Business of Cyber

Brian Vallelunga is the CEO & Founder at Doppler, a universal secrets management platform. Brian and I discuss: 1. Founding 7 companies starting in high school 2. Product/market requirements when getting an idea off the ground  3. The Chipotle sales strategy  4. Going through YC and raising money from Sequoia & GV 5. Doppler & where they're going 

Chris Castaldo is the Chief Information Security Officer at Crossbeam, the world's first and most powerful partner ecosystem platform. Chris is also the author of the best selling book Start-Up Secure: Baking Cybersecurity into your Company from Founding to Exit and is a visiting fellow at the National Security Institute at George Mason University's Antonin Scalia Law School. Year 1 proc...

Joshua Scott is the Head of Information Security & IT at Postman, an API management platform meant to simply & manage each step of the API lifecycle. Postman has raised over $400m from investors like Insight, Coatue, and Battery Ventures. Prior to taking the CISO role at Postman, Josh was the CISO at Move Inc, the parent company of Realter.com and a subsidiary of News Corp. During the conv...

Ross Hosman is the CISO at Drata, a Series A staged security and compliance automation company. Drata announced their Series A last month, with investment from GGV Capital, SVCI, Okta Ventures, and other prominent investors. They're focused on automating compliance requirements like ISO27001 & SOC2 so organizations can spend more time growing their businesses and less time doing manual co...

White Canyon Software is a data erasure company headquartered outside of Salt Lake City. I met with their CEO Paul Katzoff and discussed: How did Paul rise from a tech support role to CEO? What's it like operating a security technology company that hasn't raised outside capital? Why is the data-erasure space a growing segment of the market? How do they work with both small & large customers?&n...

Guy Fletcher is currently the CEO & Founder at Cider Security, a stealth mode startup based in Tel Aviv. Prior to founding Cider, he was the CISO at AppsFlyer, a late-stage startup that's raised $300 million from leading VC firms like Goldman Sachs, Salesforce Ventures, and General Atlantic. While Guy was at AppsFlyer, one of the biggest pain points he felt was a significant gap between the se...

Craig Goodwin is the Co-Founder and Chief Product & Strategy Officer at Cyvatar.ai , a cybersecurity startup building a platform that offers a membership-based model for cyber security-as-a-service. Prior to starting Cyvatar, Craig was the Chief Trust & Risk Officer at Fujitsu, the massive Japanese IT services company. Prior to Fujitsu, Craig spent time at CDK Global, Monster, and the UK I...

Ty Sbano is the Chief Security & Trust Officer at Sisense , a business intelligence & data analytics unicorn headquartered in New York. Sisense was originally founded in Tel Aviv and has global offices in SF, Scottsdale, London, Melbourne, Tokyo, & Kiev. Ty has been in the security industry for 15 year and has a wide range of experience across many industries at companies like Lending...

Al Ghous is the Global Chief Information Security Officer at Envision Digital, a global AIoT technology organization. Prior to Envision Digital, Al served as Chief Security Officer at ServiceMax and was previously responsible for Cloud Platform, Product, and IoT security at GE Digital. Al has been in the Cyber Security industry for over 20 years contributing in different capacities from Product Se...

In this episode with Monica Verma, we discuss how a tour of an airplane's cockpit started a lifelong quest for a career in technology. She's now the CISO at the Norwegian Directorate of Health, is on the Board of the Cloud Security Alliance, and has held a number of security leadership roles at firms like PwC, Siemens, & Norges Bank, the Central Bank of Norway. She talks about her career in se...

John Bambenek is the President of Bambenek Labs, a security agency focused on providing cyber services in forensics, incident response, and managed services. John's spoken at conferences like ISC, BlackHat, SANS, and a number of other well known conferences. Additionally, he's huge contributor to the info sec community. During our conversation we explore how he's focused on communication, persuati...

Jeff Wagner is the CEO of Aspis, a cyber & administrative services company serving both government and commercial clients. Prior to founding Aspis, Jeff was the CISO at the Farm Production & Conservation, one of the largest Department's within the US Department of Agriculture. During today's show we cover, What did Jeff have to focus on during his transition from a security pract...

