Who is the CISO of American Express?

Gleb Reznik is the current Chief Information Security Officer (CISO) of American Express on CISO Tribune's record, appointed in the week of March 16, 2026.

How many security-leadership moves has CISO Tribune tracked at American Express?

CISO Tribune has tracked 2 moves at American Express since March 16, 2026.

When was Gleb Reznik appointed at American Express?

Gleb Reznik's appointment as Chief Information Security Officer (CISO) of American Express was announced in the week of March 16, 2026, per SecurityWeek Industry Moves (week of 2026-03-16).

Where did Gleb Reznik work before becoming Chief Information Security Officer (CISO) of American Express?

Gleb Reznik was promoted from within: the record of the appointment gives the previous role as SVP, Technology Risk and Information Security at American Express.

Who held the seat at American Express before Gleb Reznik?

The previous holder on CISO Tribune's record is Fred Gibbins, Chief Information Security Officer (CISO), whose departure was announced in the week of March 16, 2026.

Who does the security chief of American Express report to?

American Express' fiscal 2025 Form 10-K, filed February 6, 2026, says its Chief Information Security Officer reports to the Chief Information Officer.

Which board body oversees cybersecurity at American Express?

American Express' fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Risk Committee.

Company record

American Express CISO: Gleb Reznik

The current Chief Information Security Officer (CISO) of American Express, as tracked by CISO Tribune, is Gleb Reznik, whose appointment was announced in the week of March 16, 2026 (SecurityWeek Industry Moves (week of 2026-03-16)). An internal promotion: Gleb Reznik was previously SVP, Technology Risk and Information Security at American Express. Read the record. The record entered the Wire on September 24, 2026.

Career profile: Gleb Reznik on CISO Spotlights ↗

What American Express tells the SEC

Its fiscal 2025 Form 10-K, filed February 6, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer reporting to the Chief Information Officer, with oversight by the Risk Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.

Tracked by the Wire since March 16, 2026 · 2 recorded moves · every claim links to a sourced record · Updated September 24, 2026

Where American Express appears on the record (4)

Every page on CISO Tribune and its network that carries this company, 4 in all.

On the Wire (2): Gleb Reznik named Chief Information Security Officer (CISO) at American Express · 2026-03-16
Fred Gibbins steps down as Chief Information Security Officer (CISO) of American Express · 2026-03-16
SEC filing: Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed February 6, 2026
Career profile: Gleb Reznik on CISO Spotlights ↗

How the top security seat at American Express has changed hands

CISO Tribune's record names 2 people in the top security seat at American Express, the most recent first. Each line rests on the record linked beside it.

Gleb Reznik: named Chief Information Security Officer (CISO), announced in the week of March 16, 2026 (record). The appointment and Fred Gibbins' departure were announced in the same month.
Fred Gibbins: Chief Information Security Officer (CISO); departure announced in the week of March 16, 2026 (record).

About American Express

CISO Tribune's Leadership Bench files American Express under Financial Services and North America. The SEC classifies it under standard industrial classification 6199, Finance services, and EDGAR lists its ticker as AXP. The Wire has 2 security-leadership moves at American Express on record, the earliest announced in the week of March 16, 2026.

What American Express's 10-K says about security governance

American Express' fiscal 2025 Form 10-K, filed February 6, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.

Reporting line: the Chief Information Security Officer reports to the Chief Information Officer.
“Our CISO reports to the Chief Information Officer, information about whom is included in "Information About Our Executive Officers" under "Business."”
Board oversight: the Risk Committee.
“Under our cybersecurity governance framework, our Board and Risk Committee are primarily responsible for overseeing and governing the development, implementation and maintenance of our TRIS program, with our Board designating our Risk Committee to provide oversight and governance of technology and cybersecurity risks.”
How often the board or committee hears about it: at least once a year.
“Our Board receives an update on cybersecurity at least once a year from our CISO or their designee.”
Experience of the security leadership, as the filing states it:
“Our current CISO has held a series of roles in telecommunications, networking and information security at American Express, including promotion to the CISO role in 2013, and is also responsible for technology risk management.”
Material incidents: the filing states none.
“While we do not believe that our business strategy, results of operations or financial condition have been materially adversely affected by any cybersecurity incidents, cybersecurity threats are pervasive and, similar to other global financial institutions, we, as well as our customers, colleagues, regulators, service providers and other third parties, have experienced a significant increase in information security and cybersecurity risk in recent years and will likely continue to be the target of cyberattacks.”

Plain-English reading and full text of the filing · the filing on sec.gov

Security leadership timeline

2026-03-16

Gleb Reznik named Chief Information Security Officer (CISO) at American Express

Gleb Reznik is replacing Fred Gibbins as CISO at American Express.

2026-03-16

Fred Gibbins steps down as Chief Information Security Officer (CISO) of American Express

Fred Gibbins is departing as CISO at American Express, being replaced by Gleb Reznik.

Previous security leaders of American Express

Fred Gibbins: Chief Information Security Officer (CISO); departure announced in the week of March 16, 2026 record

Security chiefs at other Financial Services organizations

Other organizations CISO Tribune files under Financial Services with a named security chief on record: those in North America first, in alphabetical order from American Express onward.

Bank of America: Kris Fador, Chief Information Security Officer.
Bessemer Trust: Vikas Bangia, Chief Information Security Officer.
BNY: Dave Robinson, CISO.
Candescent: Thomas Hill, Chief Information Security Officer.
Coinbase: Michael Sikorski, Chief Information Security Officer.
DCM Services: Curtis Rebelein, Chief Information Security Officer.
Depository Trust Clearing Corporation (DTCC): Laura Deaner, Chief Information Security Officer (CISO).
Envestnet: Rich Friedberg, Chief Information Security Officer (CISO).

The full Financial Services bench

Questions CISOs ask about American Express

Who is the CISO of American Express?: Gleb Reznik is the current Chief Information Security Officer (CISO) of American Express on CISO Tribune's record, appointed in the week of March 16, 2026.
How many security-leadership moves has CISO Tribune tracked at American Express?: CISO Tribune has tracked 2 moves at American Express since March 16, 2026.
When was Gleb Reznik appointed at American Express?: Gleb Reznik's appointment as Chief Information Security Officer (CISO) of American Express was announced in the week of March 16, 2026, per SecurityWeek Industry Moves (week of 2026-03-16).
Where did Gleb Reznik work before becoming Chief Information Security Officer (CISO) of American Express?: Gleb Reznik was promoted from within: the record of the appointment gives the previous role as SVP, Technology Risk and Information Security at American Express.
Who held the seat at American Express before Gleb Reznik?: The previous holder on CISO Tribune's record is Fred Gibbins, Chief Information Security Officer (CISO), whose departure was announced in the week of March 16, 2026.
Who are the security chiefs at other Financial Services organizations?: On CISO Tribune's record they include Kris Fador at Bank of America, Vikas Bangia at Bessemer Trust, Dave Robinson at BNY and Thomas Hill at Candescent.
Who does the security chief of American Express report to?: American Express' fiscal 2025 Form 10-K, filed February 6, 2026, says its Chief Information Security Officer reports to the Chief Information Officer.
Which board body oversees cybersecurity at American Express?: American Express' fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Risk Committee.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.