In this episode of The Professional CISO Show, host David Malicoat is joined by Matt Walker, Managing Director of Security and Compliance at Goosehead Insurance. Matt shares his unique journey from a career in commercial art to becoming a cybersecurity leader. Together, they explore the evolving role of the CISO and the importance of professionalizing the position within organizations.

Key Takeaways:

• Professionalizing the CISO Role: Matt discusses the need for establishing a standardized professional framework for CISOs and the challenges associated with it.
• Translating Technical Risk into Business Terms: Learn how to communicate complex technical risks in a way that resonates with non-technical stakeholders and aligns with business objectives.
• Building Relationships in the C-Suite: Discover strategies for developing strong, trust-based relationships within the executive team, and how to navigate the political landscape of the boardroom.
• The Journey from IT to Cybersecurity Leadership: Matt shares his personal experiences and insights on transitioning from a technical background to a leadership role in cybersecurity.

About the Guest: Matt Walker is the Managing Director of Security and Compliance at Goosehead Insurance. With a rich background in network security, commercial art, and leadership roles at Bain & Company and Dell, Matt brings a unique perspective to the discussion on cybersecurity leadership and the future of the CISO role.

Episode Highlights:

• [02:00] Matt Walker’s early career and transition from commercial art to cybersecurity
• [07:00] The importance of professionalizing the CISO role
• [13:00] Strategies for effectively communicating risk to business leaders
• [18:00] Navigating stakeholder relationships and building trust in the C-suite
• [25:00] Matt’s tips for introverts on building professional relationships and influence
• [30:00] The role of diplomacy in cybersecurity leadership

Connect with Matt Walker:

• LinkedIn: https://www.linkedin.com/in/techguymatt/
• Goosehead Insurance: Website

Connect with David Malicoat:

• Website: The Professional CISO
• YouTube: The Professional CISO
• LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/

Subscribe & Leave a Review: Enjoyed the episode? Subscribe to The Professional CISO Show on Apple Podcasts, Spotify, or your favorite podcast platform. Don’t forget to leave a review and share the episode with your network!

In this special episode of The Professional CISO Show, host David Malicoat brings together three influential women leaders in cybersecurity: Sailaja Kotra-Turner (VP & CISO, Brown-Forman), Sonya Hammond (CISO & VP of IT Architecture and Engineering, National Veterinary Associates), and Jessica Nemmers (Field CISO, Flair Data Systems). The panel explores the challenges and opportunities women face in the cybersecurity industry, offering insights into breaking stereotypes, advancing technical expertise, and creating more inclusive professional environments.

Key Topics Discussed:

• Overcoming the challenges of being typecast into diversity panels

• Encouraging young women to pursue and succeed in cybersecurity

• The importance of diverse and inclusive networking opportunities

• Actionable advice for women currently in the field seeking career advancement

• Strategies for engaging with CISOs as a vendor or partner in the cybersecurity space

Why Listen:

This episode is a must-listen for cybersecurity professionals, aspiring CISOs, and anyone interested in the intersection of diversity and technology. Gain valuable insights from leaders who are at the forefront of professionalizing the CISO role and promoting diversity in the field.

Connect with Us:

• 🌐 Visit our website: www.thpc.co

• 📺 Watch the episode on YouTube: The Professional CISO YouTube Channel

• 🔗 Follow us on LinkedIn: https://www.linkedin.com/company/the-professional-ciso-show

Episode Links:

• North Texas ISSA Cybersecurity Conference: https://www.ntxissa.org/

• Subscribe to our podcast on Apple Podcasts and Spotify for more episodes!

About the Host:

David Malicoat is a seasoned Chief Information Security Officer and host of The Professional CISO Show, where he explores the critical topics necessary to professionalize the CISO role. With insightful discussions and expert guests, David aims to drive the conversation forward on what it means to be a professional CISO.

