S2 Ep2: Strategic spending: Prioritizing your security dollars

In this episode, we dive into the practicality of DevSecOps, uncovering this buzzword to understand how it transforms securing the software development process. We also explore the nuances that differentiate CloudSec from DevSecOps, shedding light on their distinct roles in safeguarding digital assets. Additionally, we discuss how to structure an organization that embraces security culture, gaining buy-in from both technical and non-technical stakeholders. Tune in to discover the essential principles and practices that can help your organization prioritize security while maintaining efficiency and innovation. Guest: Larry Lidz, CISO, Cisco CX Cloud To speak to Jason, please email him at [email protected]

In this podcast episode, we explored key aspects of building effective security programs on a budget. We went into strategies for optimizing budget allocation, emphasizing the importance of prioritizing tooling investments. The decision between in-house security tool development and purchasing external tools was discussed, weighing the pros and cons. Additionally, we examined how an organization's maturity level influences the development of its security program and the dynamics involved in building a cohesive team. To anticipate future challenges, we analyzed the evolving threat landscape for 2024, providing valuable insights for proactive security measures. Guest: Doug Hromco, CISO, People’s Bank To speak to Jason, please email him at [email protected]

In the first episode of Series 2, we explored current trends in Incident Response and the rising significance of Cyber Insurance in today's cybersecurity landscape. We also delved into the entrepreneurial journey of becoming a CEO or Founder of a Cyber business and discussed the transition from the US Army to careers in Cybersecurity and Technology. To add some light-heartedness, we couldn't resist a bit of friendly banter between fans of the Yankees and the Red Sox, bringing a touch of sports rivalry to our conversation. Guest: Billy Gouveia, CEO of Surefire Cyber To speak to Jason, please email him at [email protected]

This is a terrific episode focused on all thing’s cyber recruitment. Usually on the Cyber Sit-Down podcast we’d take a look at a specific/unique topic, coupled with monthly insight into the cyber job market and advice for those trying to land a career in the space. This episode, our longest yet, we instead take a full on dive into the latter and focus only on the recruitment space within cybersecurity. Josh having experience and success on the corporate/internal recruitment side in mix with Alex’s agency experience makes for a full 360 view of the top ways to stand out as someone looking for an impactful career in the space. Josh Fullmer a long time cybersecurity recruitment leader, currently a Lead Cybersecurity Recruiter for Dragos, a company recognized as the world's top ICS/OT security firm. Prior to this, he was part of the Idaho National Laboratory Cybercore Integration Center and therefore has seen both sides of the fence. Josh is also a globally recognized voice on LinkedIn and beyond, with an audience of over 46,000 individuals on LinkedIn alone. He provides world class content around how people can grow their security careers, from something as simple as resume advice, to full on career road mapping. Beyond his LinkedIn contributions, Fullmer imparts advice and valuable insights every Friday through his Cyber Dream Job Blog. Additionally, he is on the cusp of launching the Cyber Dream Job Journey course, a comprehensive, step-by-step guide designed to aid individuals in landing more interviews and securing job offers. To speak to Alex, please email him at [email protected]

Join us for the June episode of the Cyber Sit-Down Podcast, where we grab some time with Brent Deterding, a well-known security leader in the industry to talk about the unique route he took to his CISO position, and the overall paths for security professionals to think about when assessing their long term career goals. We also delve into some light-hearted insight into the current landscape for security vendors (as Brent spent many years in that space) from a sales and recruiting aspect. This episode is a great listen for all security professionals looking to get into leadership at some point in their career, and for anyone in the space looking to network and build relationships with security leaders in general. From a sales perspective or otherwise. Our guest for this episode, Brent Deterding, is an esteemed security professional with over 20 years’ experience in the industry. Currently the Chief Information Security Officer (CISO) at Afni, Inc., Brent offers a unique perspective on the role of a security leader, having come from technical leadership at a Vendor the previous decades before making the transition. Brent is an active voice on LinkedIn and has always been committed to helping others in the industry build their network and find value in their work. Brent is frequently the one as well bridging the gap between the Vendor space and internal security relationships. Aside from his professional achievements, Brent is deeply passionate about adoption, foster care, and leading youth, sharing a strong bond with his wife in these endeavors. In his spare time, he enjoys engaging in outdoor activities, including hunting, and has a fondness for bourbon, which he humorously refers to as a free icebreaker. Join us as we delve into the captivating insights of Brent Deterding, a CISO with an unwavering commitment to security, innovation, and continuous learning. Through his engaging presence, Brent is sure to inspire and challenge our audience to navigate the ever-evolving landscape of information security with confidence and strategic foresight. To speak to Alex, please email him at [email protected]