Paul Love is the CISO and Privacy Officer at CO-OP Financial Services, an interbank network connecting credit union ATM's nationwide. Prior to CO-OP, Paul held security leadership roles at Freddie Mac, Ally Financial, Microsft, and Cetera Financial Group. On today's show, Paul and I spent time exploring: How security leaders can become phenomenal story tellers How does Paul prepare when he's prese...

Jason Loomis is the CISO at MINDBODY, the SaaS solution provider serving the health, wellness, and beauty space. If you've recently booked a fitness class. there's a pretty good chance you scheduled the class through their platform. Jason shares he thinks most security professionals are too focused on the technical and not enough focus on telling the story. Jason credits his MBA for helping to ref...

Ross Young is currently the CISO at Caterpillar Financial Services, the bank behind the massive construction manufacturer. Prior to Caterpillar, Ross spent 2 years as a Divisional CISO at Capital One as well as over 10 years with the US government at organizations like the CIA, NSA, and Federal Reserve Board.  On today's show, Ross and I explore his early desire to be a CISO and discuss how h...

Roger Hale is currently the CSO at BigID, a startup that uses Machine Learning and Identity Intelligence to help organizations find, track and govern their Critical Data. Prior to that, Roger was the CISO at Informatica & Brocade, and held security leadership roles at Symantec, Lending Club, & inkling.  On today's show, Roger and I discuss how he's viewed his job as a CISO pivot from...

Rick Howard is a legend in the security industry, having most recently served as the CSO at Palo Alto Networks. Rick's currently the CSO, Senior Fellow, and Chief Analyst at the CyberWire, one of the leading cybersecurity media & publishing companies. Rick is a self described "old army guy" having spent nearly 30 years in the US Army prior to transitioning to a commercial career with companies...

Jack Jones is one of the most well respected thought leaders in risk management and information security.  During his 30 years in the industry he has garnered a decade of experience as a CISO, including five years for a Fortune 100 financial services company. His work has also been recognized by his peers and the industry, earning him the 2006 ISSA Excellence in the Field of Security Pra...

Daniel Hooper is currently the CISO at Varo Money, one of the leading mobile first digital banks in the US. Prior to Varo, Daniel was the CISO at PIMCO, the global investment firm with nearly $2trillion USD in assets under management. Daniel and I connected via LinkedIn following a viral post of his regarding how CISO's should respond to the questions, "Are we good?" & "Are we secure?" These a...

Heath Renfrow is the Director & CISO at The Crypsis Group, an incident response and CISO advisory consulting firm. Prior to Crypsis, Heath has held CISO roles at the DoD, Army Healthcare, & the US Army Corp of Engineers. During the conversation, Heath and I cover: How has a career in the military prepared him for experience in the commercial security sector? How has he developed skill set'...

Vic Bhatia is the Head of Security GRC at Novi, a subsidiary of Facebook. Vic's experience spans across all sectors and a wide range of both consulting and security leadership roles. During the conversation we explore: What is the Facebook Novi project and how is Vic helping to operate their program? Why does Vic believe the most important area of focus for a security professional should be busine...

Sian John is the EMEA Director of Cybersecurity Strategy for Microsoft, leading a team of Chief Security Advisors who provides expert guidance and consulting services to some of Microsoft's largest customers throughout the region. Prior to Microsoft, Sian held a similar leadership roles at Symantec where she focused on helping customers build cyber strategy and refine the vision for their programs...

Dan Blum is the Managing Director at Security Architects Partners, a consulting firm focused on cybersecurity leadership, architecture, and risk management. Prior to starting the firm, Dan was a research analyst at the Burton Group, which was subsequently acquired by Gartner in 2010. Additionally, he has security leadership experience at organizations like Respect Network and KuppingerCole. Most r...

Peter Liebert is currently the CISO at Cerner Government Services, the leading EHR provider for the public sector. Prior to joining Cerner, Peter was chosen by his peers to be the 2019 Chief Security Officer of the Year by SC Magazine. Additionally, he's the former CISO for the State of California and is a security visionary with over 19 years of leadership experience in private, Federal (includin...

Bill Bonney is a well known figure in the security community having co-authored the CISO Desk Reference Guide with Matt Stamper & Gary Hayslip. Their book series is a meant to be a practical guide to help modern CISO's take on many challenges including executive leadership, communication, and business savvy. So of course, right in our wheelhouse.  The books recently been published into th...