From Pirouettes to Protocols: Jessica Nemmers' CISO Journey

The Professional CISO

#Tech #David Malicoat #MBA #Business #CISO #Cybersecurity #Information Security

28:52

Retailers are facing a rapidly evolving landscape where consumer expectations, AI advancements, and social media platforms like TikTok are redefining engagement. It feels like the holiday shopping season just ended, but when do retailers start planning for the next one, and some retailers already behind the curve for this season? Joining us today is Carey Cockrum, Director of Consulting at Cella by Randstad Digital, where she helps major brands and marketing teams optimize their strategies with data-driven insights, AI-powered content creation, and cutting-edge retail marketing trends. With the holidays just around the corner, she’s here to share what’s next for retail marketing, campaign optimization, and how brands can stay ahead in a hyper-competitive space. ABOUT CAREY COCKRUM Carey has been a part of the Creative Agency space for nearly 30 years. She has served as Designer, Creative Director, Creative Operations Lead and Agency Lead in both internal and external agencies (big and small). Carey has worked directly with C-suite stakeholders to understand organizational strategies that inform effective creative solutions. She is a bit of a data nerd and loves demonstrating results. Brands she’s supported include Fruit of the Loom, Wendy’s and Humana. In her free time, she enjoys going back to her creative roots through painting and drawing. She also spends her time improving upon the house she lives in today in Southern, MI - inside and out. RESOURCES Catch the future of e-commerce at eTail Boston, August 11-14, 2025. Register now: https://bit.ly/etailboston and use code PARTNER20 for 20% off for retailers and brands Don't Miss MAICON 2025, October 14-16 in Cleveland - the event bringing together the brights minds and leading voices in AI. Use Code AGILE150 for $150 off registration. Go here to register: https://bit.ly/agile150 Connect with Greg on LinkedIn: https://www.linkedin.com/in/gregkihlstrom Don't miss a thing: get the latest episodes, sign up for our newsletter and more: https://www.theagilebrand.show Check out The Agile Brand Guide website with articles, insights, and Martechipedia, the wiki for marketing technology: https://www.agilebrandguide.com The Agile Brand podcast is brought to you by TEKsystems. Learn more here: https://www.teksystems.com/versionnextnow The Agile Brand is produced by Missing Link—a Latina-owned strategy-driven, creatively fueled production co-op. From ideation to creation, they craft human connections through intelligent, engaging and informative content. https://www.missinglink.company…

about a year ago 31:32

MP3•Episode home

Host: David Malicoat, Chief Information Security Officer and Host of The Professional CISO

Guest: Jessica Nemmers, Field CISO at Flare Data Systems

Episode Overview:

In this inspiring episode of The Professional CISO, David Malicoat welcomes Jessica Nemmers, the Field CISO at Flare Data Systems, to share her extraordinary journey from being a professional ballerina to becoming a leader in the cybersecurity industry. Jessica's story is a testament to the power of resilience, adaptability, and the importance of professionalizing the CISO role.

Key Topics Discussed:

The Transition: How Jessica made the leap from ballet to cybersecurity.
Professionalizing the CISO Role: Why business acumen and relationship-building are crucial for today’s CISOs.
Government Regulations & Compliance: Navigating the challenges and opportunities.
Mentorship & Advice: Practical tips for aspiring CISOs, especially those from non-traditional backgrounds.

Why You Should Listen: If you’re a cybersecurity professional, aspiring CISO, or simply interested in career transitions, this episode offers valuable insights into the evolving role of the CISO and how non-traditional paths can lead to success in cybersecurity.

Timestamps:

[00:00] Introduction to Jessica Nemmers and her background.
[01:00] Jessica’s journey from a professional ballerina to a cybersecurity leader.
[10:00] The importance of professionalizing the CISO role.
[18:00] Challenges and opportunities in government regulations and compliance.
[26:00] Advice for those entering cybersecurity from non-traditional backgrounds.
[31:00] Closing thoughts and key takeaways.

Resources Mentioned:

Flair Data Systems: https://www.flairdata.com/
NIST Cybersecurity Framework 2.0: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf
EC-Council Certified CISO Program: https://www.eccouncil.org/train-certify/certified-chief-information-security-officer-cciso/
North Texas ISSA: https://www.ntxissa.org/

Connect with Us:

Website: www.thpc.co
YouTube: @TheProfessionalCISO
LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/
Spotify: https://open.spotify.com/show/2C7JojNZPdg1g6AXvpKDfn?si=1bf04388441845bc
Apple Podcasts: https://podcasts.apple.com/us/podcast/the-professional-ciso/id1731138021

Follow, Share, and Subscribe:

If you enjoyed this episode, please follow, share, and subscribe to The Professional CISO Show. Your support helps us continue to provide valuable content to the cybersecurity community.

#Cybersecurity #CISO #JessicaNemmers #ProfessionalCISO #CareerTransition #CyberLeadership

63 episodes

From Pirouettes to Protocols: Jessica Nemmers' CISO Journey

The Professional CISO

published about a year ago

MP3•Episode home

Host: David Malicoat, Chief Information Security Officer and Host of The Professional CISO

Guest: Jessica Nemmers, Field CISO at Flare Data Systems

Episode Overview:

Key Topics Discussed:

The Transition: How Jessica made the leap from ballet to cybersecurity.
Professionalizing the CISO Role: Why business acumen and relationship-building are crucial for today’s CISOs.
Government Regulations & Compliance: Navigating the challenges and opportunities.
Mentorship & Advice: Practical tips for aspiring CISOs, especially those from non-traditional backgrounds.

