Manager of Information Security, CITGO

Patricia Romero is the Manager of Information Security at CITGO Petroleum, where she leads and supports strategic cybersecurity initiatives across governance, risk and compliance, data protection and privacy, third-party and supply chain risk, artificial intelligence governance, incident response, and regulatory compliance. With 22 years of experience at CITGO, Patricia has extensive knowledge of the organization and works closely with business, IT, OT, Legal, and compliance stakeholders to translate cybersecurity and regulatory requirements into practical programs that protect CITGO’s information and critical assets while supporting business objectives. Her work includes advancing cybersecurity governance and risk management practices aligned with NIST frameworks and applicable regulatory compliance requirements, with a strong focus on emerging technologies, data protection, third-party risk, and responsible AI adoption. Patricia holds a Bachelor’s degree in Electronic Engineering from Universidad Simón Bolívar and a Master of Science in Telecommunications Management from Oklahoma State University.