Open to opportunities

Eileen Bridges

@eileenbridges

Divisional CISO and cybersecurity risk executive focused on measurable enterprise risk reduction and board-ready governance.

United States

Message

What I'm looking for

I’m looking to lead business-aligned cybersecurity and risk programs where I can advise executives, mature governance and board reporting, strengthen third-party risk oversight, and drive measurable security outcomes—especially with secure-by-design and AI governance in regulated environments.

I’m a business-aligned cybersecurity and risk leader with 15+ years of experience driving global security strategy and risk reduction across financial services and healthcare. I’ve served for 20+ years in senior vice president and director-level leadership roles, including trusted DCISO and executive advisory work to CIOs and senior leadership.

In my current Divisional CISO role, I lead enterprise cybersecurity program execution across business and technology organizations—coordinating with GRC, Audit, Legal, Risk, and cyber domain teams to assess risk, prioritize remediation, and deliver regulatory and compliance commitments. I strengthen third-party and subsidiary risk oversight, standardize executive reporting with board-level risk metrics, and improve remediation accountability through governance and posture reporting.

Earlier, I led security and fraud strategy and identity modernization, building programs that mapped business priorities to NIST frameworks and advanced proactive, secure-by-design practices. Across the technology lifecycle and operations, I focus on data protection, incident response and security operations, vulnerability management, cloud and zero trust, and secure AI adoption with governance aligned to HIPAA, NIST, FFIEC, and related expectations.

Experience

Work history, roles, and key accomplishments

Current

SVP, BISO - Enterprise Sol

Current

Truist

Jan 2026 - Present (5 months)

Leads enterprise cybersecurity program execution across business and technology organizations, coordinating with GRC, Audit, Legal, Risk, and cyber domains to assess risk, prioritize remediation, and close regulatory and audit findings.

AI Governance Identity and Access Management (IAM)Cloud Security Vulnerability Management Incident Response Security Service Cataloging

Current

Divisional CISO (BISO)

Current

Truist Protection Services

Apr 2022 - Present (4 years 2 months)

Serves as Divisional CISO and Business Security Officer for Enterprise Solutions, advising CIOs and senior leaders on cyber risk, governance, and regulatory alignment across enterprise platforms and corporate functions.

cybersecurity risk management Executive Advisory Security Governance Regulatory Compliance NIST FFIEC Data Protection

Director, Cyber Risk (2LOD)

Bank Of America

Sep 2021 - Apr 2022 (7 months)

Provided independent second line of defense (2LOD) cybersecurity and risk oversight for Global Markets and Operational Technology, driving risk reduction and timely remediation.

2LOD Oversight Security Assessments Mobile Security Technology Lifecycle Risk RPA Security Compliance Remediation

Director, Security & Fraud Strategy

Bank Of America Merrill Lynch

Dec 2018 - Sep 2021 (2 years 9 months)

Led global cybersecurity and fraud strategy for Global Banking & Markets, aligning security priorities to business objectives to strengthen client trust and reduce risk.

Unified Entitlements Mobile Security Behavioral Biometrics API Security Client Cybersecurity Engagements

SVP, Mobile Security Architecture

Bank Of America

Jul 2015 - Dec 2018 (3 years 5 months)

Led enterprise mobile security architecture and engineering, developing and enforcing mobile security controls and standards aligned to NIST, FFIEC, OWASP, and ITU.

Secure Development FIDO And Biometrics Authentication Key Management Mobile App Risk Store (MARS)Mobile Threat Defense (MTD)OS App Signing Patching Controls Zero Day Response Mobile Governance Forums

Director, Mobile Security (Healthcare)

Aetna

Aug 2014 - Jul 2015 (11 months)

Built and led the enterprise mobile security program across 14 affiliates, partnering with third parties to ensure HIPAA/PHI compliance for healthcare requirements.

HIPAA compliance App Store And App Management Controls FIDO Aligned Authentication Mobile Security Emerging Technology Risk (IoT)

SVP, Mobile Security & Innovation

Bank Of America

Apr 2010 - Aug 2014 (4 years 4 months)

Led enterprise mobile security and innovation strategy, defining mobile security frameworks and strategies for emerging technologies including IoT and hybrid/native apps.

IoT And Hybrid Native App Risk Mobile Solutions Governance Vendor Carrier Partnership Oversight