Timestamps:

[00:00] Introduction to Jessica Nemmers and her background.
[01:00] Jessica’s journey from a professional ballerina to a cybersecurity leader.
[10:00] The importance of professionalizing the CISO role.
[18:00] Challenges and opportunities in government regulations and compliance.
[26:00] Advice for those entering cybersecurity from non-traditional backgrounds.
[31:00] Closing thoughts and key takeaways.

Resources Mentioned:

Flair Data Systems: https://www.flairdata.com/
NIST Cybersecurity Framework 2.0: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf
EC-Council Certified CISO Program: https://www.eccouncil.org/train-certify/certified-chief-information-security-officer-cciso/
North Texas ISSA: https://www.ntxissa.org/

Connect with Us:

Website: www.thpc.co
YouTube: @TheProfessionalCISO
LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/
Spotify: https://open.spotify.com/show/2C7JojNZPdg1g6AXvpKDfn?si=1bf04388441845bc
Apple Podcasts: https://podcasts.apple.com/us/podcast/the-professional-ciso/id1731138021

Follow, Share, and Subscribe:

If you enjoyed this episode, please follow, share, and subscribe to The Professional CISO Show. Your support helps us continue to provide valuable content to the cybersecurity community.

#Cybersecurity #CISO #JessicaNemmers #ProfessionalCISO #CareerTransition #CyberLeadership

63 episodes

#Tech #David Malicoat #MBA #Business #CISO #Cybersecurity #Information Security

All episodes

The Professional CISO

1
AI, Risk, and Reality: The CISO’s Guide to What’s Coming Next 23:11

4 days ago23:11

23:11

Sponsor: Netskope ( www.netskope.com ) EP62 | Building Real Cybersecurity Communities + AI Clarity with Dr. Anand Singh (Live from CISO XC ATX) Sponsored by Netskope What happens when a CISO-led community takes root in a new city — and how do you cut through the noise around AI in cybersecurity? In this special episode recorded live from the inaugural CISO XC ATX event in Austin, host David Malicoat sits down with Randy Potts , co-founder of CISO XC, and Dr. Anand Singh , veteran CISO and AI thought leader, for two candid conversations on the future of cybersecurity leadership. 🎤 Randy shares how CISO XC is scaling its “community-first” model across cities while staying true to local ownership and peer connection. 🤖 Anand breaks down the intersection of AI and cybersecurity into actionable concepts — from AI for security tools to risks around data poisoning and agent-based automation. Whether you’re a seasoned CISO or a rising security leader, this episode offers a front-row seat to where the cybersecurity profession is going — and who’s driving the change. 🔑 Topics Covered: Why local cybersecurity communities matter more than ever Lessons from 3 years of CISO XC and what’s next AI for cybersecurity vs. security for AI — what CISOs need to know Data governance, regulation, and the risks of “AI hype” The importance of peer-driven content and practitioner-led learning Preview of Dr. Singh’s upcoming book on AI and security 🎧 The Professional CISO Show is your front-row seat to the conversations shaping modern cybersecurity leadership — hosted by veteran CISO David Malicoat. 🔗 Resources & Links Show Website: www.thpc.co YouTube Channel: @TheProfessionalCISO Follow on LinkedIn: The Professional CISO Show Guest: Dr. Anand Singh | Randy Potts Sponsor: Netskope #CISO #CybersecurityLeadership #AIandSecurity #Netskope #CISOXC #AustinCyber #CybersecurityCommunity #InfosecPodcast #TheProfessionalCISOShow…

The Professional CISO

1
Don’t Chase Titles — Build These 3 Things Instead (CISO Advice) with Nathan Wright 40:37

10 days ago40:37

40:37

🎙️ The Professional CISO Show – Episode 61 Guest: Nathan Wright, CISO at Textron Host: David Malicoat Sponsor: Armis Check out the Armis 2025 Cyberwarfare Report: www.armis.com/cyberwarfare Visit Armis at RSAC, North Hall, Booth N-5457: www. armis.com/rsac2025 🎧 Episode Summary: In this episode of The Professional CISO Show , host David Malicoat sits down with Nathan Wright, CISO at Textron, to explore one of the most unconventional — and inspiring — journeys to cybersecurity leadership. From Russian linguist at the FBI to overseeing IT security across a global enterprise, Nathan shares why being open to pivots across functions (including supply chain, engineering, and product security) can supercharge a CISO’s ability to lead. Nathan unpacks the value of translating technical risk into business strategy, why “protecting the revenue” should be at the heart of every cybersecurity program, and how to bridge the ever-present tension between infrastructure and security. 🧠 Key Highlights: From linguistics to leadership: Nathan’s unexpected route to CISO. The role of curiosity and discomfort in professional growth. What it really means to professionalize cybersecurity. Why “protect the revenue” should be every CISO’s north star. Advice for early- and mid-career professionals hesitant to pivot. Risk, regulation, and when frameworks help vs. hinder. How translating “cyberese” into business terms creates influence. 🛠️ Call to Action: If you enjoyed this episode, be sure to follow us on your favorite podcast platform , leave a 5-star review , and share it with a colleague who’s ready to take their cybersecurity journey to the next level. 🔗 Follow The Professional CISO Show: 🌐 Website: www.thpc.co 📺 YouTube: Watch More Episodes 🎧 Spotify: Follow on Spotify 🍎 Apple Podcasts: Listen on Apple 💼 LinkedIn: The Professional CISO Show 🧵 Hashtags: #CybersecurityLeadership #CISOCareer #ProfessionalCISO #CyberResilience #RiskManagement #TranslateCyber #InfosecJourney #Cyberstrategy #SecurityLeadership…