Hashtags: #Cybersecurity #WomenInTech #CISO #DiversityInTech #ProfessionalCISO

In this episode of The Professional CISO Show, host David Malicoat interviews Sailaja Kotra-Turner, CISO and Director of Global Infrastructure and Operations at Brown-Forman. Sailaja shares her remarkable journey from IT automation to cybersecurity leadership, offering invaluable insights into the evolving role of the CISO, the importance of mentorship, and the integration of security within infrastructure teams. Whether you're a seasoned professional or just starting out, Sailaja's story is filled with practical lessons on becoming a proactive business leader in cybersecurity.

Key Takeaways:

• Career Evolution: How Sailaja transitioned from IT to cybersecurity, overcoming challenges along the way.
• Mentorship Matters: The critical role mentors played in her professional growth.
• Security Integration: Strategies for embedding security within infrastructure teams.
• CISO Role Transformation: The shift from technical expert to business leader.
• Certifications Strategy: Choosing the right certifications to signal career intent.
• Building a Security-First Culture: Practical tips for fostering security awareness across organizations.

Quotes:

• "We need to get to the point where every infrastructure professional is also a security expert."
• "The earlier security leaders are involved, the better. It’s always easier to build security in from the start."

Resources & Links:

• Follow The Professional CISO Podcast: www.thpc.co
• Watch on YouTube: The Professional CISO YouTube Channel
• Connect on LinkedIn: The Professional CISO
• Sailaja Kotra-Turner on LinkedIn: https://www.linkedin.com/in/sailajakotraturner/
• David Malicoat on LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/

Upcoming Event:

• 12th Annual North Texas ISSA Cybersecurity Conference:Join us on September 6th at the Plano Event Center. The Professional CISO Podcast will be on-site, conducting live interviews and engaging with industry leaders. (https://www.ntxissa.org/)

Call to Action: If you found value in this episode, please subscribe, rate, and review The Professional CISO Podcast on Spotify and Apple Podcasts. Your support helps us continue bringing you great content from top cybersecurity leaders. Share this episode with your network to spread the word!

Hashtags: #Cybersecurity #CISO #Leadership #ProfessionalDevelopment #Mentorship

In this episode of The Professional CISO Show, host David Malicoat is joined by Sonja Hammond, the Chief Information Security Officer and Vice President of IT Architecture and Engineering at National Veterinary Associates. Sonja shares her remarkable journey from land administration to becoming a cybersecurity leader, offering valuable insights on the evolution of the CISO role. The conversation delves into the importance of professionalizing the role, building strong stakeholder relationships, managing career growth amidst technological changes, and strategies to prevent burnout in high-pressure roles. Whether you're an experienced CISO or an aspiring security professional, this episode is packed with actionable advice and thought-provoking insights.

Key Takeaways:

• The need for professionalizing the CISO role and moving it into risk management.
• Strategies for gaining and maintaining stakeholder support.
• How to manage a cybersecurity career amidst rapid technological changes.
• Preventing burnout and maintaining a healthy work-life balance as a CISO.
• The importance of adaptability and continuous learning in cybersecurity leadership.

Guest Information:

• Name: Sonja Hammond
• Position: Chief Information Security Officer & VP of IT Architecture and Engineering, National Veterinary Associates
• LinkedIn: https://www.linkedin.com/in/sonjahammond/

Links & Resources:

• Episode Transcript: [Link to Transcript] (if available)
• Related Articles/Resources: [Link to any additional resources mentioned]
• Subscribe to the Podcast: [Spotify Link] | [Apple Podcasts Link]
• Visit our Website: www.thpc.co
• Follow us on LinkedIn: [LinkedIn Profile Link]

Episode Chapters:

1. Introduction (00:00)
2. Sonja Hammond's Career Journey (02:00)
3. Professionalizing the CISO Role (10:00)
4. Building Stakeholder Support (13:00)
5. Managing Career Growth and Preventing Burnout (18:00)
6. Final Thoughts and Advice for CISOs (24:00)
7. 10 Rapid-Fire Questions with Sonja Hammond (26:00)

Please Rate and Review: If you enjoyed this episode, please take a moment to rate and review our podcast on Spotify or Apple Podcasts. Your feedback helps us bring more valuable content to the CISO community.

Stay Connected:

• Website: www.thpc.co
• YouTube: www.youtube.com/@TheProfessionalCISO
• LinkedIn: https://www.linkedin.com/company/the-professional-ciso-podcast

Thank you for listening!

