Rodrigo Loureiro
Inventor, builder, investor, cyclist | Steward of a Christmas tree farm in Unison, Virginia | Former Global CIO & CISO
ABOUT ME
Inventor, builder, investor, cyclist
AI and software | Gravel roads | A Christmas tree farm in Unison, Virginia
I started as a programmer in 1988 and spent more than three decades building and running technology and security for large organizations. I was Chief Technology and Information Security Officer for CGI’s Financial Solutions Group, then joined Laureate Education as its first CISO and became Global CIO. After Laureate I founded Cyber Connective Corporation around a risk-scoring method I invented, awarded US patent 12,437,077. The company earned seven-figure revenue from its platform before I wound it down at the end of 2023. I hold two US patents and wrote ‘Game On – Leaders Who Last’.
Now I spend my time on the things I would do for free. AI comes first. I first studied neural networks in Lisbon in the early 1990s, as part of my graduate work in operations research. Three decades later I am back at it, working through how large language models function from first principles and applying it to AI security.
I build software with AI, invest my own capital, ride the gravel roads of western Loudoun, lead the nonprofit Cycling Unbound, and grow Christmas trees on 35 acres in Unison, Virginia.
I am open to board and advisory roles and to research collaboration.
Science University of Lisbon, Lisbon, Portugal Master of Science, Operations Research (with Honors)
Science University of Lisbon, Lisbon, Portugal Bachelor of Science, Statistics and Operations Research • (with Honors) Fluent Portuguese, English, French, and Spanish
What I work on
AI and large language models | AI security | Software development | Investing and personal finance tools | Statistics and operations research | Cycling training science | Land stewardship | Board and advisory work
I build software with AI: a cycling coach that reads my training data, tools that track and model my finances, and a simulator that asks whether the money will outlast me.
CURRENTLY
Working through how large language models function from first principles: building one from scratch, reading the training and interpretability research, and applying it to AI security. Building on a patented method for scoring an organization’s cyber risk. And building with AI: a cycling coach, personal finance tools and a retirement simulator.
I invest my own capital in public markets and in private cybersecurity and AI companies, and I build my own tools to do it.
At home I grow Christmas trees on a 35-acre farm in Unison, Virginia, and I work on preserving the village and the land around it.
Cycling Unbound is a Virginia 501(c)(3) nonprofit. We ride the historic gravel roads of western Loudoun and Fauquier, document their history, and work to keep them unpaved, open to everyone and safe to share.
Weekly open rides and a library of mapped routes at cyclingunbound.org.
PREVIOUS PROFESSIONAL EXPERIENCE
Laureate Education, Inc., Laureate International Universities •
Baltimore, MD (Global) Worldwide leader in higher education, with $3.8B in revenue from 27 accredited campus-based and online universities offering undergraduate and graduate degree programs to more than 805,000 students in 7 countries.
Joined Laureate Inc, as it’s first CISO, built, grew, and fostered growth within the IT/CISO team from 1 to 200 staff. Developed corporate information security strategy, facing a critical problem with lack of cybersecurity that had resulted in coverage termination by the cybersecurity insurance carrier. Within 24 months, improved the corporate IT/CISO posture, for example enabling purchase of a $50M policy for cyber risks for operations with the same insurance carrier that had previously deemed Laureate too risky on a cyber perspective, contributing to a successful IPO in 2017.
Multiple successes in driving all aspects of program lifecycle, from initial concept and requirements through design, development, sales, and implementation.
Previous
CGI, Inc. • Montreal, Quebec, Canada (Global) CGI is a global IT consulting, systems integration, outsourcing, and solutions company. Services provided include application services, business consulting, business process services, IT infrastructure services, IT outsourcing services, and systems integration services. CGI has customers in a wide array of industries and markets, with many in financial services.
CHIEF TECHNOLOGY & INFORMATION SECURITY OFFICER, FINANCIAL SOLUTIONS GROUP 2005 to 2015
Created and managed technology and INFOSEC strategy for CGI’s Financial Solutions Group, providing technical and security direction for all financial solutions, which included Trade, Originations, Servicing, Collections, and Gateway solutions. Led a team of 25 Senior Technical Architects via 4 direct reports.
Led business unit focused on building and deploying software for clients as CGI transformed from client single sales to selling software as a service hosted in CGI’s datacenter, selling 10-year contracts of reoccurring revenue. Security was the greatest challenge; software that was deployed in the client’s datacenter was now in CGI’s datacenter. Built and trained the team to make the environment in CGI’s datacenter secure. Developed programs that withstood audits by Bank of America (BOA), Citibank, Barclays, JP Morgan, and Chase.
Expert at building a technical information security program and also “selling” it to the client, to convince them to trust CGI. Performed complete architectural design and performance tuning for large-scale platform and web-facing infrastructure, which included J2EE and Oracle with BPEL, BPM, and EAI components. Information Security Governance: Rolled out an enterprise security program and technology roadmap for security solutions and security technology to address marketplace security requirements such as PCI-DSS and ISO27000.
Developed cloud security technology policy and standards to ensure safe deployment and offering of large information technology solutions in secure datacenters complying with the latest regulations and best practices Provided account management for the largest telecom operator in Brazil, including cultivating client relationships, identifying sales opportunities, and worked with the largest banking institutions, including JP Morgan Chase, Wells Fargo, Moody’s, and BOA.
Blog
Mission-Driven Leadership in Cybersecurity: Finding Purpose Beyond Technical Excellence
In the rapidly evolving world of cybersecurity, technical expertise alone is no longer sufficient...
Cybersecurity 101
Cybersecurity is an increasingly important concern for individuals and businesses of all sizes. As...
Network Security Firewalls primer
Network security is an essential concern for enterprises of all sizes. Without proper security...
5 Ways Technology Has Improved Business Today
Have you ever thought about a guarantee in which you invest your money and get returns? While...
NIST CSF … Why it is important?
The National Institute of Standards and Technology (NIST) is a non-regulatory federal agency that...
Companies are spending millions trying to be secure, and yet they don’t feel safe
Every year, cybersecurity changes. Standing still is actually going backwards. You cannot rest on...
Why your organization should consider a virtual or fractional CISO
Small to medium-sized enterprises (SMEs) are increasingly recognizing the importance of...
The need for interoperability to Integrate different cybersecurity technologies
The need for a connective platform, a new approach of securing the corporate technology...
Technology and cybersecurity play a critical role in improving our lives.
Optimist about the future ? There Isn't a challenge that We Cannot take on,...
We are at a pivotal moment in how we do business, how we define life and work
We live in a society that basically works the same way as it did 50 or 60 years ago. Our parents...
It’s a wonderful time of the year… for hackers, especially.
It's a wonderful time of the year... for hackers, especially. The holidays are the time of the...
2021 SolarWinds supply chain cyber attack
One year after the discovery of the 2021 SolarWinds supply chain cyber attack, security...
Why the C-Suite Doesn’t Need Access to All Corporate Data
Need to know means that if you don't need to know to do your job, then you don't need access to...
Copyright © 2025 rodrigoloureiro, All rights reserved.