The Professional CISO

1
🔐 From DNS to AI: Insights from CISO XC Austin | The Professional CISO Show EP60 sponsored by Infoblox 35:07

12 days ago35:07

35:07

Guests: Ryan Rene Rosado & Chris Boykin | Sponsor: Infoblox ( www.infoblox.com ) Recorded live at CISO XC Austin In this special on-location episode of The Professional CISO Show , host David Malicoat brings you powerful conversations recorded at CISO XC in Austin , where cybersecurity leaders gathered to tackle today’s most pressing challenges—from career transitions to DNS-layer security. 👩‍💼 First, we hear from Ryan Rene Rosado , a dynamic cybersecurity leader, Air Force veteran, and Harvard Extension School TA. Ryan shares candid reflections on consulting vs. in-house security work, why AI isn’t the true endgame, and how job seekers—and employers—need to shift their mindset. Her voice is an authentic, timely perspective for CISOs and aspiring leaders alike. 🛡️ Then, we go deep with Chris Boykin , Product Security Specialist at Infoblox , on the power of DNS in security architecture. He breaks down real-world attacker tactics, exfiltration methods, and how Infoblox’s Protective DNS and Universal DDI solutions are helping organizations stop threats before they launch. The episode closes with insights on their AI-powered threat intel, interoperability with other platforms, and where DNS security is heading next. 🔑 Key Highlights Why Ryan compares consulting to cosmetic surgery—and working in-house to being a primary care physician Lessons from transitioning out of the military into cybersecurity leadership The real reason organizations chase AI (hint: it’s not AI) How attackers weaponize DNS queries and domain lookalikes What Infoblox is doing to push DNS-based threat detection into the future Why collaboration in the cybersecurity ecosystem matters more than ever 🎧 Listen Now on Your Favorite Platform 🔗 Spotify 🔗 Apple Podcasts 🌐 Learn more at: www.thpc.co 📣 Follow The Professional CISO Show 🔗 YouTube 🔗 LinkedIn #TheProfessionalCISOShow #CISOXC #CybersecurityLeadership #WomenInCybersecurity #Infoblox #ProtectiveDNS #CyberThreatIntel #CISOcareer #AIsecurity #DNSsecurity #GRC #CyberNetworking…

The Professional CISO

1
Voices of CISO XC: Austin’s Cybersecurity Leaders Take the Mic sponsored by Netskope 19:02

17 days ago19:02

19:02

🎙️ Live from Austin: Conversations from the Inaugural CISO XC ATX | Sponsored by Netskope In this special event episode, The Professional CISO Show hits the road to Austin, Texas for the inaugural CISO XC ATX Conference , where community, innovation, and leadership take center stage. Host David Malicoat sits down with Rich McCrohan of Andromeda Security and David Elcock , advisor to Netskope, for a candid discussion on the evolving security landscape—from AI-driven identity management to the business-first philosophy behind modern Zero Trust architecture. 💡 What You’ll Learn in This Episode : The future of cloud identity and non-human access provisioning Why Austin’s cyber leadership scene is distinct from DFW How Netskope combines speed and security without compromise The critical role of human behavior, internal threat visibility, and behavioral context Diversity, veterans, and the “shaved sidewalk” analogy for building inclusive security communities 🧠 Whether you’re a CISO, aspiring leader, or part of the cyber vendor ecosystem, this episode delivers powerful insights on technology, culture, and connection—all from the heart of Texas. 🎧 Subscribe now and join us as we continue to professionalize the CISO role, one conversation at a time. 🔗 Links & Resources Website: www.thpc.co LinkedIn: The Professional CISO Show YouTube: Watch More Episodes Hashtags: #Cybersecurity #CISOXC #ZeroTrust #Netskope #CloudSecurity #AustinTech #CyberLeadership #DiversityInTech #VeteransInCyber #AIinSecurity #SASE #TheProfessionalCISO…

