Deb Tedeschi

Cybersecurity & Risk Leader specializing in Identity & Access Management (IAM), Privileged Access Management (PAM), and enterprise cyber operations. Known for building high-performing teams, modernizing identity architectures, strengthening regulatory posture, and driving measurable reductions in cyber and operational risk. Trusted partner to regulators, auditors, and executive leadership with extensive experience across financial services, retail, and insurance.

Director, Cyber (Identity & Access Management / Privileged Access Management) at Bread Financial (2021-10 – Present)

Lead enterprise IAM and PAM strategy, engineering, and operations. Drive modernization, governance, and risk reduction across identity platforms supporting a highly regulated financial environment.

• Own end-to-end IAM and PAM program leadership, including identity lifecycle management, authentication services, privileged access controls, and directory services.
• Modernize identity architecture to support Zero Trust, cloud adoption, and enterprise-wide access governance improvements.
• Oversee engineering and operational teams responsible for authentication, access provisioning, privileged account onboarding, and continuous access monitoring.
• Strengthen regulatory and audit posture by establishing governance frameworks, control documentation, metrics, and evidence processes aligned with FDIC, GLBA, and SOX requirements.
• Serve as primary liaison to regulators and auditors for IAM/PAM-related examinations, ensuring transparency, readiness, and timely remediation.
• Partner with Second Line of Defense to align identity controls with enterprise risk appetite, improving issue closure rates and reducing identity-related risk exposure.
• Develop multi-year IAM/PAM strategy and roadmap, driving enterprise alignment and investment in identity modernization initiatives.

Director, Cyber Operations (SOC, Incident Response, Forensics) at Bread Financial (2021-10 – 2025-05)

Directed first line of defense engineering and operations for Cyber Operations, ensuring resilience, rapid response and regulatory compliance.

• Led Security Operations Center (SOC), Incident Response, and Digital Forensics teams supporting a 24/7 enterprise environment.
• Matured incident response processes, reducing mean time to detect and respond through improved tooling, playbooks, and cross-team coordination.
• Built operational governance, standard operating procedures, and audit-ready documentation aligned with FDIC, GLBA, and SOX requirements.
• Served as primary liaison to regulatory bodies and audit examiners for cyber operations, managing evidence requests, interviews, and remediation activities.
• Partnered with Second Line of Defense to strengthen control effectiveness and accelerate closure of cyber-related issues.
• Developed multi-year Cyber Operations strategy and roadmap to enhance detection, response, and operational resilience.

Manager, Information Security at Alliance Data/Bread Financial (2019-03 – 2021-10)

Oversaw penetration testing, security architecture, vulnerability management, and security assessment services supporting enterprise software and infrastructure development ensuring adherence to security controls.

• Execution and Maturity of vulnerability management enterprise wide capabilities.
• Executed penetration testing program and ensured alignment with enterprise risk priorities.
• Provided security architecture guidance for new and existing applications and platforms.
• Delivered risk assessment consultation across business units, improving risk visibility and remediation planning.
• Created comprehensive program documentation to ensure SDLC alignment and consistent delivery of security requirements.
• Produced monthly compliance and risk reporting for SLT and XLT, enabling informed decision-making.

Enterprise Risk Security Advisor at Alliance Data

Manager, Security Ops Center (SOC) at Nationwide

Manager, Vulnerability Management at Nationwide

Operations Manager, Agency Solutions (IT dept.) at Nationwide

Consultant, Information Risk Management at Nationwide

Consultant, IT Business Consultant at Nationwide

Bachelor of Science in Management Information Systems – Franklin University

Bachelor of Arts in English & Sociology – Bowling Green State University

Master's Certificate in Project Management – George Washington University