American International Group has announced that Rich Baich, formerly of Wells Fargo & Company, will be taking over as CISO later this month.
As of April 22, Baich’s title will be Senior Vice President, Chief Information Security Officer. Responsible for the firm’s global cybersecurity risk management program, he’ll be driving its information security strategy, and advising on information security risks associated with new technological projects.
“Rich is a recognized security leader with extensive expertise in information security, risk management, privacy and technology deployment,” said John Repko, CIO at AIG, to whom Baich will be reporting in his new role.
“His contributions, given his global experience and track record of innovation and business collaboration, will be highly valued as we continue to develop and implement information security strategies designed to enhance the security of AIG and its policy-holders.”
Baich joins the company from Wells Fargo, where he has been CISO since 2012. Prior to Wells Fargo, his background includes a 20+ year military career specialising in information operations, moving on to primarily infosec consulting/advisory roles, including leading Deloitte & Touche’s Global Cyber Threat and Vulnerability Management practice, and serving as Senior Director for Professional Services at Network Associates (now McAfee).
He continues to advise on security outside Wells Fargo and AIG, serving on the U.S. National Infrastructure Advisory Council, FEMA’s National Advisory Council (as its cybersecurity expert), the Strategic Advisory Board of the International Consortium of Minority Cybersecurity Professionals, and the Executive Board for the Banking Policy Institute BITS organization. He is also the Intelligence Program Advisor for the Financial Systemic Analysis and Resiliency Center.
“AIG is a global, world-class company that is highly focused on technology, security and innovation,” said Baich. “I look forward to working with John and the global IT team, as well as the business leaders, to help support AIG’s business strategies while protecting the company from current and emerging cyber risks.”