The Professional CISO

1
Inside the DSPM Revolution: Data, Identity & the Future of Security w/ Mohit Tiwari and Anand Singh 45:39

25 days ago45:39

45:39

In this special Industry Series kickoff episode of The Professional CISO Show , host David Malicoat is joined by Mohit Tiwari (CEO & Co-Founder) and Anand Singh (Chief Security and Strategy Officer) of Symmetry Systems for a compelling conversation on the future of data security , the rise of DSPM (Data Security Posture Management) , and the emerging intersection of AI, identity, and access . Learn how Symmetry Systems evolved from academic research into a cutting-edge security platform, why Anand made the leap from enterprise CISO to startup executive, and what every security leader needs to understand about managing data in today’s AI-driven world. 🔑 Key Topics Covered: Why past data security initiatives failed—and how DSPM changes the game The “three-axis” model of modern cybersecurity: Data, Identity, Access How AI copilots and agent models reshape the threat landscape Practical use cases: risk reduction, visibility, and compliance Why CISOs can finally become enablers of business value How 2025 is shaping up to be the year of data-centric security 👥 Guests: Mohit Tiwari – CEO & Co-Founder, Symmetry Systems Anand Singh – Chief Security & Strategy Officer, Symmetry Systems | Former CISO at Alkami Technology 🔗 Resources & Links: 🎥 Watch this episode on YouTube: youtube.com/@TheProfessionalCISO 🌐 Visit our website: www.thpc.co 🔗 Connect on LinkedIn: The Professional CISO Show 📖 Confused Pilot Website: http://confusedpilot.info/ 📽️ Confused Pilot Presentation: https://confusedpilot.info/ConfusedPilot_Site.pdf 👍 Like what you hear? Follow the show, rate the episode, and share it with your network. Let’s professionalize the CISO role—together. #TheProfessionalCISO #DSPM #DataSecurity #CybersecurityLeadership #CISO #AIsecurity #SymmetrySystems #CloudSecurity #IdentitySecurity #AnandSingh #MohitTiwari #IndustrySeries #CybersecurityPodcast…

The Professional CISO

1
👀 Stop Rolling Your Eyes: AI Is Your CISO Leadership Opportunity 🙄 32:22

5 weeks ago32:22

32:22

🙄 Stop Rolling Your Eyes: AI Is Your CISO Leadership Opportunity The Professional CISO Show – Episode 57 Hosted by David Malicoat This episode is brought to you by Symmetry Systems, The Data+AI Security Company. ( www.symmetry-systems.com ) 🎧 Episode Summary: In this solo commentary episode, David Malicoat issues a direct challenge to security leaders everywhere: stop rolling your eyes at AI—it’s your leadership opportunity. Too many CISOs are brushing off artificial intelligence as just another tech trend. But as AI continues to reshape cybersecurity and business strategy in real time, this is the moment for CISOs to lead the charge—not get left behind. David breaks down why AI governance is the new boardroom battleground, how CISOs can build strategic influence, and why now is the time to speak up, show up, and step into a broader leadership role. Whether you’re leading a security program today or preparing for tomorrow, this episode will help you rethink your approach to AI and your value as a cybersecurity executive. 🔑 Key Takeaways: • Why AI isn’t “just another hype cycle” for cybersecurity • How to take the lead on AI governance in your organization • Translating AI’s risk and value into business terms • How CISOs can communicate more effectively with non-technical stakeholders • Why sharing your voice publicly is now a leadership expectation 📌 Connect & Follow: 🌐 Website: www.thpc.co 🔗 LinkedIn: The Professional CISO Show 🎥 YouTube: @TheProfessionalCISO 🎧 Spotify: The Professional CISO on Spotify 🍏 Apple: The Professional CISO on Apple Podcasts 💬 Let’s Connect: Have feedback or want to be a guest on the show? Reach out via LinkedIn or the website. And don’t forget to rate, review, and follow the podcast to help professionalize the CISO role across the industry. 🔖 Tags & Topics: CISO, Cybersecurity Leadership, AI Governance, Boardroom Communication, Risk Management, Strategic Security, Artificial Intelligence, Executive Presence, Infosec Strategy, The Professional CISO…

The Professional CISO

1
The CISO’s Dilemma: Influence, Impact, and Leaving the Seat with Russell Okoth 45:37

6 weeks ago45:37

45:37

This episode is brought to you by Symmetry Systems (www.symmetry-systems.com) Innovate with Confidence. The Data+AI Security Company Discover, classify, and safeguard data at scale with our leading Data Security Posture Management Platform. Detect and respond to data focused concerns before they impact your business. 🎙️ Description: In this powerful episode, host David Malicoat sits down with cybersecurity advisor and former CISO Russell Okoth to explore his remarkable journey—from growing up in Kenya to building award-winning security programs in the U.S. corporate world. Russell shares valuable lessons on leadership, mentorship, the responsible use of AI, and why CISOs must evolve from technical experts into business risk translators. He also opens up about transitioning from a high-level CISO role to running his own cybersecurity advisory firm, Cyber Diligent. Whether you’re an aspiring cybersecurity professional or a seasoned CISO, this episode delivers insights you won’t want to miss. 🔑 Key Topics Covered: • Russell’s early tech roots in Kenya and his global cybersecurity journey • Lessons from building security programs at Mr. Cooper and Pacific Premier Bank • The pivot from CISO to cybersecurity consultant • Responsible AI usage and the critical role of data governance • What most leaders get wrong about developing cybersecurity talent • Communicating cybersecurity as business risk, not just technical debt • Leadership, legacy, and staying rooted in purpose 👤 Guest: Russell Okoth Cybersecurity Advisor | Former CISO at Pacific Premier Bank Founder, Cyber Diligent Connect: linkedin.com/in/russellokoth 🎧 Listen & Subscribe: • Website: www.thpc.co • Spotify: The Professional CISO • Apple Podcasts: The Professional CISO 📲 Follow Us: • YouTube: @TheProfessionalCISO • LinkedIn: The Professional CISO Show #Cybersecurity #CISO #ProfessionalCISO #RussellOkoth #CyberLeadership #AIinSecurity #TalentDevelopment #CyberRisk #TheProfessionalCISO #LeadershipInTech…

