The Virtual CISO Moment

In this episode of The Virtual CISO Moment , Greg Schaffer welcomes Travis Stein, a security engineer whose journey from IT help desk to leading enterprise security programs offers valuable lessons for cybersecurity professionals at every stage of their careers. Travis shares how burnout led him to pursue cybersecurity, why a strong IT foundation remains invaluable, and how networking on LinkedIn...

In this episode of The Virtual CISO Moment , Greg Schaffer welcomes cybersecurity veteran, consultant, author, podcaster, and private pilot Andrew Kalat for a wide-ranging discussion spanning more than three decades in information security. Andrew shares his journey from the early days of bulletin board systems and managed security services to leadership roles at organizations including Check Poin...

In this episode of The Virtual CISO Moment , Greg Schaffer welcomes Bruno Lecoq, Co-Founder, CEO, and CISO of BEMO, for a wide-ranging conversation on Microsoft's evolving security ecosystem, CMMC compliance, and the realities of securing small and midsized businesses. Drawing on nearly two decades at Microsoft and years leading an award-winning cybersecurity firm, Bruno shares insights on the...

In S8E22, Greg Schaffer sits down with Alan Clinard, founder of Athena vCISO Services, to explore what it really means to be a trusted security advisor. Drawing from a career that spans the U.S. Army, operational risk consulting, banking, critical infrastructure, and virtual CISO services, Alan shares how understanding the business—not just the technology—is the key to effective cybersecurity lead...

Cy Sturdivant returns to the Virtual CISO Moment to share lessons from more than two decades in cybersecurity, financial services, and consulting. The conversation explores the importance of professional relationships, security program maturity, AI adoption in banking, and why organizations that focus solely on compliance often struggle to improve their overall security posture. Cy also discusses...

In this episode of The Virtual CISO Moment , Greg Schaffer sits down with cybersecurity leader and Cyber Risk Navigator founder Becky MacDonald to discuss the evolution of cybersecurity leadership, the realities of virtual CISO work, and why effective security programs must be built around risk—not just compliance checklists. Drawing from decades of experience across healthcare, higher education,...

In this episode of The Virtual CISO Moment , Greg Schaffer sits down with Jonathan Weaver to discuss the evolving role of governance, risk, and compliance in today’s cybersecurity landscape. Jonathan shares his journey from the University of Tennessee into cybersecurity consulting, the lessons he learned building ProInsight, and why trust and relationships are often the most valuable assets in sec...

In this episode, Jackie Shoback—Co-Founder of 1414 Ventures and seasoned C-suite leader—joins Greg to explore how cybersecurity has evolved from a back-office IT function into a core business strategy. Drawing on decades of experience across enterprise and financial services, Jackie breaks down why digital identity and trust are now at the center of modern security , and how organizations must ret...

At the 2026 Middle Tennessee ISACA conference I had the chance to sit down for short chats with a few information security pros: India James, who spoke on the importance of security and digital trust at the conference; Ken Smith, Director of Sales Engineering Enterprise for the Great Lakes at Arctic Wolf; and Jonathan Weaver, Partner at ProNsight's Risk and Compliance Consulting Practice.

Rich Bates shares a candid look at his 30+ year journey into cybersecurity, from early computing days to leading GRC programs and now building his own advisory practice focused on helping organizations tackle CMMC and compliance challenges. Along the way, he breaks down why these frameworks matter, the real risks businesses face if they ignore them, and how to approach security in a practical, bus...

What does it really take to evolve into a modern vCISO—and why does it matter more than ever? In this episode, Joseph Gunnells shares his journey from early technical roles to a strategic governance, risk, and compliance leader, revealing how real-world experience—not just certifications—shapes effective security leadership. He breaks down the biggest challenges organizations face when engaging a...

From firefighter aspirations to securing the defense industrial base—this episode of The Virtual CISO Moment dives into a career path that didn’t follow the plan… and turned out better because of it. Robert Duchesne shares how a pivot from the Air Force into cybersecurity led him to supporting national security missions, leading enterprise security operations, and ultimately launching RD3 Technolo...

In this episode of The Virtual CISO Moment , Jason Makevich shares his journey from MSP roots to building Greenlight Cyber and PORT1, along with his mission to simplify cybersecurity for SMBs. He unpacks the problem of “duct tape on duct tape” security—where too many tools create complexity without real protection—and makes the case for a secure-by-design, zero trust approach. The conversation als...

