The Virtual CISO Moment

Rick Hein is the cofounder of Strategic Defense. He is a cybersecurity SME who wants to teach your organization how to secure your networks and applications from threat actors by simulating real-world attacks. We touch on many topics, including the need to be truthful and transparent in information security.

Brian Liceaga is the SVP, Cybersecurity at Qubika, where they are shaping the future of next-generation applications by seamlessly integrating high-quality UX, robust security, and AI-driven intelligence. Join us as we discuss AI in cybersecurity, starting and exiting a business, and what a "carbon analyst" is (it may be related to V'Ger).

From the ISACA Middle Tennessee conference, March 2025. Dan Houser is a vCISO; 2024 Chair of the Board, ISC2; advisory strategist board member, NACD Certified Director, and more. He enables the business to take on more risk, safely, to acquire new markets, open new countries of operation and make connections that were impossible before. He helps organizations transition and achieve twice as much w...

Security practitioners and small and midsized business owners often do not pay necessary attention to the legal aspects of security and privacy. Thomas Ritter is an attorney and co-owner at Ritter Gallagher, a data privacy and cybersecurity law firm. Ritter Gallagher provides clients of all sizes with governance, risk management and compliance solutions based on a careful understanding of clients'...

For our milestone 200th conversation, Caleb Mattingly joins us. He is the founder of Secure Cloud Innovations. He is a a cybersecurity professional with a passion for solving complex challenges and building innovative solutions that empower organizations to stay secure in an ever-evolving digital landscape. With a deep understanding of security frameworks, risk management, and cloud environments,...

From the ISACA Middle Tennessee conference March 2025. Darin McCloy is the VP Security and Compliance, CISO at PolicyCo. He is also the Cyber Security, Compliance, and Risk Adviser at Clarity Cyber Assurance, providing Cyber Security and Compliance consultation for clients in a wide range of industry verticals. He helps businesses and government administrators identify, prioritize, and manage info...

Josh Graves is the Director of Business Development at Foojee. Foojee creates solutions for their clients that improve productivity, combining passion for Apple products with love of training others in order to improve businesses using Macs, iPhones, and iPads. Join our discussion as we discuss the security of Apple products and whether I should choose a Mac as my next business computer-I am serio...

From the ISACA Middle Tennessee conference March 2025. Will Klotz is a Senior Information Security Consultant at GuidePoint Security. As a CISSP-certified professional with an MBA and a proud veteran of the U.S. Army Signal Corps, he brings a unique blend of technical expertise, military discipline, and business leadership to the Governance, Risk, and Compliance (GRC) space. His career spans build...

Jim Bradfield is the CEO/Director at NAS Wireless. He is an experienced, innovative, visionary, professional CEO; leader, handler, cleaner, and mentor, with a demonstrated history of successfully completing high profile, complex, mission critical and stealth projects in the information technology and services industry. He has an MBA from the University of Phoenix and AT&T Computer Science cour...

David Kim (DK) is a trusted advisor as an AI, GRC, cybersecurity, and PCI DSS consultant and currently sits on Technical Advisory Boards, Governance Boards. He has centered his entire career around IT topics such as telecommunications, data networking, VoIP, unified communications, network management, information systems security, regulatory compliance, privacy, and auditing IT infrastructures for...

The views and opinions of the speaker do not represent the views and opinions of the FDIC. From ISACA Middle Tennessee Conference March 2025. Linda Finck was hired by the FDIC in December 1989 and currently serves as a Senior IT Examiner in the FDIC Dallas Region. She has: - 30+ years experience in the financial services industry (working for a national bank and FDIC) - 20+ years performing IT exa...

As featured in Top Cyber News Magazine's 2022 40 Under 40, Thomas Marr is an experienced information security professional with a lengthy history of supporting organizations ranging from tech startups to Fortune 500 companies to the United States Department of Defense (DoD). Thomas is also a proud veteran of the United States Army where he served on active duty as a Military Intelligence Analy...