We’re over a third way through the year! And in this month’s episode of the Lawrence Harvey Cyber Sit-Down Podcast, we have Aman Sirohi, Vice President and Chief Information Security Officer (CISO) at People.ai joining us for an outstanding conversation about the growing AI craze and it’s direct short and long term effects on cybersecurity, and the job market. Aman is an expert in the field of cybersecurity and AI. Aman shares his insights on how the use of AI is revolutionizing the cybersecurity threat landscape, creating new job opportunities and challenges. He discusses the impact of AI on various aspects of cybersecurity jobs, such as threat detection, incident response, and data privacy, and offers practical advice on how cybersecurity professionals can adapt to these changes. We also explore how the use of AI in cybersecurity is transforming the way organizations approach risk and the role of human expertise in this new era of AI. If you are interested in understanding how AI is shaping the future of cybersecurity jobs, this episode is a must-listen. This paragraph was written by an AI chat tool. Could you tell? Aman Sirohi is a renowned cybersecurity expert with over two decades of experience in the field. Before serving as the current CISO at People.ai, he was a leader at other great businesses like Ross Stores and Guidewire Software, and holds a long background prior in the consulting space for companies like Accenture, Cisco, and Verizon. He leads People.ai’s efforts in ensuring the security and privacy of its customers' data. Aman has a deep understanding of the intersection of AI and cybersecurity and has been at the forefront of developing innovative solutions to combat emerging threats. He has a proven track record of building and leading high-performing cybersecurity teams and has worked with organizations across various industries. Aman is also a sought-after speaker and has delivered talks at numerous cybersecurity conferences, sharing his insights on the latest cybersecurity trends and best practices. To speak to Alex, please email him at [email protected]

David, the SVP, CISO at Oracle SaaS Cloud, and former Microsoft and Google Leader and I discussed the state of the market after Q1 in 2023. David has a great view of the market overall being well connected and we then shift our conversation to the main topic around the federal/defense space in security and the current state of the job market for veterans. David, former U.S. Navy, shares some great experience in how he grew his career out of the military, and best ways for veterans to stand out to hiring managers using their service skills. David has been the SVP, CISO at Oracle SaaS Cloud for 4.5+ years, where he’s helped scale and expand security services for the division focused on cyber defense, cloud security, risk assessment, and DevSecOps. He is a well regarded and respected leader in the space, currently investing in and supporting several smaller companies in helping transform the market. Former Cloud Security Engineering Platform Director at Google, and long time enterprise security leader at Microsoft, David brings decades of experience across global organizations and cutting edge environments. David served in the US Navy, where he started his technology journey. To speak to Alex, please email him at [email protected]

Tune in as Al Ghous, CISO at Snapdocs and I discuss ways to stand out as a candidate in security this year in a tighter job market, domains in security, particularly in need, of moving forward, and non-technical skills most important to security leaders as they scale their teams. Al has a unique view of the information security industry having worked for several companies large and small across a variety of verticals, and gives some straight-from-the-source insight to those looking to grow their career in the field. Al Ghous: Al is currently the Chief Information Security Officer at Snapdocs leading their entire cyber security strategy, governance, and protection operations. Former security leader at GE Digital, Robert Half, Envision Digital, and Service Max Al is a well-renowned member of the security community participating in several other advisory boards and having been a Co-Founder of the Silicon Valley CISO Investments group partnering with dozens of other security executives throughout his career. Al has a great understanding of market trends and current challenges in the industry and provides great insight in this episode into ways for security professionals to grow their careers. To speak to Alex, please email him at [email protected]

In this first episode, I'm joined by Stephen Davis, Global Chief Information Security Officer for Revlon. We discuss a great many overarching topics looking into the trends for 2023 across security, and the hiring market. Stephen gives a unique background having been a hands on technical leader, and having led several programs across a variety of industries. Stephen gives his go-to tips for aspiring and current security professionals to grow their careers, from resume and interview advice, to best ways to differentiate yourself in a career path. We finish up with hiring trends currently being seen, and the worst sales reach-out vendor has ever gotten (Lebron James?). Stephen Davis: A well known and respected security leader, Stephen has led the Information Security programs for several enterprises, including Revlon, W. R. Grace, Intercept Pharmaceuticals, and ProSight Insurance after stints at Discovery and Morgan Stanley. Stephen has been recognized as a top 100 CISO in North America by the CISO Connect Panel 2022, and has been selected to the Cybersecurity Observatory Hall of Fame for his contributions to the cyber community. To speak to Alex, please email him at [email protected]