What Makes a Successful CISO?

Defense in Depth

#Security #Software Development #Tech News #Cybersecurity #Informationsecurity #David Spark #Tech #News #Geoff Belknap #Steve Zalewski #CISO #CISOSeries #InfoSec

28:52

Retailers are facing a rapidly evolving landscape where consumer expectations, AI advancements, and social media platforms like TikTok are redefining engagement. It feels like the holiday shopping season just ended, but when do retailers start planning for the next one, and some retailers already behind the curve for this season? Joining us today is Carey Cockrum, Director of Consulting at Cella by Randstad Digital, where she helps major brands and marketing teams optimize their strategies with data-driven insights, AI-powered content creation, and cutting-edge retail marketing trends. With the holidays just around the corner, she’s here to share what’s next for retail marketing, campaign optimization, and how brands can stay ahead in a hyper-competitive space. ABOUT CAREY COCKRUM Carey has been a part of the Creative Agency space for nearly 30 years. She has served as Designer, Creative Director, Creative Operations Lead and Agency Lead in both internal and external agencies (big and small). Carey has worked directly with C-suite stakeholders to understand organizational strategies that inform effective creative solutions. She is a bit of a data nerd and loves demonstrating results. Brands she’s supported include Fruit of the Loom, Wendy’s and Humana. In her free time, she enjoys going back to her creative roots through painting and drawing. She also spends her time improving upon the house she lives in today in Southern, MI - inside and out. RESOURCES Catch the future of e-commerce at eTail Boston, August 11-14, 2025. Register now: https://bit.ly/etailboston and use code PARTNER20 for 20% off for retailers and brands Don't Miss MAICON 2025, October 14-16 in Cleveland - the event bringing together the brights minds and leading voices in AI. Use Code AGILE150 for $150 off registration. Go here to register: https://bit.ly/agile150 Connect with Greg on LinkedIn: https://www.linkedin.com/in/gregkihlstrom Don't miss a thing: get the latest episodes, sign up for our newsletter and more: https://www.theagilebrand.show Check out The Agile Brand Guide website with articles, insights, and Martechipedia, the wiki for marketing technology: https://www.agilebrandguide.com The Agile Brand podcast is brought to you by TEKsystems. Learn more here: https://www.teksystems.com/versionnextnow The Agile Brand is produced by Missing Link—a Latina-owned strategy-driven, creatively fueled production co-op. From ideation to creation, they craft human connections through intelligent, engaging and informative content. https://www.missinglink.company…

about a year ago 33:40

MP3•Episode home

All links and images for this episode can be found on CISO Series.

Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Christina Shannon, CIO, KIK Consumer Products. Joining us is our guest, Tomer Gershoni, CSO, Zoominfo.

In this episode:

Moving beyond technology
The art of a CISO
CISOs always operate in context
Elevating the CISO conversation

Thanks to our podcast sponsor, SeeMetrics

SeeMetrics automates cybersecurity metrics programs, continuously measuring and helping prioritize risks based on context. SeeMetrics unifies siloed data from your security stack and offers hundreds of ready-to-use metrics. Once connected with SeeMetrics, security teams reduce risk, minimize exposure and optimize performance while eliminating tedious repetitive manual work.

Ready to automate your security programs? start connecting your environment at seemetrics.co

308 episodes

Defense in Depth

What Makes a Successful CISO?

Defense in Depth

207 subscribers

published about a year ago

MP3•Episode home

All links and images for this episode can be found on CISO Series.

In this episode:

Moving beyond technology
The art of a CISO
CISOs always operate in context
Elevating the CISO conversation

Thanks to our podcast sponsor, SeeMetrics

Ready to automate your security programs? start connecting your environment at seemetrics.co

308 episodes

#Security #Software Development #Tech News #Cybersecurity #Informationsecurity #David Spark #Tech #News #Geoff Belknap #Steve Zalewski #CISO #CISOSeries #InfoSec

All episodes

Defense in Depth

1
How Much Should Salespeople Know About Their Product? 27:18

4 days ago27:18

27:18

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by David Spark , the producer of CISO Series, and Steve Zalewski . Joining us is Jay Jay Davey , vp of cyber security operations, Planet . In this episode: Aligning incentives The realities of the job Delivering ROI Holistic cybersecurity Thanks to our sponsor, Backslash Security Backslash offers a new approach to application security by creating a digital twin of your application, modeled into an AI-enabled App Graph. It categorizes security findings by business process, filters “triggerable” vulnerabilities, and simulates the security impact of updates. Backslash dramatically improves AppSec efficiency, eliminating legacy SAST and SCA frustration. Learn more at www.backslash.security .…