Host: David Malicoat, Chief Information Security Officer and Host of The Professional CISO

Guest: Jessica Nemmers, Field CISO at Flare Data Systems

Episode Overview:

In this inspiring episode of The Professional CISO, David Malicoat welcomes Jessica Nemmers, the Field CISO at Flare Data Systems, to share her extraordinary journey from being a professional ballerina to becoming a leader in the cybersecurity industry. Jessica's story is a testament to the power of resilience, adaptability, and the importance of professionalizing the CISO role.

Key Topics Discussed:

• The Transition: How Jessica made the leap from ballet to cybersecurity.
• Professionalizing the CISO Role: Why business acumen and relationship-building are crucial for today’s CISOs.
• Government Regulations & Compliance: Navigating the challenges and opportunities.
• Mentorship & Advice: Practical tips for aspiring CISOs, especially those from non-traditional backgrounds.

Why You Should Listen: If you’re a cybersecurity professional, aspiring CISO, or simply interested in career transitions, this episode offers valuable insights into the evolving role of the CISO and how non-traditional paths can lead to success in cybersecurity.

Timestamps:

• [00:00] Introduction to Jessica Nemmers and her background.
• [01:00] Jessica’s journey from a professional ballerina to a cybersecurity leader.
• [10:00] The importance of professionalizing the CISO role.
• [18:00] Challenges and opportunities in government regulations and compliance.
• [26:00] Advice for those entering cybersecurity from non-traditional backgrounds.
• [31:00] Closing thoughts and key takeaways.

Resources Mentioned:

• Flair Data Systems: https://www.flairdata.com/
• NIST Cybersecurity Framework 2.0: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf
• EC-Council Certified CISO Program: https://www.eccouncil.org/train-certify/certified-chief-information-security-officer-cciso/
• North Texas ISSA: https://www.ntxissa.org/

Connect with Us:

• Website: www.thpc.co
• YouTube: @TheProfessionalCISO
• LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/
• Spotify: https://open.spotify.com/show/2C7JojNZPdg1g6AXvpKDfn?si=1bf04388441845bc
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-professional-ciso/id1731138021

Follow, Share, and Subscribe:

If you enjoyed this episode, please follow, share, and subscribe to The Professional CISO Show. Your support helps us continue to provide valuable content to the cybersecurity community.

#Cybersecurity #CISO #JessicaNemmers #ProfessionalCISO #CareerTransition #CyberLeadership

Host: David Malicoat

Guest: Jim Desmond, SVP and CSO at Asurion

Episode Summary:

In this episode of The Professional CISO Podcast, David Malicoat interviews Jim Desmond, the Senior Vice President and Chief Security Officer at Asurion. They delve into the necessity of professionalizing the CISO role, effective risk management strategies, and the importance of ethical standards in cybersecurity. Jim shares his journey from consulting to cybersecurity leadership, providing valuable insights and actionable advice for CISOs and aspiring cybersecurity professionals.

Key Topics Discussed:

1. Introduction to Jim Desmond:
   • Background in consulting and building cybersecurity programs.
   • Unique aspects of his career and personal interests.
2. Professionalizing the CISO Role:
   • The importance and implications of ethical standards for CISOs.
   • Comparisons to other professional fields like law and medicine.
3. Risk Management:
   • Jim's approach to prioritizing vulnerabilities and focusing on impactful areas.
   • Tools and techniques used, including Rapid7 and Brinca.
4. Crisis Leadership:
   • Leading and inspiring teams during challenging times.
   • The human side of cybersecurity and leadership.
5. Cybersecurity Frameworks:
   • Navigating various standards and their implications for global organizations.
   • Practical advice for implementing effective cybersecurity practices.
6. Personal Insights:
   • Jim’s journey, favorite podcasts, and what drives his passion for cybersecurity.
   • Fun rapid-fire questions revealing Jim's personal preferences and thoughts.

Notable Quotes:

• "The importance of ethical standards and external support for CISOs."
• "Strategies to optimize risk management and vulnerability assessment."
• "Insights into the human side of cybersecurity and leadership."