The Professional CISO

1
CISOs & The Board: Lessons from Corporate Governance Expert Debra von Storch 44:20

7 weeks ago44:20

44:20

🎙️ Episode Summary How can CISOs break into the boardroom and become key players in corporate strategy? In this episode, Debra von Storch , former Ernst & Young (EY) senior partner turned accomplished board director , joins host David Malicoat to reveal what it takes for cybersecurity leaders to elevate their influence at the executive level. With decades of experience advising CEOs, CFOs, and corporate boards , Debra shares a blueprint for CISOs who want to shift from a technical role to a business leadership role. Learn how to build boardroom credibility, understand capital markets, and develop the strategic mindset that corporate boards expect. 🎯 Key Takeaways: ✅ Why CISOs must go beyond risk management and focus on value creation ✅ How to develop business acumen to gain influence with CEOs & CFOs ✅ The importance of governance, risk management, and board engagement ✅ Why CISOs should get board-certified (NACD, PDA) & join nonprofit boards ✅ How the capital markets & economic climate impact cybersecurity strategy ✅ Steps to transition from cybersecurity leadership to corporate board member ⏳ Time Stamps 00:00 – Introduction & Episode Overview 02:00 – Debra von Storch’s Journey: From CPA to Board Director 05:30 – How CISOs Can Gain Boardroom Visibility 10:00 – The Future of CISOs in Corporate Strategy 15:00 – Building Key Relationships with CFOs & CEOs 20:00 – Board Governance 101: What Every CISO Should Know 30:00 – How to Develop Business Acumen for Board Influence 40:00 – Leveraging Cyber Insights to Drive Business Value 43:00 – 10 Rapid-Fire Questions with Debra von Storch 44:00 – Closing Thoughts & Key Takeaways 📝 📌 Show References: NASDAQ Newsroom : https://www.nasdaq.com/newsroom New York Stock Exchange : https://www.nyse.com EY Insights : https://www.ey.com/en_us/insights Pitchbook : https://pitchbook.com NACD : https://www.nacdonline.org Private Directors Association : https://www.privatedirectors.org Varispace : https://www.varispace.com and Varidesk : https://www.vari.com Pearson Partners : https://pearsonpartnersintl.com Korn Ferry : https://www.kornferry.com Spencer Stuart : https://www.spencerstuart.com The Committee on Foreign Investment in the United States (CFIUS): https://home.treasury.gov/policy-issues/international/the-committee-on-foreign-investment-in-the-united-states-cfius 📢 Follow & Subscribe 📡 Never miss an episode! Subscribe & Follow: 🎧 Spotify: The Professional CISO Show on Spotify 🍏 Apple Podcasts: The Professional CISO Show on Apple Podcasts 🌐 Website: www.thpc.co 📺 YouTube: Watch More Episodes of The Professional CISO Show 🔗 LinkedIn: The Professional CISO Show on LinkedIn 📢 If you enjoyed this episode, share it with your network! 🔍 Related Episodes 🎙️ Gary Hayslip on The Future of CISO Leadership 🎙️ Live from NTX ISSA CSC12: Conversations with Cybersecurity Experts 🎙️ CISO Panel with Sailaja Kotra-Turner, Sonya Hammond & Jessica Nemmers 🎯 Connect with Our Guest: 👤 Debra von Storch LinkedIn: https://www.linkedin.com/in/debravonstorch • Former Senior Partner at Ernst & Young (EY) • Board Director specializing in corporate governance, risk management, and business strategy 🔗 Hashtags & Keywords #CyberSecurity #CISO #BoardGovernance #BusinessStrategy #TheProfessionalCISOShow #DavidMalicoat #DebraVonStorch #Leadership #Technology #CISOCareerDevelopment #BoardroomInsights…