Defense in Depth

1
Why Are We Still Struggling to Fix Application Security? 28:14

11 days ago28:14

28:14

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark , the producer of CISO Series, and Steve Zalewski . Joining us is our sponsored guest, Eric Gold , chief evangelist, BackSlash . In this episode: Start with the culture Moving AppSec to a higher level A strategy for security Maturing the basics Thanks to our sponsor, Backslash Security Backslash offers a new approach to application security by creating a digital twin of your application, modeled into an AI-enabled App Graph. It categorizes security findings by business process, filters “triggerable” vulnerabilities, and simulates the security impact of updates. Backslash dramatically improves AppSec efficiency, eliminating legacy SAST and SCA frustration.…

Defense in Depth

1
What Can Someone with No Experience Do in Cybersecurity? 26:25

18 days ago26:25

26:25

All links and images for this episode can be found on CISO Series . Check out this post from Jerich Beason , CISO at WM , for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark , the producer of CISO Series, and Dan Walsh , CISO, Datavant . Joining us is Rinki Sethi , vp and CISO, BILL . In this episode: You need a solid foundation A lot depends on the role Underappreciated skills Structures and frameworks Huge thanks to our sponsor, Recorded Future Every day, security teams face an impossible challenge: sorting through millions of threats, each potentially critical. But somewhere in that noise are the signals you can't afford to miss. Recorded Future's gives you the power to outpace AI-driven threats through intelligence tuned specifically to your needs, enabling you to act with precision. Their advanced AI detects patterns human eyes might miss, while their experts provide context that machines alone cannot. Visit recordedfuture.com to learn more about securing what matters to your business.…

Defense in Depth

1
Are New Gartner-Created Categories/Acronyms Helping or Hurting the Cybersecurity Industry? 26:47

25 days ago26:47

26:47

All links and images for this episode can be found on CISO Series . Check out this post from Caleb Sima of WhiteRabbit for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark , the producer of CISO Series, and Geoff Belknap . Joining us is Alex Hutton , CISO, Atlantic Union Bank . In this episode: The race to differentiate Don’t blame Gartner Simplifying is complicated Seeking connection Huge thanks to our sponsor, ThreatLocker ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com .…

Defense in Depth

1
Can AI improve Third-Party Risk Management (TPRM) 29:00

5 weeks ago29:00

29:00

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark , the producer of CISO Series, and Jason Elrod , CISO, MultiCare Health System . Joining us is our sponsored guest, Nick Muy , CISO, Scrut Automation . In this episode: Supercharging teams Shifting to proactive A unique opportunity A human in the legal loop HUGE thanks to our sponsor, Scrut Automation Scrut Automation empowers compliance and risk teams of all sizes to build enterprise-grade security programs effortlessly. With powerful automation, AI-driven efficiencies, and seamless integrations, Scrut eliminates compliance debt and enables proactive risk management—helping your business stay secure as it scales. Visit www.scrut.io to learn more or schedule a demo.…

Defense in Depth

1
Cybersecurity Is NOT an Entry-Level Position 31:46

6 weeks ago31:46

31:46

All links and images for this episode can be found on CISO Series . Check out this post by Tallis Jordan of the U.S. Army Cyber Command for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark , the producer of CISO Series, and Steve Zalewski . Joining us is Montez Fitzpatrick , CISO, Navvis . In this episode: Start with foundations Learning to learn Don’t get hustled Building a pipeline HUGE thanks to our sponsor, Scrut Automation Scrut Automation empowers compliance and risk teams of all sizes to build enterprise-grade security programs effortlessly. With powerful automation, AI-driven efficiencies, and seamless integrations, Scrut eliminates compliance debt and enables proactive risk management—helping your business stay secure as it scales. Visit www.scrut.io to learn more or schedule a demo.…

Defense in Depth

1
Hey Vendors, What Problem Is Your Product Solving? 28:22

7 weeks ago28:22

28:22

All links and images for this episode can be found on CISO Series . Check out this post from Yaron Levi for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark , the producer of CISO Series, and Mike Johnson , CISO, Rivian . Joining us is Yaron Levi , CISO, Dolby . In this episode: A knowledge deficit Talk is cheap What’s the difference? Answer the preliminaries HUGE thanks to our sponsor, Scrut Automation Scrut Automation empowers compliance and risk teams of all sizes to build enterprise-grade security programs effortlessly. With powerful automation, AI-driven efficiencies, and seamless integrations, Scrut eliminates compliance debt and enables proactive risk management—helping your business stay secure as it scales. Visit www.scrut.io to learn more or schedule a demo.…

