Large Corporate Finalists

Richard Chang is the Chief Information Security Officer (CISO) for California Water Service Group. He leads the company’s cybersecurity, risk management, compliance, security operations, and physical security programs, helping protect critical infrastructure and support reliable water service. Richard is passionate about building security-conscious cultures, developing high-performing teams, and empowering employees to serve as the organization’s first line of defense against cyber and physical threats.

I have championed a culture of security awareness across the organization. By delivering continuous cybersecurity education, phishing simulations, and targeted awareness campaigns, I helped transform employees from potential targets into an active line of defense—the company’s "human firewall." This people-first approach has strengthened security resilience, reduced organizational risk, and empowered employees at all levels to identify and report threats before they impact operations, helping protect critical infrastructure and support the reliable delivery of water service.

Nghia is SVP of Information Security & Compliance at QuinStreet, where he currently oversees the enterprise security strategy across various digital media platforms. With 23 years at the company across development, IT operations, and merger & acquisitions, he brings deep technical and business acumen to the security leadership role. His notable areas of expertise include advanced threat modeling, the implementation of security frameworks and products, vendor risk management, and incident response strategies.

Over 23 years at QuinStreet, I’ve built a security organization from scratch that now protects platforms serving millions of consumers annually. My team has maintained zero SOC 2 and SOX exceptions since inception, achieved a 96% completion score on industry frameworks (peer average 65-80%), and has never turned away a client due to security gaps. My commitment to developing talent is highlighted by the fact that many who started as juniors have successfully advanced to director, senior director, and VP roles, including two who have become ORBIE finalists. Supporting their growth is what truly drives me and indicator of success.

Prakash Kalaiah is Head of Security at Enphase Energy, where he built the company’s security program from the ground up, leading its first SOC 2 Type II certification and generating $500 million in new enterprise business. With 20+ years across Wells Fargo, Visa, Delta Dental, and Enphase, he has secured Banks, global payment, healthcare, and energy platforms, led major M&A security integrations, and pioneered AI governance frameworks for emerging enterprise risk.

Led security transformation at Enphase Energy, achieving SOC 2 Type II certification that unlocked new revenue streams and built customer trust. Enabled secure-by-design product rollouts, driving additional growth. Reduced Phishing/Smishing threats significantly through custom awareness programs and layered technical controls. Improved security maturity by 60% with Zero Trust, MFA, least privilege, and robust third-party risk management. Ensured 99.99% uptime via enhanced protocols and disaster recovery planning. Boosted user productivity by 25% through SSO, secure MFA, and automation. Integrated security into DevOps, cutting time-to-market by 35%, and maintained SOX compliance across all business units.

Chief Information Security Officer (CISO) with 20+ years of experience leading cybersecurity strategy, risk management, and incident response across government, research, and enterprise environments. Former cybersecurity leader at Lawrence Livermore National Laboratory (LLNL) and Hewlett-Packard (HP), with expertise in cyber defense, digital forensics, penetration testing, malware analysis, and secure software development. Passionate about advising emerging companies, building strong security cultures, and mentoring the next generation of cybersecurity professionals.

One of my proudest accomplishments has been building a cybersecurity program that’s recognized as a leader across the DOE complex. During my tenure, we’ve tripled our budget, invested in automation and modern security capabilities, and significantly reduced risk across the Laboratory. Just as important, we’ve worked hard to change how people view cybersecurity. A guiding principle throughout my leadership has been that we’re a partner, not a roadblock. By engaging early, understanding our customers’ needs, and helping them succeed securely, we’ve built stronger relationships, better security outcomes, and a program that supports the Laboratory’s mission.