The Professional CISO

1
The CISO's New Secret Weapon: Business Acumen w/ Alain Espinosa 44:35

8 weeks ago44:35

44:35

🔐 How do CISOs transition from cybersecurity leaders to business executives and board members? In this episode of The Professional CISO Show , I sit down with Alain Espinosa to explore his journey from IT operations to board readiness and leadership. We cover building business acumen, navigating the boardroom, professional development strategies, and the evolving role of CISOs in enterprise risk management. This episode is packed with valuable insights for security leaders looking to elevate their careers beyond technology and into business leadership and governance. 🎙 Watch now and learn: ✅ How CISOs can become business executives and influence corporate strategy ✅ The importance of financial literacy and board governance in cybersecurity leadership ✅ Why mentorship and professional development are critical for career growth ✅ The biggest misconceptions about cybersecurity leaders joining corporate boards ✅ Strategies for building executive presence and credibility at the board level 📌 Timestamps: 00:00 – Introduction & What’s New on The Professional CISO Show 02:00 – Alain Espinosa’s Journey: From IT Operations to Cybersecurity 07:00 – Cybersecurity’s Evolution: From Tech to Business Risk Management 12:00 – Why CISOs Need to Develop Business Acumen 18:00 – How Security Leaders Can Secure a Seat at the Business Table 25:00 – The Espinosa 3E’s: Equip, Empower, Encourage 30:00 – Board Readiness: What CISOs Need to Know 36:00 – Financial Acumen & Business Strategy for Cybersecurity Executives 42:00 – 10 Rapid-Fire Questions with Alain Espinosa 44:00 – Final Thoughts & Call to Action 📣 Enjoyed this episode? Don’t forget to: 👍 Like, Subscribe , and Hit the Bell Icon to stay updated on the latest cybersecurity leadership insights! 💬 Comment below: What skills do you think CISOs need to succeed in the boardroom? Make sure you check out CISO XC! Register now for the DFW Spring Event: https://www.cisoxc.com/event-details/ciso-xc-dfw-spring-request-for-rsvp The Professional CISO Show looks forward to seeing you there. 🔗 Share this episode with your network! 🎧 Listen on the go: 🔹 Spotify: https://open.spotify.com/show/2C7JojNZPdg1g6AXvpKDfn?si=a7ac3172bb414673 🔹 Apple Podcasts: https://podcasts.apple.com/us/podcast/the-professional-ciso/id1731138021 🌐 Follow The Professional CISO Show: 🔗 Website: www.thpc.co 🔗 LinkedIn: https://www.linkedin.com/company/the-professional-ciso-show 🔗 YouTube: http://www.youtube.com/@TheProfessionalCISO 🎥 Related Episodes: ▶ EP 53: Gary Hayslip on Cybersecurity Leadership & AI Threats ▶ EP 52: Live from ISSA CSC 12: Expert Panel on MDR, XDR, & AI 🔎 Hashtags: #CyberSecurity #CISO #BoardroomLeadership #CyberRisk #CISOCareer #BusinessAcumen #Leadership #CyberGovernance #RiskManagement #ProfessionalDevelopment #CISOToBoard…

The Professional CISO

1
Cyber Risk at the Board Level: A CISO’s Guide with NACD’s Chris Hetner 43:00

11 weeks ago43:00

43:00

🚀 In this episode of The Professional CISO Show, we sit down with Chris Hetner, seasoned cybersecurity leader and board advisor, to discuss the evolving role of CISOs, cybersecurity risk management at the board level, and the professionalization of the CISO function. Chris brings decades of experience from Wall Street, the U.S. Securities Exchange Commission, and his current advisory role at the National Association of Corporate Directors (NACD). We dive deep into how CISOs must evolve into business executives with a strong foundation in cybersecurity and risk management. 🎙️ Episode Highlights: ✔️ Chris Hetner’s journey from cybersecurity to boardroom advisory ✔️ The NACD’s role in shaping board-level cybersecurity governance ✔️ How CISOs can bridge the gap between technical risk and business objectives ✔️ The shifting regulatory landscape for security leaders ✔️ Trends in AI and cybersecurity risk reporting ✔️ Why boards struggle with cyber risk management – and how CISOs can help ✔️ The future of cybersecurity leadership and board involvement ✔️ Practical steps for CISOs looking to transition into board roles 📌 Plus, Chris answers our signature “10 Questions” rapid-fire segment! ⏱️ YouTube Timestamps: 00:00 – Intro & The Evolution of The Professional CISO Show 02:00 – Meet Chris Hetner: Cybersecurity, Wall Street, and Board Advisory 10:00 – The CISO’s Role in Board-Level Risk Management 15:00 – Tactical vs. Strategic Cybersecurity: Why CISOs Must Speak Business 22:00 – How CISOs Can Develop Themselves for Board Roles 28:00 – AI, Cybersecurity, and the Future of Risk Management 34:00 – What the Next Administration Means for CISOs 38:00 – 10 Questions with Chris Hetner 42:00 – Final Thoughts & Closing Remarks 📢 Call to Action: 🔹 Subscribe to The Professional CISO Show for more insights on cybersecurity leadership! 🎧 Listen on: • Spotify : https://open.spotify.com/show/2C7JojNZPdg1g6AXvpKDfn?si=a7ac3172bb414673 • Apple Podcasts : https://podcasts.apple.com/us/podcast/the-professional-ciso/id1731138021 • Watch more episodes : http://www.youtube.com/@TheProfessionalCISO 🔹 Follow us on LinkedIn : https://www.linkedin.com/company/the-professional-ciso-show 🌐 Visit our website : www.thpc.co 📺 Related Episodes You Might Like: 🎙️ Professionalizing the CISO Role with Matt Walker 🎙️ Building Cybersecurity Communities with Joey Rachid 🎙️ Strategic Cyber Leadership with Gary Hayslip 🔖 Hashtags: #Cybersecurity #CISO #CyberRisk #Leadership #BoardGovernance #AI #RiskManagement #TheProfessionalCISOShow…