Defense in Depth

1
We've Been Fooled. There Is No Talent Shortage. 26:18

8 weeks ago26:18

26:18

All links and images for this episode can be found on CISO Series . Check out this post by Rachel Bicknell of Dell Technologies quoting Mic Merritt of Merritt Collective for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark , the producer of CISO Series, and Jimmy Sanders , president, ISSA International . Joining them is Ngozi Eze , CISO, Levi Strauss . In this episode: Stop the unicorn hunt Job post inflation Structural misalignment We’ve got to do better Huge thanks to our sponsor, ThreatLocker ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com .…

Defense in Depth

1
Is There an Increasing Consolidation of Vendors in the SOC? 32:28

9 weeks ago32:28

32:28

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Howard Holton , CTO, GigaOm . Joining us is Francis Odum , founder, Software Analyst Cybersecurity Research . In this episode: Rebalancing the SOC The case for consolidation It comes down to data Concentric cycles Thanks to our podcast sponsor, Palo Alto Networks Cortex Cloud, the next generation of Prisma Cloud, merges best-in-class CDR with industry-leading CNAPP for real-time cloud security. Harness the power of AI and automation to prioritize risks with runtime context, enable remediation at scale, and stop attacks as they occur. Bring together your cloud and SOC on the unified Cortex platform to transform end-to-end operations. Experience the future of real-time cloud security at https://www.paloaltonetworks.com/cortex/cloud .…

Defense in Depth

1
Are CISOs Struggling to Get Respect? 32:08

10 weeks ago32:08

32:08

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Lee Parrish , CISO, Newell Brands . Joining us is David Tyburski , vp of information security and CISO, Wynn Resorts . In this episode: CISOs need to stick around Culture forward CISOs need support This isn’t always about budget Thanks to our podcast sponsor, Palo Alto Networks! Cortex Cloud, the next generation of Prisma Cloud, merges best-in-class CDR with industry-leading CNAPP for real-time cloud security. Harness the power of AI and automation to prioritize risks with runtime context, enable remediation at scale, and stop attacks as they occur. Bring together your cloud and SOC on the unified Cortex platform to transform end-to-end operations. Experience the future of real-time cloud security at https://www.paloaltonetworks.com/cortex/cloud .…

Defense in Depth

1
Is Platformization Vs Best-of-Breed a False Dichotomy? 29:00

11 weeks ago29:00

29:00

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ). Joining us is Elad Koren , vp, product management, Cortex Cloud, Palo Alto Networks . In this episode: Context drives the decision A full-spectrum understanding Think practical The long play Thanks to our podcast sponsor, Palo Alto Networks Cortex Cloud, the next generation of Prisma Cloud, merges best-in-class CDR with industry-leading CNAPP for real-time cloud security. Harness the power of AI and automation to prioritize risks with runtime context, enable remediation at scale, and stop attacks as they occur. Bring together your cloud and SOC on the unified Cortex platform to transform end-to-end operations. Experience the future of real-time cloud security at https://www.paloaltonetworks.com/cortex/cloud .…

Defense in Depth

1
Protecting Your Backups from Ransomware 29:43

12 weeks ago29:43

29:43

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and DJ Schleen , former distinguished security architect, Yahoo. Joining us is our sponsored guest Heath Renfrow , co-founder, Fenix24. In this episode: Get creative Shift the focus of backups Failing the test Moving beyond false hope Thanks to our podcast sponsor, Fenix24 You’ve invested in cybersecurity, but can your business recover when it counts? The Securitas Summa program from the Conversant Group combines resistance, managed protection, and rapid recovery to minimize downtime and restore operations faster than anyone else. Resilience isn’t optional. Click to see how it works .…

Defense in Depth

1
Can a Security Program Ever Reach Maintenance Mode? 25:12

13 weeks ago25:12

25:12

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ). Joining us is Andrew Wilder , CISO, Vetcor . In this episode: It comes down to growth Maintenance mode is anything but simple An asymmetric arrangement Integrating with the business Thanks to our podcast sponsor, ThreatLocker ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com .…

Defense in Depth

1
The Hardest Problems in Security Aren't "Security Problems" 25:52

14 weeks ago25:52

25:52

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ). Joining us Sneha Parmar , information security officer, Lufthansa Group Digital Hangar . In this episode: Build the foundation Building at scale Excelling at boring Knowing what you’ve got is half the battle Thanks to our podcast sponsor, Fenix24 You’ve invested in cybersecurity, but can your business recover when it counts? The Securitas Summa program from the Conversant Group combines resistance, managed protection, and rapid recovery to minimize downtime and restore operations faster than anyone else. Resilience isn’t optional. Click to see how it works .…

Defense in Depth

1
If and When Should a CISO Have a Long Term Security Plan? 29:20

15 weeks ago29:20