Upcoming Events:

• Digital Fight Club: Official podcast coverage and event highlights.
• ISSA North Texas: Moderating a panel on "Platform vs. Best of Breed" and the annual cybersecurity conference.

How to Support:

If you enjoyed this episode, please follow us on Spotify and Apple Podcasts, rate and review the show, and share it with your colleagues and friends. Your support helps us continue to bring you quality content on transforming the role of the CISO.

Stay Connected:

• Website: www.thpc.co
• YouTube: @TheProfessionalCISO
• LinkedIn: The Professional CISO

Join the Conversation:

We’d love to hear your thoughts! Leave a comment or review with your questions or insights about professionalizing the CISO role and risk management strategies.

#Cybersecurity #CISO #RiskManagement #ProfessionalCISO #JimDesmond #Leadership #Podcast #CybersecurityLeadership #DigitalFightClub #ISSA #TheProfessionalCISO

Tune in to learn more about professionalizing the CISO role and enhancing your cybersecurity practices!

Welcome to the latest episode of The Professional CISO Show! In this episode, host David Malicoat sits down with Renee Guttmann, the founder and principal of CISO Hive, to discuss her extraordinary journey in cybersecurity. With a career spanning prestigious companies such as Coca-Cola, Royal Caribbean Cruises, Campbell Soup Company, Capital One, and Time Warner, Renee shares her invaluable insights and experiences.

We would like to thank our sponsor Armis for making this episode possible.
If you are going to Black Hat USA 2024, make sure to visit them at their booth or schedule some time at one of their events!

Key Topics Discussed:

• [00:02:00] Early Career: Renee’s unique path from an analyst to a top-tier CISO.
• [00:06:00] Networking: The critical role of networking in the cybersecurity field.
• [00:11:00] Professionalizing the CISO Role: Why it’s essential and its future impact.
• [00:18:00] Reporting Structure: The debate on where the CISO should report within an organization.
• [00:23:00] IT and OT Convergence: The evolution and importance of IT and OT security.
• [00:28:00] Career Advice: Staying well-rounded in cybersecurity and the importance of understanding OT.

Guest Information:

Renee Gutmann

• Founder and Principal, CISO Hive
• Formerly held positions at Coca-Cola, Royal Caribbean Cruises, Campbell Soup Company, Capital One, and Time Warner

Connect with Renee:

• LinkedIn: Renee Guttmann

Host Information:

David Malicoat

• Host of The Professional CISO Show
• Chief Information Security Officer at a medium-sized direct and digital marketing company

Connect with David:

• LinkedIn: David Malicoat
• Website: The Professional CISO

Resources Mentioned:

• National Association of Corporate Directors (NACD)
• Fair Institute
• Black Hat Conference
• North Texas ISSA

Subscribe and Follow:

• Spotify: The Professional CISO Show on Spotify
• Apple Podcasts: The Professional CISO Show on Apple Podcasts

Support the Show: If you enjoyed this episode, please rate and review us on your favorite podcast platform. Your feedback helps us improve and reach more listeners interested in cybersecurity.

Follow Us on Social Media:

• Twitter: @ProfessionalCISO
• LinkedIn: The Professional CISO Show
• YouTube: The Professional CISO

Tags: #Cybersecurity #CISO #ReneeGutmann #CybersecurityLeadership #Networking #Mentorship #ITSecurity #OTSecurity #RiskManagement

In this episode of the Professional CISO Podcast, host David Malicoat dives into the Innovation Series with Or Priel, co-founder of Silk Security. They discuss the acquisition of Silk by Armis, and the integration of Armis Centrix VIPR Pro. Or shares insights about his background in cybersecurity and his journey through various startups. The conversation covers the challenges organizations face with security tools and the innovative ways Silk Security’s technology bridges gaps in remediation and operational efficiency. They delve deep into the technology, problem-solving approaches, and the future extensibility of their solutions.

