Philippe Bourdon
Chief Information Officer (CIO) / Chief Information Security Officer (CISO)
Download PDF
PDF is generated from the same admin-managed data as this page.
Executive summary
Executive leader with equal depth across CIO and CISO mandates, open to CIO, CISO, or combined responsibilities based on business needs.
Public-company, CEO-reporting technology and security executive with 25+ years leading enterprise platforms, global operating models, and risk governance across $500M–$30B environments. Known for stabilizing complex organizations, modernizing infrastructure at scale, and building board-level trust through disciplined execution.
Selected outcomes
- Define and execute technology strategy tied to business priorities through multi-quarter roadmaps, architecture choices, and measurable delivery outcomes.
- Translate customer and regulatory expectations into practical controls and ways of working that fit the company's maturity and risk profile.
- Design and stand up ISMS programs and audit readiness for ISO 27001 and SOC 2 with clear control ownership and evidence.
- Modernize infrastructure and cloud platforms with reliability, scalability, and cost discipline built into day-to-day execution.
- Improve engineering delivery with practical SDLC, DevOps/SRE, release quality, and developer enablement practices.
- Strengthen resilience and security with incident response playbooks/tabletops, IAM hardening, monitoring/logging, and vulnerability management.
CIO / CISO focus
CIO
Enterprise Technology Strategy + Delivery
- Portfolio and roadmap planning tied to business outcomes, budget, and capacity
- Architecture and platform standards that improve reliability, scalability, and cost efficiency
- Execution cadence across product, engineering, and IT operations with clear ownership and metrics
CISO
Technology + Security Strategy + Executive Alignment
- Translate business strategy and customer commitments into integrated technology and security roadmaps
- Board/auditor/customer communication in plain language (posture, risk narratives, tradeoffs)
- Cross-functional decision framework across engineering, IT operations, security, and compliance with clear ownership
- ISO 27001-aligned ISMS design and implementation; SOC 2 readiness
Education
- Master's Degree, University of Pittsburgh
- Bachelor of Arts, Western Connecticut State University
- Leading & Managing Globally, Yale School of Management
Languages
- English (fluent)
- French (fluent)
Experience
Roles and delivery
Mastech Digital — Chief Information Officer / Chief Information Security Officer
2023 – Present · Pittsburgh, PA
Reporting to CEO · Org scope: 70 FTE global organization across infrastructure, engineering, and security · Budget: $11M annual operating budget
Own enterprise technology and security outcomes across infrastructure, engineering delivery, risk, and compliance in a multi-client service model.
- Directed enterprise operating-model redesign across IT, engineering, and security to improve execution cadence and accountability.
- Established board and audit reporting cadence with decision-ready technology investment, risk, and control maturity metrics.
- Achieved ISO 27001/27701, SOC 2 Type II, and GDPR alignment within 12 months through enterprise control redesign and evidence discipline.
C&S Wholesale Grocers — Vice President, IT Infrastructure
2018 – 2023 · Keene, NH
Reporting to CIO · Org scope: 230 FTE global organization across infrastructure, engineering, and security · Budget: $70M annual operating budget
Led enterprise infrastructure, cloud, and core platform operations for a $30B national grocery distribution business.
- Negotiated a $68M Google enterprise agreement and migrated 400+ applications (~90% of workloads) to GCP in 18 months.
- Managed a large annual IT operating budget while improving resilience and service continuity across 52 distribution centers.
- Modernized enterprise network and security architecture with a 60-firewall refresh and SD-WAN rollout delivered with zero downtime.
- Accountable for enterprise security architecture, network segmentation, and platform hardening across 52 distribution centers.
- Oversaw IAM, endpoint security, and vulnerability management programs within a $30B regulated supply-chain environment.
- Integrated security controls into large-scale cloud migration, ensuring compliance and risk alignment during transition of 400+ applications to GCP.
Survey Sampling International — VP of IT Infrastructure & Global Support
2013 – 2018 · Shelton, CT
Reporting to CIO · Org scope: 45 FTE global organization across infrastructure, engineering, and security · Budget: $8M annual operating budget
Directed global infrastructure, support, and security operations in a shared-services model spanning 30 international offices.
- Led global infrastructure and support operations across 30 international offices with standardized service governance.
- Executed secure data center migrations to compliant colocation facilities with controlled regional cutovers.
- Reduced vulnerability exposure by 30% through unified IAM and endpoint security standards.
- Directed global security operations, IAM governance, and endpoint control standards across 30 international offices.
- Reduced enterprise vulnerability exposure by 30% through unified identity and endpoint security enforcement.
Webster Financial Corp — VP of Enterprise Systems
2004 – 2013 · Waterbury, CT
Reporting to VP of Service Delivery · Org scope: 70 FTE organization across infrastructure · Budget: $6M annual operating budget
Led enterprise systems and infrastructure modernization in a regulated financial-services environment.
- Led enterprise systems modernization to reduce legacy complexity and improve platform stability in a regulated environment.
- Completed two data center migrations to compliant colocation facilities while preserving business continuity.
- Maintained regulatory alignment through multi-year infrastructure and platform transformation governance.
- Partnered directly with OCC examiners during regulatory audits, supporting infrastructure, control, and security governance reviews within a federally regulated banking environment.
- Ensured secure data center migrations and platform modernization initiatives met regulatory control expectations and audit requirements.
- Maintained alignment with enterprise risk and compliance leadership during multi-year infrastructure transformation programs.
IKON Office Solutions — Sr. AIX Administrator / Project Manager
1999 – 2004
Reporting to Director of IT · Org scope: Individual Contributor
Built foundational leadership from hands-on UNIX/AIX operations into cross-functional project delivery.
- Owned mission-critical UNIX/AIX production platforms and service reliability.
- Progressed into project leadership, coordinating cross-functional teams and vendor delivery.
- Built systems engineering and incident-response discipline that informs executive decision-making today.