Carlos Morales

Carlos Morales is a cybersecurity executive, author and educator with more than 20 years of experience across information security, technology risk, privacy, compliance and operational resilience. He has led cybersecurity and risk functions in multinational, regulated and operationally complex environments, spanning enterprise technology and operational technology.

His experience ranges from startups to global enterprises across industries and countries. He has built and transformed cybersecurity teams, governance structures and risk management programs that connect security with business priorities. His approach focuses on practical decisions, clear accountability and the business outcomes affected by cyber risk.

Carlos contributed from the private sector to the development of Mexico’s National Cybersecurity Plan, an initiative led by the Executive Office of the President of Mexico. He was also a member of the first Cybersecurity Innovation Council organized by the Organization of American States.

At Tecnológico de Monterrey, he contributed to the development of the Cybersecurity HUB and the master’s degree in cybersecurity. He continues to teach as a Professor of Practice, helping current and future leaders connect cybersecurity with business judgment and real-world decision-making.

Carlos is the author of Cyber Risk Management in Practice: A Guide to Real-World Solutions and co-author, with Rick Doten, of Adaptive Cybersecurity Leadership, launching February 4, 2027.