00:00 Introduction to the Professional CISO Podcast 
00:31 Innovation Series: Exploring Tech and Value Propositions 
01:02 Guest Introduction: Or Priel from Armis Centrix for VIPR Pro 
01:23 Or Priel's Background and Career Journey 
04:17 Discussing the Problem Space in Cybersecurity 
08:27 The Armis Acquisition of Silk Security 
10:29 Deep Dive into Armis Centrix for Viper Pro 
17:34 Implementation and Integration Insights 
19:12 Future Directions and Extensibility 
21:31 People, Process, and Technology Considerations 
29:15 Complementary Tools and Outcomes 
32:23 Conclusion and Final Thoughts

Episode Sponsor: www.armis.com/platform/armis-centrix-for-vipr-pro-prioritization-and-remediation/

Or Priel LinkedIn: https://www.linkedin.com/in/or-priel-13086371/

David Malicoat LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/

THPC Website: www.thpc.co

THPC LInkedIn: https://www.linkedin.com/company/the-professional-ciso-podcast

In this episode of the Professional CISO Podcast, host David Malicoat welcomes Will Long, Matt Walker, Andrew Forgie, and Phillip Wylie for a series of discussions on critical infrastructure and cybersecurity defenses. The guests share insights on vulnerability management, the role of federal and private sectors in securing critical systems, and the importance of asset inventory. They also debate topics like AI's impact on cybersecurity and the need for offensive security awareness. The episode concludes with announcements of upcoming events and speaking engagements.

00:00 Introduction to the Professional CISO Podcast 
00:30 Deep Dive into Critical Infrastructure 
01:27 Tools and Strategies for Vulnerability Management 
02:50 Final Thoughts on Critical Infrastructure 
03:32 Introduction to Matt Walker 
04:00 Insights from Digital Fight Club 
05:34 Future Topics and Takeaways 
07:19 Andrew Forgie's First Digital Fight Club 
08:35 Federal Government's Role in Cybersecurity 
12:46 Phillip Wylie’s Perspective 
15:38 Upcoming North Texas ISSA Conference 
16:43 Conclusion and Call to Subscribe

Sponsor

Interpres Security: www.interpressecurity.com

David Malicoat LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/

THPC Website: www.thpc.co

THPC LInkedIn: https://www.linkedin.com/company/the-professional-ciso-podcast

Digital Fight Club Website: https://digitalfightclub.co/

Will Long LinkedIn: https://www.linkedin.com/in/williamlongsr/

Matt Walker LinkedIn: https://www.linkedin.com/in/techguymatt/

Andrew Forgie LinkedIn: https://www.linkedin.com/in/andrewforgie/

Phillip Wylie LinkedIn: https://www.linkedin.com/in/phillipwylie/

In this episode of the Professional CISO Podcast, host David Malicoat introduces the first Innovation Series which delves into the latest technologies and developments in cybersecurity from a buyer's perspective. The episode features Michael Freeman, Head of Threat Intelligence at Armis, discussing the Armis Centrix product. The conversation covers the origins and problem-solving capabilities of Armis Centrix, focusing on asset identification, security prioritization, and process management. They discuss various aspects, including the integration of AI, the challenges of asset management in IT and OT environments, and the steps Armis is taking to future-proof its solutions. David and Michael also explore how Centrix can assist different cybersecurity teams without requiring additional hiring, provide process support, and potentially offer cost savings through tool consolidation. The episode aims to shed light on current trends and advancements, helping CISOs stay ahead in the ever-evolving cybersecurity landscape.

00:00 Introduction to the Professional CISO Podcast
00:30 Introducing the Innovation Series
01:22 Deep Dive: Armis Centrix with Michael Freeman
02:24 Understanding the Problem Space
03:32 Prioritizing and Securing Assets
07:45 Implementation and Initial Setup
11:48 Future-Proofing with AI and Acquisitions
17:55 People, Process, and Technology
30:05 Final Thoughts and Wrap-Up

Make sure you join Armis at Blackhat 2024: www.armis.com/black-hat

Michael Freeman LinkedIn: https://www.linkedin.com/in/michael-f-81848a4/

David Malicoat LinkedIn: https://www.linkedin.com/in/david-malicoat-cissp/

THPC Website: www.thpc.co

THPC LInkedIn: https://www.linkedin.com/company/the-professional-ciso-podcast