The Virtual CISO Moment

In this episode of The Virtual CISO Moment, Greg Schaffer talks with Keith Walker, System Administrator at Nephrology Associates of Northern Illinois and Indiana (NANI), about his unique path into IT, sparked by inheriting his late stepfather’s tech gear. Keith shares how building a home lab, securing a static IP, and hands-on tinkering shaped his career, and discusses the challenges of balancing operational efficiency with security in a healthcare environment. They explore the critical role of soft skills in IT, adapting to constant changes in Microsoft technologies, and preparing for AI-powered tools while meeting HIPAA and other compliance requirements. Keith also reflects on developing patience with end users, the importance of staying hands-on in tech leadership, and how he decompresses through family time and motorcycle rides.

In this episode of *The Virtual CISO Moment*, Greg Schaffer sits down with Samuel Hill, Senior Director of Product Marketing at Mind, to explore how authentic, empathy-driven marketing can cut through cybersecurity’s buzzwords and truly connect with practitioners. Hill shares his journey from the ER to the startup world, the power of storytelling in building trust, and why the industry is shifting from compliance checkboxes to real security programs. They also discuss Mind’s unified approach to protecting sensitive data at rest and in motion, plus how to manage stress and stay grounded in a high-pressure field.

In this episode, Greg talks with Jason Jauch, founder of C^2, about the challenges and rewards of delivering cybersecurity to healthcare practices. Jason shares his journey from hands-on IT to virtual CISO, why compliance doesn’t equal security, and how his one-stop-shop model helps clients manage risk without the noise. They also discuss upcoming HIPAA changes, niche security gaps in ophthalmology, and how Jason stays grounded through CrossFit.

Greg Schaffer sits down with Harris Schwartz, Founder of vSecurity Advisor and seasoned cybersecurity executive. With over 30 years in the field, Harris shares his journey from the dawn of the public internet to advising organizations on building risk-based, business-aligned security programs. Tune in for insights on leadership, mentorship, and creating a resilient cybersecurity culture.

Greg Schaffer welcomes Butch Rutt, Campus Security Supervisor at Littleton Public Schools, for a powerful conversation on leadership, service, and school safety. Drawing from his background in the U.S. Army and over two decades in law enforcement, Butch shares how his experiences inform a people-first approach to security. From crisis response to building trust with students and staff, this episode highlights the balance between vigilance and compassion in protecting our schools.

Nick Eicken is the founder of CyberAuthority and a seasoned Virtual Chief Information Security Officer (vCISO) with deep roots in both military and civilian cybersecurity leadership. A U.S. Army veteran who built top-secret communication networks as a signal officer, Nick transitioned to the private sector where he’s guided organizations across nonprofit, manufacturing, government, and consulting spaces. His firm, CyberAuthority, focuses on helping small and midsized businesses build defensible, scalable security programs through ethical, vendor-neutral vCISO services.

In this episode, Nick shares his journey from military service to launching his own cybersecurity practice. He and Greg Schaffer explore the value of standardizing the vCISO model, building trust with clients by understanding their business "why," and how to make cybersecurity frameworks like the NIST CSF approachable for SMBs. Nick also discusses the critical distinction between internal CISOs and third-party vCISOs, the importance of ethical independence from MSPs, and the need for transparency. The conversation wraps with insights on stress management, homebrewing, family life in Northern California, and upcoming CyberAuthority initiatives—including cybersecurity offerings for retirees entering one of the most vulnerable phases of their digital lives.

From the Middle Tennessee ISACA Conference, Cool Springs, Tennessee, March 2025.

Stacy Mill is a seasoned cybersecurity and IT executive with a track record of leading complex technology initiatives in both the public and private sectors. She has served as CTO for the State of Kansas, VP of IT and CISO at Nashville Electric Service, and global CISO at major enterprises like Spirit AeroSystems and Yum Brands. Stacy is also an active board member and thought leader in the utility and cybersecurity communities.

In this discussion, she discusses the evolving landscape of cybersecurity, emphasizing the importance of leadership, communication, and mentorship in navigating complex risk environments. Stacy also offers insights into building resilient teams, working effectively with boards, and fostering diversity in tech leadership. Her story underscores the value of adaptability, continuous learning, and advocating for others in the cybersecurity field.

In this episode, Greg Schaffer interviews James Pham, CEO and co-founder of Opsin, who shares his unique journey from chemistry medalist in high school to tech entrepreneur. James discusses how his academic and professional path took him from studying in Korea and working in Singapore to pursuing his entrepreneurial dream in the U.S., eventually earning a spot at MIT where he taught machine learning. He later joined Abnormal Security in the Bay Area, gaining insight into enterprise security challenges. This experience inspired him to co-found Opsin, a company focused on helping organizations manage and govern generative AI usage securely. James emphasizes the risks of shadow AI and the need for guardrails in enterprise environments, particularly as large language models become increasingly integrated into workflows.

Referenced post: https://www.linkedin.com/posts/jamesopsin_steps-to-address-oversharing-activity-7319344015231856640-gmX9/

In this episode of Security Conversations from The Virtual CISO Moment, Greg Schaffer sits down with Mick Grayson, a seasoned cybersecurity professional with a wealth of experience in both the public and private sectors. Together, they explore the evolving challenges of managing risk in an increasingly complex threat landscape, the importance of mentorship in cybersecurity leadership, and how small and midsized organizations can build practical, resilient security programs. With thoughtful insights and real-world anecdotes, Mick offers valuable perspective for security leaders at every level.

In this episode of Security Conversations from The Virtual CISO Moment, we’re joined by Wil Ku, a seasoned cybersecurity leader with deep expertise in risk management, security strategy, and governance. With a background that spans both public and private sectors—including leadership roles at top consulting firms and critical infrastructure organizations—Wil shares insights on building resilient security programs, aligning cybersecurity with business objectives, and navigating the evolving regulatory landscape. Tune in for a practical, forward-looking conversation that highlights the importance of adaptability, leadership, and strategic thinking in today’s threat environment.