Raj Thomas

Raj Thomas is a seasoned cybersecurity professional currently serving as the Head of Product Security, Engineering and Cyber Defense at Gap Inc., a global retailer with approximately 117,000 employees and $13.8 billion in annual revenue.1 He has been in this role since September 2021, based in the San Francisco Bay Area.1

Career Progression at Gap Inc.

Raj Thomas has been with Gap Inc. for several years, progressing through various security-related positions:

1. Head of Product Security, Engineering and Cyber Defense (September 2021 - Present)
2. Security Architect and Director of Product Security (January 2020 - October 2021)
3. Product Security Architect (May 2019 - January 2020)
4. Sr Access Management Engineer(III) (April 2017 - May 2019)

Key Responsibilities and Achievements

In his current role, Raj Thomas:

• Leads a team of 25+ associates and contractors responsible for implementing controls and mitigating risks related to GDPR, PCI, PII, and other information security and data privacy standards.1
• Oversees the security of 2,500+ store infrastructures, e-commerce websites, and customer call centers.1
• Has achieved a 50% reduction in costs and compliance efforts through automation.1
• Collaborates with teams across GapTech to secure internally developed and vendor products.1

Previous Experience

Before joining Gap Inc., Raj Thomas worked as a Security Consultant for Walmart Inc. through Wipro Limited from August 2011 to April 2017.1

Education

Raj Thomas holds a Bachelor's degree in Electrical, Electronics and Communications Engineering from Karunya Institute of Technology and Sciences, which he completed in 2011.1

Skills and Expertise

Throughout his career, Raj Thomas has demonstrated expertise in:

• Cybersecurity
• Product security
• Security architecture
• Penetration testing
• DevSecOps
• Compliance (GDPR, PCI, PII)
• Access management
• Cloud security

Raj Thomas's extensive experience and progression within Gap Inc. highlight his significant contributions to the company's cybersecurity efforts and his leadership in protecting critical infrastructure and customer data.