Profile

Cyber programmes built from scratch, at global scale

15 years driving AI, cyber and privacy for Fortune 500 companies, governments and international organisations — managing regulators, auditors, Boards and the C-suite across AMER, EMEA and APAC.

Background

The short version

Lucas Falivene is a global cyber leader with over 15 years driving AI, cyber and privacy for Fortune 500 companies, governments and international organisations.

He has built AI, cyber and privacy programmes from scratch while managing regulators, auditors, Boards and the C-suite — creating 25+ global programmes across government, the private sector, NGOs and academia.

A Carnegie Mellon alumnus and Fulbright Scholar, he has co-authored 5 cyber ISO standards and served as ISO National Expert for several countries.

Trained by the FBI, INTERPOL, OAS, CERT and ISO, he has openly shared his knowledge — training 1,000+ professionals worldwide.

Lucas Falivene
Career

Professional experience

AI Global Governance Lead  |  APAC Technology and Security Lead

Coinbase
  • Leading the build and implementation of AI automations, and the review and challenge of those built by other teams
  • Building the standards and framework for responsible and secure AI use
  • Security and technology owner of APAC licences, with oversight of the security and technology programme and regulatory governance
  • Boards, Board Committees, C-suite, regulators and auditors interface for security and technology risk across the region
May 2026 — Present
Previously
APAC Technology and Security LeadSep 2025 — May 2026
  • Security and technology owner of APAC licences, with oversight of the security and technology programme and regulatory governance
  • Boards, Board Committees, C-suite, regulators and auditors interface for security and technology risk across the region
EMEA Senior Analyst — Tech Risk & ControlsFeb 2025 — Sep 2025

EMEA regulatory governance across DORA, MiCA, BAIT, PSD2, NIS2 and local regulation; international SME for operational resilience, incident management, and ICT risk

Global Head of Information Security Governance, Risk & Compliance

dLocal
  • Led global information security governance, risk and compliance
  • Led implementation from scratch of DORA, ISO 27001 and NIS2, alongside owning PCI DSS, SOX, SOC 2 Type II, SWIFT CSP, ITGC and NIST CSF
  • Built from scratch global and regional programmes for information security, third-party risk, and security and technology risk
  • Investors, Boards, Board Committees, C-suite, regulators and auditors interface for information security
Jan 2024 — Feb 2025

Manager — Cybersecurity & Privacy

PwC Malta
  • Several C-suite secondments, advisory and audit engagements across cyber, privacy, technology and AI (e.g. strategy build and implementation, cloud migration, incident management, risk management, compliance, maturity and gap assessments, ITGC audits)
  • Oversaw the creation of Malta's National Cybersecurity Community
  • Trained Boards of Directors, C-suite, managers and staff across all three lines of defence on security, privacy, technology, regulations and frameworks
  • Clients included major crypto exchanges, banks, payment service providers, telcos, insurers, logistics, real estate, regulators and government
Jul 2022 — Jan 2024
Previously
Supervisory (Senior Associate II) — Cybersecurity & PrivacyFeb 2022 — Jun 2022

Data Protection Architecture Team Lead

Accenture
  • Devised control strategy and security architecture, security assessments, project management, and risk and stakeholder management
  • Clients included Coca-Cola, ICBC, Bank of Chile and Brazil, Petrobras, Natura, LATAM, Techint, Falabella, Cencosud, and YPF
Sep 2021 — Feb 2022

eGRC Senior Consultant

Telecom Argentina
  • Managed RSA Archer eGRC implementation for several clients
  • Led delivery of several security and privacy consultancy engagements
  • Clients included Argentina's largest bank and largest petroleum company, and major banks and financial institutions
Sep 2021 — Feb 2022

Cyber Risk Consultant — CERT / SEI Capstone

Carnegie Mellon University — Software Engineering Institute
  • Devised a novel cyber risk management method using NIST, FAIR, MITRE, OCTAVE and CMMC
  • Allows CISOs to optimise the allocation of their available budget on the set of controls that minimises their risk profile
Jan 2021 — May 2021

Head of Cybersecurity (CISO)  |  National Cybercrime Lead

Ministry of National Security, Argentina
  • Created and led the information security team and built an ISO 27001 ISMS from scratch
  • Engineered joint collaboration programmes with international, regional, federal, state and local police forces, cybercrime centres, NGOs and government agencies
  • Reengineered the federal cyber investigations framework for four federal police taskforces, pushing police to proactively prevent cybercrime rather than react to it — saving countless lives since then
  • Coordinated more than 35 HUMINT and OSINT cyber intelligence operations across human and drug trafficking, terrorism, dark web criminal activity, kidnappings and other federal crimes
Apr 2016 — Aug 2019
Also at the Ministry
Cybersecurity & Cybercrime LecturerAug 2016 — Aug 2019

Trained 400+ federal and state police agents and ministry staff; devised and delivered 10+ courses and 75+ lectures; designed the national cyber awareness and training programme

Education

Education

Fulbright Scholar — Master's programme at Carnegie Mellon University
See selected work Credentials

Let's connect

For speaking engagements, professional networking, research collaboration, or a conversation about AI, cyber and privacy.

Speaker request Connect on LinkedIn