Mr. Zalewski, through his company S3 Consulting, provides the following security advisory services: • Executive advisor for early-stage security companies • CISO advisor to venture capital firms internationally • Retained CISO for companies requiring a temporary or part-time CISO • International cybersecurity training and facilitation He is the former CISO at Levi Strauss & Co and has held senior security positions at Pacific Gas & Electric and Kaiser Permanente. Other positions Steve has held include senior engineering mgmt. roles in storage networks, data protection and enterprise operating systems. His credentials include multiple patents in data protection and multi-processor operating system design and CISSP, CISM and CRISC security certifications. Steve also co-hosts the CISOSeries Defense-in-Depth Podcasts and is a frequent speaker and panel moderator for webinars and industry events. Levi Strauss & Co. 5 years 10 months Chief Information Security Officer January 2021 - June 2021 (6 months) San Francisco Bay Area Responsible for leading the company’s global cybersecurity organization. Deputy Chief Information Security Officer (CISO) September 2017 - December 2020 (3 years 4 months) San Francisco Bay Area Accountable for defining and leading multiple programs in support of the company's cyber security objectives. Responsible for operational security leadership as well as providing leadership with business teams relative to security design and processes, as well security consulting expertise in support of strategic company initiatives. - Lead the company’s cybersecurity strategy, roadmaps and implementation in support of executing a risk based cybersecurity program to protect Levi Strauss’s information assets and brand reputation. - Lead the company’s Global Cybersecurity Threat Intelligence and Incident Response functions, including managing the international team of employees and contractors that monitors and responds to cyber events for the company. Page 2 of 5