The New CISO

Guest: Joseph Vossler, Manager, Head of Global Threat Management, Security Operations, & Incident Response, Nutanix Joseph Vossler's career runs from a counter-cartel task force in Houston to the team that first walked into Volt Typhoon. In this episode of The New CISO, he tells Steve Moore how sixteen years of Army intelligence, counter-drug work and federal incident response produced a three...

Zach Lewis has spent his career asking for things before anyone offered them. In this episode of The New CISO, he joins Steve Moore from Black Hat in Las Vegas to trace a path from fixing neighbors' laptops to running IT and security for a university — and to explain why he wrote a book about it. The origin story is a series of conversations most people never start. A few weeks into a new job at a...

Sean Murphy spent more than twenty years in the CISO chair and walked away from it while things were going well. In this episode of The New CISO, he returns to talk with Steve Moore about trading the operational seat for a field CISO role at F5 — and why getting too good at the job was the warning sign. Sean reintroduces himself: 21 years in Air Force medicine, multiple post-retirement CISO gigs i...

In this episode of The New CISO, host Steve Moore welcomes Sherri Douville for a conversation that sits outside the show's usual lane — less war story, more blueprint. Sherri works alongside CISOs rather than inside the role, and arrives with a pointed argument about what the job is becoming. She starts with why TTIC exists. IEEE UL 2933 gave healthcare a full-stack standard for clinical IoT devic...

Ravi Soin has clear advice for anyone starting a security career today: don't be a risk manager, be a trust architect. In this episode, Steve Moore sits down with Ravi—CIO and CISO at Smartsheet—for a builder's-eye conversation on the modern CISO role, AI as an accelerant on old sins, and why the CISO who still says “no” is already obsolete. Ravi traces his path through Sun Microsystems, RealNetwo...

What if your next breach came down to a token budget? In this episode, Steve Moore is joined by Lou Rabon, Founder and CEO of Cyber Defense Group, for a conversation on the modern CISO's world—from how to interview for the seat, to why AI agents are the next insider threat, to research that reframes breach cost as a token calculation. Lou and Steve open on breach response, why making introductions...

What separates a CISO who survives from one who shapes the boardroom? In this episode, Steve Moore sits down with Walt Powell, Lead Field CISO at CDW and author of The CISO 3.0, to unpack the modern CISO playbook—why technical credentials alone no longer cut it, how to build personal eminence, and why most security leaders are still treated as second-class C-suite citizens. Walt traces his path fr...

What happens when an AI agent inside your company starts behaving like an insider threat? In part two, Steve Moore picks the thread back up with former FBI operative Eric O'Neill to explore how agentic AI is rewriting cybersecurity, the legal traps that follow a breach, and why the modern CISO must think like a spy hunter. Eric opens with a sobering reality: ransomware victims who decline to pay a...

What does it feel like to stand in the smoking ruin of a ransomware attack? In this episode, Steve Moore is joined by former FBI undercover operative Eric O'Neill—the man who helped capture Robert Hanssen—to explain why modern cybercrime is just traditional espionage repackaged, and why the dark web has quietly become the world's third-largest economy. Eric traces his path from the FBI's counterin...

Cybersecurity debates tend to center on tools, frameworks, and threats. But Rob Knoblauch has built a 25-year career in global security leadership by focusing on the soft skills that determine whether a CISO survives, thrives, or burns out. In this episode of The New CISO, Rob joins Steve Moore to trace the through-line from running a multi-node BBS as a kid to serving as Deputy CISO of one of the...

What does sharpening a knife over a case of onions have to do with incident response? For Myke Lyons, CISO at Cribl, the answer is everything. Myke trained at the Culinary Institute of America — learning speed and accuracy under the clock of a professional kitchen — before a summer IT job in Manhattan set him on an entirely different path. In this episode of The New CISO, host Steve Moore traces t...

Alan Lucas always wanted to be an architect or a firefighter — as CISO of Worldstream and Greenhouse Datacenters, he has become both. In this episode, he joins host Steve Moore to explore leading cybersecurity at the intersection of design and crisis response. Alan traces his path from Fox-IT through a Dutch cryptocurrency exchange where he arrived post-breach to an organization under near-constan...

