The Business-First CISO: Leading Security Beyond Tech | Pasi Koistinen, CISO, Coinhako

Be Fearless Podcast by SquareX

Ever wondered what it really takes to lead security at a crypto company? In this episode, we sit down with Pasi Koistinen, CISO at Coinhako, who's spent more than two decades in the cybersecurity trenches. Pasi gets real about why being technically brilliant isn't enough anymore - you've got to speak the language of business to succeed as a CISO.
He also shares insights on browser security blind spots, why crypto companies face unique threats, and what he looks for when hiring security talent. If you're struggling to communicate security risks to executives or trying to figure out your next career move in security, Pasi's practical advice might be exactly what you need.
0:00 Introduction and being a business-minded security leader
7:22 Prioritizing as a CISO
10:05 The story behind Pasi’s book — "Smiling Security"
15:47 Learning from security incidents in crypto
20:31 Web3 security and protecting your funds
26:42 Browser security and emerging out-of-band attacks
38:31 Bybit hack and other supply chain attacks
41:12 Closing: Advice for aspiring professionals and CISOs
🔔 Follow Pasi and Aleksandra on:
https://www.linkedin.com/in/pasikoistinen/
https://www.linkedin.com/in/aleksandra-melnikova-1012/

🔥 Powered by SquareX
SquareX helps organizations detect, mitigate, and threat hunt web attacks happening against their users in real-time. Find out more about SquareX at https://sqrx.com/

Chapters

1. Introduction and being a business-minded security leader (00:00:00)

2. Prioritizing as a CISO (00:07:22)

3. The story behind Pasi’s book — "Smiling Security" (00:10:05)

4. Learning from security incidents in crypto (00:15:47)

5. Web3 security and protecting your funds (00:20:31)

6. Browser security and emerging out-of-band attacks (00:26:42)

7. Bybit hack and other supply chain attacks (00:38:31)

8. Closing: Advice for aspiring professionals and CISOs (00:41:12)