Aaron Pippin

Executive leader with 26 years of experience guiding organizations through complex operational and strategic change. Built a revenue-generating professional-services capability that produced more than $1 million annually, with direct responsibility for vendor selection, subscription negotiations, delivery-cost analysis, and service pricing. At IBM and other global organizations, creates operating structures that clarify priorities, assign accountability, and give executives reliable information for decisions.

Leads with humility, transparency, and high expectations while helping teams grow and succeed.

Data Privacy Risk Remediation Manager at IBM Chief Privacy Office (2022-01 – Present)

Lead enterprise remediation, transformation, and management-reporting programs across IBM's global businesses.

• Establish priorities, governance routines, accountable owners, escalation paths, and performance measures for complex programs involving multiple business units and international jurisdictions.
• Designed an enterprise platform that organizes regulatory obligations, remediation activity, ownership, status, and executive reporting into a consistent management system.
• Bring Legal, engineering, infrastructure, security, sales, support, and business leaders together to make decisions and execute practical implementation plans.
• Lead implementation programs for the EU Data Act, EU AI Act, Cyber Resilience Act, GDPR, CCPA/CPRA, PIPL, and PIPEDA.

Information Security Risk and Compliance Manager at Taos, an IBM Company (2021-01 – 2022-12)

Supported organizational integration, customer delivery, and governance modernization following IBM's acquisition of Taos.

• Directed improvements across cloud operations, business processes, executive reporting, SOC 2, ISO 27001, and integration requirements.
• Supported client-facing teams with solution development, contracts, statements of work, RFP and RFI responses, and customer delivery needs.
• Converted business priorities into repeatable processes, policies, management reporting, and clear accountability.

Third Party IT Risk Analyst at Blue Cross of Idaho (2020-01 – 2021-12)

• Worked with procurement and business leaders to evaluate suppliers, understand business dependencies, and support informed sourcing decisions in a regulated healthcare environment.

IT Risk Analyst at Micron Technology (2018-01 – 2020-12)

• Built an enterprise risk-management framework and advised leaders on resilience, disaster recovery, cloud operations, and investment priorities within a global semiconductor manufacturer.
• Established consistent assessment, reporting, policy, and risk-management practices aligned with NIST standards.

Cybersecurity BISO Program Manager at Nike (2017-01 – 2018-12)

• Led enterprise programs involving global business transformation, regulatory implementation, financial controls, executive stakeholders, and third-party relationships.

Senior Manager Litigation Technology Services at Stoel Rives LLP (2012-01 – 2016-12)

Directed strategy, service delivery, commercial modeling, vendor management, and technology modernization for a client-facing litigation-support operation.

• Created a cloud-based eDiscovery service that generated more than $1 million in recurring annual revenue after leading the migration of 30TB of client data to AWS.
• Selected platform vendors, negotiated subscription prices, determined the cost of processing client data, and helped set customer pricing for the service.
• Managed the tradeoffs among vendor expense, capacity, service quality, security, client expectations, and commercial value.
• Led strategic planning, program management, vendor governance, and operational improvements while protecting sensitive legal, health, and personal information.

Master of Business Administration – Willamette University

Bachelor of Science in Computer Science – Utah Valley State College