From the Middle Tennessee ISACA Conference March 19, 2025. Adam Malone is a Leadership Consultant at The Tenacious Operator, a Leadership Consultancy with a focus on developing teams, not solely individuals. He works with Professional Services firms like Accountants, Engineers & Lawyers, Regional Banks, other small to medium businesses. In addition to Leadership Consulting he helps his partner...

Joshua Crumbaugh joins us for a special Thursday edition of The Virtual CISO Moment. With over 20 years of experience in cybersecurity, he is the CEO of PhishFirewall, a company that helps organizations solve their phishing problem. He has a credential in Offensive Security and has published a book on cybersecurity education and awareness. Join us as we discuss the human factor in securing informa...

As a Principal in the DenSecure team at Wolf & Company, P.C., Sean Goodwin leads and executes cybersecurity projects for clients across various industries, including healthcare, financial services, and retail. He has over a decade of experience in cybersecurity and information security and holds several credentials, such as GSE #271, CISSP, CISA, GIACx13, QSA, and PCIP. His mission is to help...

Chris Camacho is the Co-Founder and COO of Abstract Security. Abstract Security collects and routes data from cloud sources (such as AWS CloudTrail, Azure Activity Logs and GCP Audit Logs), removes unwanted noise, performs optimization, threat enrichment and normalizes data to OCSF schema in real-time before routing it to any SIEM or data lake of your choice. Join us as we discuss his path in info...

John Masserini is the founder and managing partner of SentiCon Security, the voice behind the award-winning blog Chronicles of a CISO, and a founding member of BSides South Florida. He also is the creator of the popular and very useful NIST Cyber Security Framework Maturity Toolkit, available on GitHub. He brings his years of experience as a CISO and as executive coach, Virtual CISO, independent c...

Tyler Bartley is a Cybersecurity Engineer at Critical Start. Join us as we discuss the benefits of taking a break to rediscover your passion, the risk o SMBs of unqualified personnel, and how music can help bring stress down.

Dylan Evans is the Workstream Owner at Simple Salt. They stop internet crime and demystify security for businesses with a lot to lose by explaining exactly how internet crime practically threatens business health and goals, and the easiest and most effective things you can do about it. Join us for a fascinating discussion as we dive into how we as an industry are failing SMB security and how we ca...

With over 23 years of experience in the IT industry, Ryan Burch is a seasoned and versatile leader with a proven track record of planning, executing, and delivering complex and innovative IT solutions that align with organizational goals. He is passionate about empowering teams, streamlining operations, and ensuring high standards of quality, security, and performance in all aspects of IT service...

Bob Davis joins us on a special episode to celebrate three years and 184 conversations on The Virtual CISO Moment. Bob is the Partner / Chief Information Security Officer of Franklin CISO Partners, LLC. Franklin CISO Partners provides virtual, fractional, and interim Chief Information Security Officer services to small and medium-sized clients in healthcare and financial services. Join us as we di...

In the first installment of the SMB SME Series, phishing awareness training SME Cary Johnson discusses the need for third-party audits of security awareness programs. As he noted in a recent LinkedIn post https://www.linkedin.com/posts/activity-7293297179073392644-dJ6P/ "Cybersecurity awareness programs will never truly be effective if we continue to let vendors measure the performance of their ow...

Mr. Michael Zambotti is a cybersecurity educator and consultant with extensive experience in the finance and legal industries. Michael teaches courses on governance, risk and compliance (GRC), cybercrime, and foundational cybersecurity classes at Saint Francis University. His practical experience and academic background uniquely position him to provide valuable insights to organizations to provide...

Dan Burgoon is the Founder and On-Demand CISO at k2 Cybersecurity Advisory, an agency that helps organizations transform cybersecurity, risk, and compliance from liability to market differentiator. They provide executive-level security leadership, helping companies protect data, ensure compliance, and mitigate risks—without the cost of a full-time CISO. He is an entrepreneurial security and techno...

Alex Bates is the Director of Information Security at Sinch. He is a business-minded and strategic information security leader with 13+ years of experience in technology and cybersecurity, including 10+ years leading global teams of up to 30 professionals. He is known for bringing teams and ideas together to achieve strong results in high-pressure environments through collaboration, trust, and tra...