CISO Tribune

CISO appointment

Leilani Farol named Senior Vice President, Chief Information Security Officer (CISO) at First Horizon

By CISO Tribune Editorial · Published · Updated

Leilani Farol is the Senior Vice President, Chief Information Security Officer (CISO) of First Horizon. Leilani joins from Fidelity Investments, where they served as Head of Governance, Risk and Compliance.

Records: First Horizon · Leilani Farol · Career profile on CISO Spotlights ↗

PersonLeilani Farol
New roleSenior Vice President, Chief Information Security Officer (CISO)
CompanyFirst Horizon
Previous roleHead of Governance, Risk and Compliance, Fidelity Investments
Announcedweek of February 9, 2026
Added to the recordSeptember 24, 2026
SourceSecurityWeek Industry Moves (week of 2026-02-09)

Context from the record

Other Financial Services appointments in the first quarter of 2026

  • Jimit Narendra Shah, Chief Information Security Officer, LIC Housing Finance
  • Gleb Reznik, Chief Information Security Officer (CISO), American Express
  • John Visneski, Chief Information Security Officer (CISO), Green Impact Exchange
  • Donna Hart, Chief Information Security Officer, SMBC Americas
  • Rich Friedberg, Chief Information Security Officer (CISO), Envestnet
  • Stephen McMaster, Chief Information Security Officer, Western Alliance Bank
  • Kailash Gaonkar, Chief Information Security Officer, IIFL Finance
  • Martyn Bayly, Chief Information Security Officer, Cbus

Who runs security in Financial Services.

What this move signals

First Horizon announced that Leilani Farol has joined the company as Senior Vice President and Chief Information Security Officer. She most recently served as Head of Governance, Risk and Compliance at Fidelity Investments, and prior to that was SVP, Cyber Security – Global Information Security at Bank of America.

What the sources say

First Horizon says that as CISO, Farol will lead strategy and execution for enterprise cybersecurity. According to the release, her responsibilities include continuing to strengthen the security posture of the company in order to safeguard privacy and client data. Bryan Jordan, who was Chairman, President and CEO of First Horizon at the time of the announcement, said the company protected its clients and their trust through measures that included ongoing associate training and third-party risk management.

According to the release, Farol has more than 25 years of leadership in technology, risk management and information security. The company says Farol's career has been in financial services and a range of other industries, both in the U.S. and internationally. First Horizon says Farol has directed programs covering application development, business development, large-scale system implementations, technology strategy, and program and project management. At Fidelity Investments, the company says, she led the execution of a cyber strategy that was multi-year and enterprise-wide. According to the release, her several leadership roles at JPMorgan Chase & Co. included Vice President, Global Technology Infrastructure, Vice President of Cybersecurity Programs and Executive Director, Global Technology. The Business Journals reports that Farol previously led cybersecurity at JPMorgan Chase as well as at Bank of America.

First Horizon describes itself as a regional financial services company and reports $83.9 billion in assets as of December 31, 2025. According to the company, First Horizon Bank, its banking subsidiary, operates in 12 states that are concentrated in the southern U.S. and is headquartered in Memphis. According to the company, First Horizon and its subsidiaries provide mortgage banking, capital markets, fixed income, retail brokerage, wealth and trust management, small business, consumer, private banking and commercial services.

Sources

  1. SecurityWeek Industry Moves (week of 2026-02-09)
  2. First Horizon Appoints Leilani Farol as Chief Information Security Officer. First Horizon, published February 11, 2026.
  3. Memphis bank hires Fidelity exec to address cybersecurity - Memphis Business Journal. The Business Journals, published February 12, 2026.

The Briefing

Every verified CISO move of the week, in your inbox Friday.

Every verified CISO move and one piece of analysis, weekly.

Unsubscribe any time. See the privacy policy.