Marc Varner
Corp VP and Global CISO
Lowe's Companies, Inc.•Mooresville, North Carolina, United States
View LinkedIn ProfileExecutive Overview
With almost 25 years of security experience Marc has an excellent ability to balance the necessity to secure data, with the practical demands placed upon a business in today’s highly competitive marketplace. To this end he has teamed with peer groups and business side partners in building numerous programs that placed appropriate controls on assets according to their value and risk to a given organization. Drawing from experience in highly regulated organizations, Marc is familiar with the standards of regulatory areas such as the GDPR, CCPA, HIPAA, PCI, and others and is adept at creating solutions which produce clear and demonstrative results. Marc has expertise in technical security architecture, program and budget management, technology and process risk management, audit and compliance, incident management / forensic investigation and staff development. He is able to establish and leverage solid working relationships with key stakeholders to produce effective working relationships that encourage clear, open, and productive communications. Marc is an active member of the IAPP, ISACA and currently holds CISA, CISM, and CIPP certifications. Specialties: Technical elements of security architecture * Program and Staff Development * Data Asset Management * E-Discovery methods and law * Incident and Risk Management * Regulatory Compliance and Measurement Programs * ITIL and ISO27001 based modeling * Application security and SDLC process * Cost Management
Career Timeline
- Lowe's Companies, Inc.CurrentNov 2021–Present· 4 yrs 10 mos
- Vice President, Global Chief Information Security OfficerCurrentNov 2021–Present
- Mar 2017–Nov 2021· 4 yrs 8 mos
- Corp VP and Global CISOMar 2017–Nov 2021
- 2010–Mar 2017· 7 yrs 2 mos
- Corp. VP and Global CISO (Chief Information Security Officer)2010–Mar 2017
- Dec 2007–Dec 2009· 2 yrs
- Senior Manager, Information TechnologyDec 2007–Dec 2009
- Feb 2005–Dec 2007· 2 yrs 10 mos
- Director, SecurityFeb 2005–Dec 2007
- Sep 2001–Feb 2005· 3 yrs 5 mos
- Senior Manager, Information Technology SecuritySep 2001–Feb 2005
- 1993–2002· 9 yrs
- EMEIA Region Security Manager1993–2002
Education
Electronic Engineering
Purdue University Northwest