Steve Frank

Steve Frank is the Chief Information Security Officer (CISO) of KPMG LLP and KPMG Americas, appointed in November 2024.

KPMG describes him as a technology executive who has held CISO responsibilities in both the public and private sectors.

Career path

Frank's academic grounding is in networking and security policy. He earned a BS in Applied Networking and Systems Administration from RIT in 2004.

He also holds an MS in Information Security Policy & Management from Carnegie Mellon University. The sources do not give the year of that degree.

His public-sector work took place in the US Intelligence Community, where he led a global cybersecurity organization.

SecurityWeek reported that he held cybersecurity leadership roles at the CIA, where he served for more than 15 years.

In that setting, his bio states, he secured sensitive intelligence operations from hostile nation-state threats.

In the private sector he held cybersecurity leadership roles at Kaiser Permanente.

His KPMG and RIT bios add that he led global cybersecurity organizations in the healthcare and insurance industries.

The supplied sources do not name his insurance-sector employer. They also do not give the dates or order of his healthcare and insurance roles.

Frank joined KPMG and KPMG Americas as CISO during the week of November 11, 2024.

Security remit across sectors

His work has spanned very different risk environments. KPMG's bio emphasizes his record of running security programs under high pressure and extreme risk conditions.

In intelligence work, the threat he defended against was hostile nation-state activity aimed at sensitive operations.

In healthcare and insurance, the focus shifted toward protecting critical medical infrastructure and highly regulated datasets.

Alongside defensive programs, he has supported technology innovation and research programs.

At KPMG, his title covers both the US firm, KPMG LLP, and the KPMG Americas organization.

Advisory and education work

Outside his executive role, Frank volunteers on advisory boards related to cybersecurity product development.

He also volunteers with universities on cybersecurity education.

He has a profile on the National Council of RIT's Golisano College of Computing and Information Sciences, the school where he completed his undergraduate degree.