Govern velocity, not just risk.
AI and modern software move too quickly for governance that depends on serial approvals. The operating model has to establish boundaries teams can use in real time.
CISO · CYBERSECURITY · AI · TECHNOLOGY LEADERSHIP
Security for a world
moving at machine speed.
I build modern security programs at the intersection of AI, cloud, product, and public-sector technology—helping organizations innovate quickly, govern intelligently, and earn trust as they scale.
AI SECURITYCYBERSECURITY STRATEGYPRODUCT SECURITYGOVTECHCLOUD SECURITYEXECUTIVE LEADERSHIP
AI SECURITYCYBERSECURITY STRATEGYPRODUCT SECURITYGOVTECHCLOUD SECURITYEXECUTIVE LEADERSHIP
01
POINT OF VIEW
AI is changing the speed of business. Security has to change with it.
Security leadership used to optimize for systems that changed in releases. AI changes products, workflows, code, attackers, and decisions continuously. That makes the old model—security as a gate at the end of the process—too slow for the environment it is supposed to protect.
The modern CISO has to design for velocity: clear guardrails, measurable risk, resilient architecture, stronger product decisions, and governance that can keep up with experimentation. The goal is not to make innovation safer by making it slower. The goal is to make safe innovation the easiest path.
OPERATING PRINCIPLES
What modern security
What modern security
leadership looks like.
Less theater. More systems thinking, decision quality, and technology fluency.
Put security inside the product loop.
Architecture, identity, data, application security, and AI controls work best when they are part of how products are designed—not an inspection after the decisions are made.
Translate complexity into decisions.
Boards and executives do not need more security telemetry. They need clarity: what matters, what changed, what it costs, and what decision should be made next.
Build confidence without slowing progress.
The best programs create leverage. Customers trust the product. Engineers know the guardrails. Leaders understand the exposure. The business can move with fewer unknowns.
THE AI ERA
The control plane
The control plane
is changing.
AI is not another SaaS category to bolt onto the risk register. It changes how software is written, how decisions are made, how people interact with data, and how attackers scale.
01
AI governance that works in practice. Guardrails for experimentation, procurement, data, models, agents, and product integration.
02
Security controls that understand autonomy. Identity, permissions, observability, and decision boundaries for systems that act—not just respond.
03
A security organization that uses AI too. Faster analysis, better signal, improved engineering leverage, and more time focused on consequential decisions.
02
EXECUTIVE JOURNEY
From security engineering
to enterprise leadership.
The through-line is practical systems thinking: understand the technology deeply, make the risk legible, and build an operating model that holds up under real business pressure.
Accela
Chief Information Security Officer
Leading cybersecurity for a civic-technology company serving state and local governments. The mandate spans enterprise security, application security, resilience, assurance, customer trust, and security as a business capability.
OpenGov
Vice President, Security
Led security in a high-growth public-sector technology environment, integrating cyber operations, product and application security, assurance, and customer-facing trust into one operating model.
ASSA ABLOY
Product Security Leadership
Worked at the intersection of physical access, connected devices, cloud platforms, and software security—building a product-security perspective that treats the complete system as the security boundary.
Cengage
Security Engineering Leadership
Built hands-on depth across security operations, cloud, endpoint, incident response, architecture, and engineering. The foundation was technical: understand the system, quantify the risk, and improve it measurably.
WHERE I OPERATE
Executive range.
Executive range.
Technical depth.
The most consequential security work happens between disciplines. That is where I tend to operate.
AI Security & Governance
Practical controls for AI adoption, agentic systems, data use, experimentation, and product integration.
Cybersecurity Strategy
Operating models, priorities, investment, metrics, and measurable risk reduction.
Cloud & Platform Security
Architecture across modern SaaS, identity, infrastructure, data, and cloud-native systems.
Application & Product Security
Embedding security into engineering systems, product decisions, SDLC, and delivery.
Security Operations & Resilience
Detection, response, incident leadership, recovery, and operational readiness.
GRC & Assurance
Compliance and evidence programs that support customers and the business without becoming the business.
Executive & Board Communication
Turning technical complexity into clear choices, tradeoffs, and decisions.
GovTech & Regulated SaaS
Security and trust for technology serving governments and other high-expectation environments.
CURRENT THINKING
Ideas I think
Ideas I think
are worth pushing on.
Not generic security commentary. Questions at the edge of AI, technology leadership, risk, and public-sector trust.
Agentic AI changes the security control plane.
When software can reason, call tools, access data, and act autonomously, identity and authorization become much more consequential.
The CISO is becoming a technology operator.
The role is expanding across AI, product, resilience, customer trust, regulation, and enterprise technology decisions.
AI changes the public-sector trust contract.
Government technology has to balance speed and capability with transparency, accountability, resilience, and public confidence.
Security metrics should change a decision.
If a metric does not alter priority, investment, or behavior, it is probably reporting—not management.
SPEAKING / MEDIA
Useful conversations.
Useful conversations.
Strong opinions, clearly held.
Available for conference sessions, panels, podcasts, executive roundtables, and media commentary on modern cybersecurity leadership and the AI era.
Discuss an opportunity ↗01
Security at Machine Speed
How the CISO operating model has to change for the AI era.
02
Agentic AI & the New Enterprise Attack Surface
Identity, autonomy, data access, and guardrails when software can act.
03
The CISO Beyond Security
Why the role now sits across product, technology, customers, resilience, and AI.
04
GovTech, AI & Public Trust
What responsible innovation looks like when software supports public institutions.
05
Security Without the Theater
Building programs around outcomes, architecture, clarity, and measurable risk.
06
Board-Level Cybersecurity That Drives Decisions
Turning security data into executive clarity instead of dashboard noise.
03
BEYOND THE TITLE
I’ve always been drawn to complex systems—technology, software, security, aviation—and the same question underneath them: what makes the system work when conditions change?
That curiosity is a useful counterweight to executive abstraction. It keeps the work connected to how systems behave, how people make decisions under pressure, and where elegant plans collide with reality.
NEXT CONVERSATION
Building for what
Building for what
comes after “current state.”
Security leadership · AI strategy · GovTech · cloud and product security · executive conversations · speaking and media.
Connect on LinkedIn ↗