The Professional CISO

1
Cybersecurity Leadership & Professional Organizations: Evolution or Revolution? 56:54

12 weeks ago56:54

56:54

The Professional CISO Show - Episode 52: The Future of Professional Organizations for CISOs 🎙️ Hook: Are the current professional organizations truly serving the needs of CISOs, or is it time for a new approach? In this episode of The Professional CISO Show , host David Malicoat takes a deep dive into the evolution of cybersecurity professional associations, weighing the opportunities and challenges of forming a collective that genuinely represents the interests of security leaders. Episode Summary: For years, organizations like ISC², ISACA, and ISSA have been the backbone of cybersecurity certifications and networking. But with the evolving role of the CISO, should our professional organizations change as well? In this thought-provoking commentary, David explores the potential benefits and pitfalls of both revamping existing associations and creating new ones. From advocacy and standardization to ethics and vendor influence, he examines the critical aspects that shape the effectiveness of professional organizations. How do we ensure transparency? How do we prevent bureaucracy and power consolidation? Most importantly, how do we build a professional body that truly advances the role of the CISO? Key Highlights: 🔹 The need for CISO advocacy in regulations and policy 🔹 Challenges of creating a new professional organization vs. reforming existing ones 🔹 Balancing certifications, training, and real-world experience 🔹 The role of transparency and ethics in cybersecurity leadership 🔹 How professional organizations can influence vendors and drive meaningful change 🔹 Addressing bureaucracy, cost barriers, and conflicts of interest 💡 This is more than just a discussion—it’s a call for CISOs to critically assess their affiliations and shape the future of our profession. Timestamps: ⏳ 00:00 - Introduction: Why This Discussion Matters ⏳ 02:00 - The Changing Role of CISOs & Professional Organizations ⏳ 06:00 - The Pros and Cons of CISO Advocacy ⏳ 10:00 - Standardization & Best Practices: Are We Reinventing the Wheel? ⏳ 14:00 - Certifications, Training & Professional Development ⏳ 18:00 - Collaborative Threat Intelligence: Can It Work? ⏳ 22:00 - Ethics & Transparency: The Foundation of a Trusted Organization ⏳ 28:00 - Vendor Influence: The Good, The Bad, The Necessary ⏳ 34:00 - Public Awareness & The CISO Role in Business ⏳ 40:00 - Overcoming Bureaucracy, Leadership Conflicts & Financial Barriers ⏳ 50:00 - Final Thoughts: Building a Future-Proof Organization Call to Action: 📢 Join the discussion! Drop a comment below or engage with us on LinkedIn. Do you think CISOs need a new professional organization? What standards should we demand? Let’s shape the future of our industry together. ✅ Subscribe to The Professional CISO Show: 🔗 YouTube: www.youtube.com/@TheProfessionalCISO 🔗 Spotify: https://open.spotify.com/show/2C7JojNZPdg1g6AXvpKDfn?si=a7ac3172bb414673 🔗 Apple Podcasts: https://podcasts.apple.com/us/podcast/the-professional-ciso/id1731138021 🔗 Follow The Professional CISO Show on LinkedIn: https://www.linkedin.com/company/the-professional-ciso-show 🔗 Visit Our Website: www.thpc.co ▶️ Live from North Texas ISSA Conference – Conversations with Top CISOs ▶️ Matt Walker on Professionalizing the CISO Role & Business Risk ▶️ Gary Hayslip on CISO Leadership & SoftBank’s Security Strategy Hashtags: #CISO #CyberSecurity #CyberLeadership #ProfessionalCISO #CISOCommunity #InfoSec #SecurityLeadership #RiskManagement #CyberRisk #Leadership #CISOAssociation #CyberSecurityPodcast…

The Professional CISO

1
50 Episodes In: What We Learned About Building the Next Gen CISO 47:22

13 weeks ago47:22

47:22

👉 Listen Now: A deep dive into the biggest cybersecurity lessons, trends, and leadership insights from 50 episodes of The Professional CISO Show ! 🔍 Episode Summary In this Year in Review episode, host David Malicoat reflects on the biggest cybersecurity trends, challenges, and insights from 50 expert conversations in 2024. 🔥 What You’ll Learn: • The Evolution of the CISO Role – From technical expert to business leader • CISO Liability Risks – Insights from the Uber & SolarWinds cases • Building Stronger Cybersecurity Teams – Culture, burnout, and leadership • AI, Automation & Cloud Security – Emerging threats and strategies • Cybersecurity Partnerships & Collaboration – The key to success • Professionalizing the CISO Role – Why industry standards matter • Looking Ahead to 2025 – What’s next for cybersecurity leaders? 🚀 Whether you’re a CISO, security executive, or aspiring cybersecurity leader, this episode is packed with valuable insights to help you navigate the future of cybersecurity in 2025 and beyond! ⏳ Episode Chapters & Key Takeaways: [00:00] Introduction & Reflections on 50 Episodes [05:00] The Professionalization of the CISO Role [12:00] Lessons from Top Cybersecurity Leaders [22:00] The Growing Liability and Legal Risks for CISOs [30:00] Talent, Leadership, and Team Building in Security [37:00] The Role of Partnerships in Cybersecurity Success [45:00] Emerging Tech: AI, Cloud, and the Changing Threat Landscape [52:00] Looking Ahead to 2025 – Events, Guests, and Initiatives [1:00:00] Final Thoughts & Call to Action 🎯 Subscribe & Stay Connected! ✅ Follow & Subscribe to The Professional CISO Show for More Cybersecurity Insights: 🔗 Spotify: The Professional CISO Show 🔗 Apple Podcasts: The Professional CISO Show 📌 Connect with Us for More Cybersecurity Leadership Content: 🔗 Website: www.thpc.co 🔗 LinkedIn: The Professional CISO Show 🔗 YouTube: www.youtube.com/@TheProfessionalCISO 💡 Have a guest suggestion? Want to share feedback? Drop us a message on LinkedIn or leave a review! 🎥 Related Episodes & Resources: 📌 Gary Hayslip on Global Cybersecurity Leadership – Listen here 📌 Joe Sullivan’s Insights from Uber & the Future of CISO Accountability 📌 Ira Winkler on the Realities of Cybersecurity Talent & Workforce Gaps 🔥 Relevant Hashtags: #Cybersecurity #CISO #TheProfessionalCISO #InfoSec #CyberRisk #Leadership #AI #ThreatIntelligence #RiskManagement #CISOLiability #CISOCommunity…

