your profile and get paid for calls.
Nick Schappacher
LinkedInExperience: Chief Information Security Officer · KeyBank
KeyBank named Nick Schappacher Chief Information Security Officer in April 2026. Nick's other KeyBank roles were SVP & Deputy CISO - Head of Corporate Information Security (2023-2026), SVP & Deputy CISO - Head of Information Security Governance (2021-2023), SVP & Senior Director - Head of Cybersecurity and Technology Risk Oversight (2016-2021) and VP - Senior Technology Audit Strategist (2011-2013), useful for security governance and audit questions.
Is this you? Claim your profile and get paid for calls.
Richard White, PhD
LinkedInExperience: SVP & Chief Information Security Officer · Flushing Bank
SVP & Chief Information Security Officer at Flushing Bank since August 2018, Richard White, PhD oversees and coordinates security efforts across the enterprise. Richard was Managing Director at Barracuda SKOUT Managed XDR (2013-2018), Chief Information Security Officer at the US Capitol Police (2009-2013) and Technical Director Associate at Booz Allen Hamilton (2004-2009), and teaches as an Adjunct Associate Professor at University of Maryland Global Campus.
Is this you? Claim your profile and get paid for calls.
Vivin Varghese
LinkedInExperience: Former EVP, Chief Information Security Officer · Customers Bank
Vivin Varghese has been Chief Information Security Officer at Provident Bank since August 2024 and was EVP, Chief Information Security Officer (2022-2024), SVP, Deputy CISO (2021-2022) and Vice President of Digital Compliance and Architecture (2019-2024) at Customers Bank. Vivin cites over 16 years in cybersecurity across financial services, government and higher education, and can compare the CISO role at two banks.
Is this you? Claim your profile and get paid for calls.
Choose the right perspective
For a global bank's view, ask Kristopher Fador or Hazel Diez Castaño; Emrah Duran covers a large bank outside the US and EU. Questions on US bank security programs fit Jeffrey Evans, Nick Schappacher, Anthony Scarola, Richard White, PhD or Lance Murray, CISA, CRISC, and Vivin Varghese or James OBrien, CISSP, CISA can compare security at two banks they have worked for.
Questions to take into the conversation
- 01How does a regional bank's CISO decide what to build in-house and what to buy from security vendors with a small team?
- 02What do bank examiners and the board most want to see in a CISO's cyber risk reporting?
- 03How should a bank's security team handle third-party and fintech partner risk alongside fraud prevention?
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.