Company record
Ralph Lauren CISO: John Opala
The current Chief Information Security Officer of Ralph Lauren, as tracked by CISO Tribune, is John Opala, whose appointment was announced in the week of August 10, 2026 (SecurityWeek Industry Moves (week of 2026-08-10)). Previously VP of IT and Global CISO at Hanesbrands. Read the record. The record entered the Wire on .
Career profile: John Opala on CISO Spotlights ↗
What Ralph Lauren tells the SEC
Its fiscal 2026 Form 10-K, filed May 21, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since August 10, 2026 · 1 recorded move · every claim links to a sourced record · Updated
Where Ralph Lauren appears on the record (3)
Every page on CISO Tribune and its network that carries this company, 3 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2026 · Item 1C, filed May 21, 2026
- Career profile
About Ralph Lauren
CISO Tribune's Leadership Bench files Ralph Lauren under Retail & Consumer and North America. The SEC classifies it under standard industrial classification 2320, Men's & boys' furnishgs, work clothg, & allied garments, and EDGAR lists its ticker as RL. The Wire has one security-leadership move at Ralph Lauren on record, announced in the week of August 10, 2026.
What Ralph Lauren's 10-K says about security governance
Ralph Lauren's fiscal 2026 Form 10-K, filed May 21, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Top security role, as the filing names it: Chief Information Security Officer.
Board oversight: the Audit Committee.
“The Audit Committee has responsibility for oversight of the Company's cybersecurity risks.”
How often the board or committee hears about it: quarterly.
“The Audit Committee reviews our cybersecurity program on a quarterly basis, including review of a quarterly enterprise risk management report, and periodically convenes special meetings to conduct deeper preparedness, enterprise risk and business continuity reviews.”
Frameworks and standards the filing names: NIST Cybersecurity Framework, ISO/IEC 27001, SOC 2 and PCI DSS.
Experience of the security leadership, as the filing states it:
“Our interim CISO brings over 30 years of extensive experience across information security, IT, risk management, and regulatory compliance.”
Material incidents: the filing states none.
“Our business strategy, results of operations, and financial condition have not been materially affected by risks from cybersecurity threats, including as a result of any previous cybersecurity incidents; however, we cannot assure that cybersecurity threats resulting in an incident will not be material to us in the future.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
Security chiefs at other Retail & Consumer organizations
Other organizations CISO Tribune files under Retail & Consumer with a named security chief on record: those in North America first, in alphabetical order from Ralph Lauren onward.
SpartanNash: Brett Hoffman, VP and Chief Information Security Officer.
Target: Rich Agostino, Senior Vice President, Chief Information Security Officer & Infrastructure.
Toast: Tony Arous, Chief Information Security Officer.
Walmart: Jerry R. Geisler III, Executive Vice President and Chief Information Security Officer.
AutoNation: Brian Fricke, Chief Information Security Officer (CISO).
Coca-Cola: Derek Benz, Senior Vice President and Chief Information Security Officer.
Marriott International: Daniel Dubowski, Senior Vice President and Chief Information Security Officer.
Nike: Adam Zoller, Chief Information Security Officer (CISO).
Questions CISOs ask about Ralph Lauren
- Who is the CISO of Ralph Lauren?
- John Opala is the current Chief Information Security Officer of Ralph Lauren on CISO Tribune's record, appointed in the week of August 10, 2026.
- How many security-leadership moves has CISO Tribune tracked at Ralph Lauren?
- CISO Tribune has tracked 1 move at Ralph Lauren since August 10, 2026.
- When was John Opala appointed at Ralph Lauren?
- John Opala's appointment as Chief Information Security Officer of Ralph Lauren was announced in the week of August 10, 2026, per SecurityWeek Industry Moves (week of 2026-08-10).
- Where did John Opala work before becoming Chief Information Security Officer of Ralph Lauren?
- The record of the appointment gives John Opala's previous role as VP of IT and Global CISO at Hanesbrands.
- Who are the security chiefs at other Retail & Consumer organizations?
- On CISO Tribune's record they include Brett Hoffman at SpartanNash, Rich Agostino at Target, Tony Arous at Toast and Jerry R. Geisler III at Walmart.
- Which board body oversees cybersecurity at Ralph Lauren?
- Ralph Lauren's fiscal 2026 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
Related guides
CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.