John Clark is a Partner in Deloitte’s Cyber Risk practice with deep experience in risk management and over 25 years of experience in information security with a specialization in financial services. John has conducted over 100 information security program assessments and audits. Prior to Deloitte, he worked at Accenture where he founded and led Accenture’s global information security practice, leading a variety of security technology integration and security program strategy projects. John has led numerous enterprise risk management projects including ISO and NIST CSF security assessments, vendor risk management program development, security and privacy program development, GRC implementations, identity management strategy and implementation, attack and penetration, vulnerability management programs, and large scale regulatory compliance and remediation efforts. John is a Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA) and a Certified ISO/IEC 27001:2013 Lead Auditor.