Rick Rankin

Rick Rankin is an experienced cybersecurity professional currently serving as the Chief Information Security Officer (CISO) at LendingClub, a position he has held since October 2018.1 With a career spanning over two decades in the information security field, Rankin has established himself as a seasoned expert in cybersecurity and risk management.

Career Highlights

At LendingClub: As CISO, Rankin has made significant contributions to LendingClub's security infrastructure:

• Built the cybersecurity organization and assembled a highly skilled security team
• Conducted comprehensive security risk assessments
• Designed the information security program and roadmap based on the NIST framework, 800-53 controls, and a NIST financial services profile
• Managed security pre-assessment for a bank acquisition
• Ensured compliance with GLBA and other information security regulatory requirements1

Prior to becoming CISO, Rankin served as Senior Director of Security Engineering at LendingClub from May to October 2018, where he focused on enhancing various security programs and ensuring compliance with NYDFS regulations.1

Previous Roles: Before joining LendingClub, Rankin held several notable positions:

• Cyber Security Engineering Leader at General Electric Healthcare (2014-2018)
• Cyber Security Engineering Leader at Kaiser Permanente (2013-2014)
• Manager, Security Consulting Assessment Services at Kaiser Permanente (2011-2013)
• Various security and technology roles at Kaiser Permanente (2005-2011)1

Expertise and Skills

Throughout his career, Rankin has demonstrated expertise in:

• Building and managing cybersecurity teams
• Implementing advanced predictive security systems
• Conducting security assessments and penetration testing
• Developing security architecture
• Ensuring regulatory compliance
• Managing large-scale security projects

Rick Rankin's extensive experience and proven track record in cybersecurity make him a valuable asset in his role as CISO at LendingClub, where he continues to lead the company's information security efforts.