Strong cybersecurity programs rarely appear overnight. They are built deliberately through structure, consistency, operational discipline, and hundreds of decisions that gradually improve how an organization manages risk over time.
Over nearly two decades across healthcare, financial services, retail, hospitality, and enterprise environments, Erich has developed a reputation for helping organizations mature security capabilities in practical, scalable ways. Whether implementing governance structures, strengthening cloud security, or building incident response processes, his focus has remained consistent: Build security programs that organizations can realistically sustain as they grow.
“Security maturity is a process,” Erich explains. “You cannot solve everything at once. The key is building the right foundation and continuously improving from there.”
Turning Security Into an Operational Capability
Many organizations struggle not because they lack security tools, but because their security processes have not matured alongside the business.
For Erich, solving that challenge requires more than technical expertise alone. It requires structure, alignment, operational planning, and the ability to integrate security into how the organization actually functions day to day.
At organizations including Jazwares, Life Extension, Financial Recovery Group, Royal Caribbean, and Mercantil Bank, Erich has led initiatives involving governance, risk management, security operations, incident response, third-party risk, IAM, awareness training, cloud security, compliance alignment, and executive reporting.
“How do you take security from reactive to proactive? How do you create repeatable processes? How do you improve visibility and accountability?” Erich says. “Those are the kinds of questions that drive long-term security improvement.”
Building With the Business, Not Against It
One of Erich’s core leadership philosophies is that security should support business growth rather than create unnecessary friction.
At Jazwares, where Erich most recently lead the information security program for a global billion-dollar enterprise, his responsibilities spanned governance, security operations, cloud security, AI risk discussions, incident response planning, security awareness, and strategic roadmap development.
The role required balancing long-term strategy with day-to-day execution across a rapidly evolving business environment.
“You have to build programs that scale,” Erich explains. “Processes that work for one stage of a company may not work as the organization grows. Security leaders need to constantly evaluate where maturity gaps exist and how to improve them without slowing the business down.”
Measuring Progress Through Maturity
Unlike organizations that focus only on compliance checklists or technology acquisitions, Erich believes meaningful security progress is measured through operational maturity.
Throughout his career, many of his initiatives produced tangible operational improvements, from reducing phishing click rates and implementing 24/7 SOC capabilities to establishing formal risk registers, modernizing network security architecture, and leading organizations through major compliance milestones including SOC2 and HITRUST.
But Erich views those accomplishments as part of a larger process rather than isolated wins.
“Security is never finished,” he says. “Mature organizations understand that improvement has to be continuous.”
The Importance of Team Development
Another area Erich emphasizes heavily is team development.
Building strong security programs requires strong people, clear accountability, and environments where teams can grow alongside organizational needs.
“The best security programs are not built by one person,” Erich explains. “They’re built by teams that understand the mission, communicate effectively, and continuously improve together.”