Most cybersecurity professionals don’t have a talent problem—they have a visibility problem. In this episode of The Virtual CISO Moment , Greg Schaffer sits down with Angelle Ferrer to unpack why even highly qualified professionals are struggling to get noticed in today’s AI-driven job market. From ghosting and overloaded applicant systems to the hidden power of personal branding and storytelling,...

Cybersecurity isn’t just about technology—it’s about mindset, risk, and understanding where organizations are truly vulnerable. In this episode of The Virtual CISO Moment, host Greg Schaffer sits down with cyber threat intelligence professional Travis Whitesel to explore the evolving intersection of military intelligence, cybersecurity, and emerging risks in unexpected places like the sports indus...

Cybersecurity leaders often struggle to translate technical risk into something the business actually understands. In this episode of The Virtual CISO Moment, Greg Schaffer sits down with Jack Rumbaugh, an experienced CISO and virtual CISO with a background spanning telecommunications, healthcare, finance, and global enterprises. Jack shares how security leaders can communicate cyber risk in the l...

Jeremy Krienke, founder and CEO of Sidewalk Security Advisors, shares his journey from early threat intelligence work alongside federal partners to leading security programs in banking and fintech—and ultimately launching his own advisory firm. In this episode, Jeremy and Greg explore what it really means to serve as a fractional CISO, how to uncover and align to a company’s true risk appetite, an...

In this episode of The Virtual CISO Moment, Greg Schaffer sits down with Chris Kimpland, CEO of Velocity Incident Response, a service-disabled veteran-owned firm specializing in digital forensics and incident response A former U.S. Army combat engineer, Chris has led hundreds of ransomware negotiations and brings a candid, frontline perspective to what unfolds during an active breach. He shares wh...

In this episode of The Virtual CISO Moment, Greg Schaffer sits down with cybersecurity architect Dr. Natalia Semenova for a deep dive into the evolving world of AI risk and security architecture With a Ph. D. in applied mathematics and experience spanning Google, Microsoft, Mercedes-Benz, and Deloitte, Natalia shares how her mathematical mindset shapes her approach to threat modeling, agentic AI,...

What does real security maturity actually look like—beyond checklists and audits? In this episode of The Virtual CISO Moment, Greg Schaffer sits down with Mariia Erokhina, a global security leader who challenges the industry’s obsession with controls and compliance theater. Mariia shares why security must be embedded into business operations, how executives misunderstand risk ownership, and what a...

In this episode of The Virtual CISO Moment, Greg Schaffer talks with cybersecurity veteran Scott Foote about what hasn’t changed in cyber risk over the last 35 years—and why AI is amplifying those same mistakes at unprecedented speed. They discuss shadow AI, insecure defaults, “vibe coding,” privacy risks, and the growing need for practical AI governance. Drawing on decades of experience across in...

In this episode of The Virtual CISO Moment , Greg sits down with Mike Gropp to explore an unconventional journey into cybersecurity—from entrepreneurship and living in China to offensive security and red teaming. The conversation dives deep into the real-world risks of “vibe coding,” AI-driven development, and why security can’t be an afterthought for business builders. Mike also shares hard-earne...

How do you explain security risk to executives who don’t speak “security”? What really changes when you move between regulated industries like healthcare and energy? And why are communication skills just as critical as technical ones in cybersecurity? In this episode, Greg Schaffer speaks with Tatiana Argueta, Senior Security Engineer, about: *Operating security programs in regulated environments...

What happens when a routine IT problem turns into a full-blown ransomware crisis? In this episode of The Virtual CISO Moment , Greg Schaffer sits down with Zach Lewis , CIO, CISO, and author of Locked Up , to explore the reality of leading through a LockBit ransomware attack—without the benefit of hindsight. Zach takes listeners inside the moment things went sideways: the rapid shift from disaster...

In the Season 8 premiere of The Virtual CISO Moment , host Greg Schaffer sits down with Corey LeBleu, Founder and CEO of Relix Security, to explore how offensive security and penetration testing are evolving in a world shaped by cloud platforms, AI, and “vibe coding.” With more than two decades of hands-on experience in application and network penetration testing—including leadership roles at Veri...