The Professional CISO

1
Paul Reyes: Why Every CISO Needs a Business-First Mindset 💼 37:11

16 weeks ago37:11

37:11

🎧 Episode Summary: In this episode of The Professional CISO Show , host David Malicoat chats with Paul Reyes, VP and CISO at AccentCare, about his incredible journey from the Air Force to leading critical infrastructure cybersecurity efforts. Paul’s career path is filled with twists, lessons, and actionable insights that every cybersecurity leader can learn from. Discover how Paul transitioned from running infrastructure operations to becoming a CISO, why professionalizing the CISO role is critical, and his advice for new CISOs, military veterans, and anyone passionate about cybersecurity. 🔑 Key Topics Discussed: • Paul Reyes’ transition from military service to cybersecurity leadership • The evolution of the CISO role and why it needs to be professionalized • Key focus areas for new CISOs: email security, endpoint protection, and identity access management • Challenges in protecting critical infrastructure from evolving cyber threats • Advice for veterans transitioning into cybersecurity careers 🌟 Highlights: • [00:01:30] Paul’s unconventional career path: Air Force to AccentCare • [00:10:45] Starting strong as a new CISO • [00:18:00] How to measure the maturity of your cybersecurity program • [00:26:30] Cybersecurity in critical infrastructure: Trends and solutions • [00:31:00] Insights for transitioning military veterans 📣 Call to Action: Enjoying the show? Don’t forget to follow, rate, and review The Professional CISO Show ! Share this episode with a friend or colleague and help us grow the community of professional CISOs. 🔗 Connect with Us: • Website: www.thpc.co • LinkedIn: The Professional CISO Show • Watch More Episodes: YouTube Channel • Spotify: https://open.spotify.com/show/2C7JojNZPdg1g6AXvpKDfn • Apple Podcasts: https://podcasts.apple.com/us/podcast/the-professional-ciso/id1731138021 About Our Guest: Paul Reyes • Vice President and Chief Information Security Officer at AccentCare • Air Force veteran with extensive leadership experience at Raytheon, Blockbuster, and more. 🎧 Related Episodes You’ll Love: • Professionalizing Cybersecurity with Gary Hayslip • Leadership Lessons from Joey Rachid Hashtags: #TheProfessionalCISO #CybersecurityPodcast #CISO #CriticalInfrastructure #CyberRisk #AirForceVeteran #ProfessionalCISO…

The Professional CISO

1
🎙️ Securing the Supply Chain: Insights from Christine Gadsby of BlackBerry 🎙️ 37:58

17 weeks ago37:58

37:58

🎙️ Episode Title: Securing the Supply Chain: Insights from Christine Gadsby of BlackBerry 🌟 Episode Summary: In this insightful episode of The Professional CISO Show , David Malicoat sits down with Christine Gadsby, VP & Chief Information Security Officer at BlackBerry, to explore the intricacies of application security (AppSec), software supply chain management, and the ongoing professionalization of the CISO role. Christine shares her remarkable journey, from overcoming personal challenges to becoming a cybersecurity leader. Together, they discuss: • The fragility of the software supply chain and its implications. • Government regulations like NIST and secure-by-design initiatives. • Blockchain’s potential in managing supply chain accountability. • Advice for aspiring CISOs interested in AppSec and product security. Christine’s unique perspective as a product security expert offers invaluable insights into navigating the complexities of cybersecurity today. 🗝️ Key Highlights: • Christine’s journey into cybersecurity leadership. • Why AppSec and supply chain security are critical in today’s ecosystem. • How regulation and liability are reshaping the CISO role. • Blockchain’s role in securing software and supply chains. • Practical tips for cybersecurity professionals looking to transition into product security. 📢 Call to Action: Love what you hear? Help us professionalize the CISO role! 💡 Follow The Professional CISO Show on Spotify and Apple Podcasts. 📲 Share this episode with your network to spread the word! 🔗 Links and Resources: • LinkedIn: The Professional CISO Show • Website: www.thpc.co • Watch on YouTube: @TheProfessionalCISO • Listen on Spotify: The Professional CISO Show on Spotify • Listen on Apple Podcasts: The Professional CISO Show on Apple Podcasts 👤 Guest Information: Christine Gadsby, VP & CISO at BlackBerry Connect with Christine on LinkedIn . 🎧 Related Episodes: • Episode 48: Gary Hayslip on Global Cybersecurity Leadership • Episode 47: Joey Rachid on CISOs and Organizational Impact 🔖 Hashtags: #Cybersecurity #AppSec #SupplyChainSecurity #TheProfessionalCISOShow #BlackBerry #Leadership #ProfessionalCISO…

The Professional CISO

1
Through the Doorway: A Challenge to Your Future Self - A New Year’s Reading by David Malicoat 4:41

18 weeks ago4:41