As Executive Director of Cyber Security, Compliance, and Privacy at Frosch International Travel (now part of J.P. Morgan Chase), Stephen Dake took on the challenge of building out the company's security, privacy, and IT risk programs. His focus was on making sure Frosch's systems were ready for the transition into a larger organization while keeping everything aligned with industry standards like GDPR and PCI.
Stephen led efforts to expand the security team and develop strong foundations for managing the risks brought by the acquisition. One of his major accomplishments was helping Frosch achieve SOC2 Type2 certification, proving the company could meet tough security standards. He also rolled out key frameworks for vendor risk management, a risk register, a compliance portal, red team testing, and controls assessments to make sure the company was continuously improving.
Beyond the technical work, Stephen played a big role in growing the cybersecurity, security engineering, and security operations teams, boosting their capacity by 700% and driving a $22 million uplift annually. His hands-on approach and focus on real-world solutions helped ensure Frosch was well-prepared as it integrated with the larger J.P. Morgan Chase cyber program.