re:invent security

Esther Schagen-van Luit (Microsoft): "Security leadership requires courage and curiosity"


Listen Later

Join hosts Jeroen Prinse and Irfaan Santoe in this episode of re:invent security as they sit down with Esther Schagen-van Luit to explore what it truly means to be a Strategic CISO in today’s security landscape.

Esther is a well-known cybersecurity leader and advocate for Diversity, Equity, and Inclusion. With years of experience advising and working alongside CISOs across various sectors, she brings a sharp, candid perspective on the disconnect between tactical security operations and the strategic needs of modern organizations.

In this episode, Esther unpacks:

• The common traps that keep CISOs stuck in operational mode

• What separates a strategic CISO from the rest—mindset, skillset, and influence

• How organizational readiness (or lack thereof) impacts a CISO’s ability to lead at the strategic level

• Why aligning security with digital transformation is non-negotiable

• And how DEI plays a real role in shaping stronger, smarter security leadership

Esther doesn’t just talk about the role of the CISO—she challenges the assumptions around it. She shares what it takes to grow into strategic leadership, even in environments that aren’t quite ready for it, and why security professionals must be ready to challenge how value is measured and communicated.

Known for her clear thinking and no-nonsense delivery, Esther reminds us that strategy isn’t about sitting at the executive table—it’s about speaking the language of the business and helping shape its future.

Whether you’re a current CISO, an aspiring one, or someone who works closely with security leadership, this episode offers a grounded, honest look at the evolution of the role—and how to push it forward.


Chapters:

00:00 - 04:09 - Introduction of the episode and Esther Schagen van Luit

4:10 - 07:32 Reinventing security and being a driving force for good.

07:33 - 9:32 What are the key differences between an operational, tactical and strategical CISO?

09:33 - 12:15 What are operational and tactical CISO's lacking?

12:16 - 14:20 Strategic security visions requires curiosity

14:21 - 15:56 What is holding organizations back to embrace a strategical CISO?

15:57 - 19:33 - What are the most important skills to become a strategical security leader?

19:34 - 22:07 Example of a security leader who was successfull in aligning business objectives and security strategy

22:08 - 25:00 Don't sell winter coats in the summer

25:01 - 26:42 The difference between regulated and unregulated organizations

26:43 - 33:21 What are the tell tale signs that an organizations is not ready for a strategical CISO?

33:22 - 42:00 What are some practical/high impact steps to create high performing security teams?

42:01 - 43:00 What is the one piece of advise you would like to give security leaders?

43:01 - 46:28 What resources does Esther recommend to level up strategic thinking?

46:29 - 52:21 Key take aways Irfaan and Jeroen


Resources:


Connect with Esther: https://www.linkedin.com/in/estherschagenvanluit/


Subscribe to this channel to find all new episodes:

https://youtube.com/@reinventsecurity?feature=shared


Listen on:

Spotify: https://ap.lc/SzTrY

Apple Podcasts: https://ap.lc/HmXhf


FOLLOW ►

Jeroen Prinse

LinkedIn: https://www.linkedin.com/in/jprinse/


Irfaan Santoe:

LinkedIn: https://www.linkedin.com/in/irfaansantoe/

Hosted on Acast. See acast.com/privacy for more information.

...more
View all episodesView all episodes
Download on the App Store

re:invent securityBy Jeroen Prinse / Irfaan Santoe