In this episode of The New CISO, host Steve Moore speaks with Dean Sapp, CISO and Data Protection Officer at Filevine, about one of security's most critical yet overlooked skills—written communication. Drawing from a brutal college English class that failed students for a single typo and over 20 years building security programs in the legal tech industry, Dean reveals why the ability to articulate...

In this episode of The New CISO, host Steve Moore speaks with Manuel "Manu" Ressel, CISO at SAUTER Group, about his unconventional journey from classroom teacher to cybersecurity leader—and why the "Four Cs" of modern education provide a powerful framework for building effective security programs. Drawing from years as both a teacher and school principal in Germany, Manu introduces Critical Thinki...

In this episode of The New CISO , host Steve Moore speaks with Alex Rice, Founder, CTO, and CISO at HackerOne, about challenging one of cybersecurity's most deeply held beliefs—that security should be the top priority. Drawing from his journey building security programs at Facebook and founding HackerOne, Alex introduces the "safety third" philosophy and explains why accepting that security is nev...

In this episode of The New CISO , host Steve Moore speaks with Iain Paterson , Chief Information Security Officer at Well Health Technologies , about his unconventional path into cybersecurity and the lessons learned from building programs across industries—from banking and healthcare to breach response and beyond. From skipping college to take an eight-month technical boot camp to leading enterpr...

In this episode of The New CISO (Episode 137), host Steve Moore speaks with Gideon Knocke, CISO at Visage Imaging , about rethinking how we grow in our careers and why learning to “think outside the job” is key to long-term success. From studying cybersecurity when the field was still new to leading security for millions of patient records in healthcare, Gideon shares how his early curiosity and “...

In this episode of The New CISO (Episode 136), host Steve Moore speaks with Carl Cahill, CISO , about a deliberate, methodical approach to career growth—and why every leader must “pick their pain” to progress. From combat arms in the U.S. Army to Active Directory engineering and large-enterprise incident response, Carl shares the pivotal choices that shaped his leadership. He opens up about moving...

Most security professionals know what a CISO does. But what about a BISO? And why are Fortune 500 companies increasingly creating this executive role? In this episode of The New CISO Podcast, host Steve Moore sits down with Evan Ferree, Staff Vice President and Business Information Security Officer at a Fortune 50 company, to decode one of cybersecurity's most misunderstood leadership positions. W...

In this episode of The New CISO , host Steve Moore speaks with Dr. Timo Wandhöfer , Group CISO and Head of Information Security & Business Continuity Management at Klöckner & Co , about the evolving responsibilities of modern CISOs and why influencing—not just convincing—stakeholders is essential for success. From his early career as a researcher in computer science to leading global secur...

In this episode of The New CISO , host Steve Moore speaks with Steve Lodin , VP of Information Security at Sallie Mae , about the career challenges that shaped his leadership style and the lessons he’s learned across decades in cybersecurity. From breaking into his high school to experiment with Apple II computers to leading global security teams in Europe, Steve shares the pivotal experiences tha...

In this episode of The New CISO , host Steve Moore speaks with Marius Poskus, Chief Information Security Officer at Glow Financial Services and creator of the Cyber Diaries podcast. Marius shares his journey from physical security into cybersecurity leadership—and how he did it without relying on traditional certifications. Marius reflects on how self-directed learning, mentorship, and a strong pe...

In this episode of The New CISO , host Steve Moore speaks with Aleksandar Radosavljevic, Global CISO at Global Fashion Group, about building trust, measuring resilience, and the evolving role of the security leader. Aleksandar shares how his unexpected pivot from electrical engineering to cybersecurity sparked a passion for protecting systems and solving problems. With over two decades of experien...

In this episode of The New CISO , host Steve Moore speaks with Keith Price, Chief Security Officer at National Highways, about the evolving responsibilities of modern security leaders and the critical role of convergence between cyber, physical, and people security. Keith shares real-world stories from his work protecting England’s strategic road network—used by over four million people daily—and...

In this episode of The New CISO , host Steve Moore speaks with Ben, Director of Group Security and Architecture at Bilfinger, about the role of self-awareness, confidence, and communication in effective cybersecurity leadership. Ben shares his unconventional path to becoming a CISO, how he applies the “ done is better than perfect ” philosophy, and why embracing vulnerability, curiosity, and creat...