Luke Westbrook

At European Wax Center, I built and matured enterprise cybersecurity, digital governance, and privacy capabilities for a NASDAQ-governed franchise platform serving 1,100+ locations, 10M+ customers, and approximately $950M in annual revenue.

I restored security operations after an enterprise-wide ransomware incident, reducing daily alerts by roughly 97% and decommissioning more than 80 unnecessary or unpatchable virtual servers. I also consolidated five fragmented security functions into a single MSSP, reduced annual cybersecurity spend by $1.2M, and sustained zero undiscovered critical or high vulnerabilities for three years.

I lead privacy, consent, AI governance, quality assurance, vendor risk, and regulatory compliance initiatives. I rebuilt Google Tag Manager architecture across 5,300+ tags, closed a customer privacy and consent gap within 10 weeks, and established controls for GPT, Claude, and Microsoft Copilot.

Earlier, I led incident response, threat hunting, vulnerability management, forensic investigations, and data loss prevention in managed services, banking, and credit union environments. I partner with executive leaders and boards to align cybersecurity, compliance, and business objectives across SOX, NIST, ISO 27001, and SOC 2.