Large Enterprise Finalists

John Byun is the Chief Information Security Officer for Sephora North America, where he leads all cybersecurity operations and strategy. Known for challenging conventional security orthodoxy, he champions a forward-looking approach built for a rapidly evolving threat landscape, embracing AI-driven innovation over legacy best practices. His leadership reflects a conviction that security must evolve as fast as the technology and risks it defends against.

One of our proudest achievements has been transforming our cybersecurity program from a relatively immature state into the most mature and forward-thinking across LVMH, outpacing over 40 other CISOs in just a few years. We have consistently led the group in adopting and implementing cutting-edge technologies, including passwordless authentication via biometrics and device trust, ransomware resilience, Network Detection & Response, CWPP, CSPM, API security, CAASM, PAM, automated penetration testing, SaaS security, and next-generation bot protection. As a result, other brands across LVMH regularly turn to us for strategic guidance on developing and strengthening their own cybersecurity programs.

Rick Orloff is Vice President and Chief Information Security Officer at Everpure (formerly Pure Storage), where he leads global cybersecurity, risk management, and governance initiatives. A seasoned executive with leadership experience at Apple, eBay, and Lam Research, Rick is known for building forward-looking security programs that anticipate emerging risks while enabling innovation. He has held U.S. government Top Secret/Sensitive Compartmented Information (TS/SCI) clearances and is a licensed California private investigator.

At Everpure, we transformed cybersecurity from a traditional protection function into a strategic enterprise risk and resilience capability. By unifying cybersecurity, resilience, governance, product security, and customer trust under a single vision, we strengthened the company’s ability to innovate securely while reducing enterprise risk. Our business-first approach has accelerated AI adoption, improved resilience, enhanced customer confidence, and positioned security as a competitive advantage. The greatest achievement has been building a culture where security enables innovation, resilience protects the business, and trust drives long-term growth.

Amy Steagall is the Stanford University, Chief Information Security Officer, where she leads the Information Security Office and advances practical, balanced cybersecurity governance. She oversees university-wide efforts to protect computing and information resources, manage risk, and support compliance with laws, regulations, and policies. An Air Force veteran with 25 years of service, Amy joined Stanford in 2020. She holds a BS in Cybersecurity Management & Policy and an MS in Cybersecurity Law from University of Maryland.

Under my leadership, Stanford’s Information Security Office advanced cybersecurity and regulatory readiness through scalable, federally compliant research environments and modernized governance aligned with NIST. We strengthened email security for 60,000+ users, significantly reducing business email compromise risk, and reduced institutional exposure through the launch of Minimum Web Standards. I led Stanford’s response to the evolving AI landscape by establishing a cross-functional governance model with tiered risk frameworks and embedded data protection across research and teaching. Additionally, we fostered a unified, high-trust “One Stanford” culture of cyber resilience through collaborative incident response initiatives, including executive simulations and enhanced response capabilities.

Timothy Torres is Chief Security Officer at TriNet and serves as a dual-role technology executive, leading security and product engineering, directly enabling customer trust and business growth. As Chief Security Officer, Timothy is responsible for cybersecurity, product security, business resilience, crisis management, and physical security and safety. Timothy has 25+ years of experience building and scaling security programs for Fortune 500 companies. Timothy serves on multiple boards and advises emerging technology and security startups.

We’ve redefined security from a control function into a platform for trust, resilience, and growth. We consolidated 15 security tools into an integrated platform, helping reduce mean time to detect by 40%, security incidents by 30%, and technology costs by 25%. We applied our AI security engineering talent beyond security to help build customer-facing innovations, including AI-driven Bundle Selection and Census-to-Quote capabilities that significantly reduced proposal turnaround times. Together, these accomplishments demonstrate the team’s broader impact: making TriNet more difficult to compromise, faster to recover, more efficient to operate, and better positioned to innovate and grow while maintaining customer trust.