Skip to content
CISO Spotlights

Career profile

John Opala

Chief Information Security Officer, Ralph Lauren

Status
Current role, per sources checked 10 August 2026
Appointed
August 2026
Published

Compiled 27 September 2026 from public records. Each statement below is drawn from the sources listed at the end.

John Opala is Chief Information Security Officer at Ralph Lauren, a move SecurityWeek reported in its Week of August 10, 2026 roundup.

Career path

Immediately before Ralph Lauren, Opala led IT and global security functions at a different apparel and consumer-goods company. A FutureCon Events speaker page describes his background as spanning nineteen years in information technology, with a focus that runs from infrastructure engineering through to enterprise security architecture. That page details the range of programs he has built, from identity and access management to industrial-control and IoT security.

What his public record shows

SecurityWeek's item also places Opala on the advisory board of CarolinaCISO and describes him as a global ambassador for the Global Council for Responsible AI, alongside his prior Hanesbrands and McCormick & Company titles. The FutureCon page adds that he has evaluated and selected security tooling for critical business systems and reported cybersecurity risk posture to leadership on a quarterly basis. Taken together, the two sources describe a career built around building and running enterprise security programs at large consumer-facing companies, with the Ralph Lauren appointment following directly on from the Hanesbrands and McCormick & Company CISO roles. Neither source we reviewed states the exact date within that week Opala started at Ralph Lauren, nor does either describe his remit there in detail; both facts are simply not part of the public record available to this profile.

The FutureCon bio also describes his work preparing and presenting security strategy across a wide span of technical domains, from identity systems to operational technology, which lines up with the broad IT and Global CISO title SecurityWeek reports him holding at Hanesbrands immediately before Ralph Lauren.

Sources

  1. 1.
    SecurityWeeksecurityweek.com · published 10 August 2026 · checked 27 September 2026 · tier B
  2. 2.
    FutureCon Eventsfutureconevents.com · undated page · checked 27 September 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.