TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    Business

    The New CISO

    The New CISO is hosted by Exabeam Chief Security Strategist, Steve Moore. A former IT security leader himself, Steve sits down with Chief Information Security Officers to get their take on cybersecurity trends, what it takes to lead security teams and how things are changing in today’s world.

    Advertise
    • Apple Podcasts
    • Google Play
    • Spotify

    Latest Episodes:
    Learning From a Layoff: Career Growth, Change, and Opportunity Dec 29, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by guest Sandy Dunn, Lead Consultant, and Founder at Quark IQ.

    After spending years in healthcare, Sandy pivoted into a start-up before being laid off. Now embarking on the next stage of her career, Sandy shares the valuable lessons she’s learned and how she embraces life’s challenges. Listen to the episode to learn more about Sandy’s strengths as a CISO, the correlation between motherhood and leadership, and how to navigate the start-up industry.

    Listen to Steve and Sandy discuss the benefits of failure and maintaining an authentic mentor/mentee relationship:

    Meet Sandy (1:43)

    Host Steve Moore introduces our guest today, Sandy Dunn. Sandy has been a CISO for eight years at both a healthcare company and a startup.

    As she tackles her newest endeavor as the lead Consultant at Quark IQ, Sandy acknowledges that her strengths in the cyber security world are her persistence and passion for creating well-functioning systems. Although she may not think of herself as the most brilliant person in the room, her determination has been an asset everywhere she goes.

    Nothing To Prove (4:26)

    Sandy recognizes the leadership benefits of not needing to prove her brilliance. Since she doesn’t mind admitting when she doesn’t understand something, others can gain clarity, and she can identify unknown issues. She asks the questions others are afraid to ask for the benefit of her team.

    Although others may feel subject to imposter syndrome, Sandy reminds listeners that everyone has a vital role in the room.

    Having a Softer Side (10:46)

    As an executive who is also a mother, Sandy can use that nurturing skill set to motivate and manage her team. Sandy has become a stronger leader by putting her employees’ needs first, much like her children.

    Managing In The Moment (13:46)

    Steve presses Sandy on how she deals with team members prone to tantrums. Similar to her approach with her children and horses, Sandy’s first instinct is to understand her employees, how they think, and what upsets them. Like what drove her to cyber security, Sandy loves puzzles, including what puzzles her about people.

    In general, Sandy believes diversity in views and backgrounds is highly beneficial to a department because different perspectives bring different skills and abilities to the table.

    Potential Red Flags (20:09)

    Sandy is consistently asked to be a mentor, which she is grateful to do. However, she feels a person lacks curiosity if they ask her questions answerable through a quick google search.

    If someone fails to take the initiative to learn themselves, a job in cyber security would not be a good match for them.

    Resume Review (21:38)

    During a cyber security career day, Sandy reviewed resumes and determined who she felt were great candidates.

    Sandy, also an adjunct professor, found this experience rewarding because she had the chance to talk with and guide individuals on their CISO journeys.

    The Mentee/Mentor Relationship (25:21)

    Steve and Sandy discuss the mentor and mentee relationship.

    Sandy doesn’t love those terms because it’s too official for the nature of the dynamic: relationship-building. Instead of asking someone you admire to be their mentee, ask them what they are working on and how you can help, and a mutually collaborative relationship can form.

    Taking A Chance (30:31)

    Steve presses Sandy on her move from an established company to a start-up.

    Sandy recognized that she was no longer growing as a CISO at her healthcare job, so she jumped into a start-up business. Although she put too much trust into this company before they earned it, she did feel like it was a risk worth taking.

    Insight For Next Time (35:56)

    Reflecting on her seven months at the start-up, Sandy reveals what she wishes she would have done and what she learned from this experience.

    The best advice would be to study start-ups, how they function, and what they need to do to expand. Doing your homework is always a good idea when joining a new company.

    The Aftermath (39:00)

    Sandy shares how she felt after being laid off, which happened the day after she was asked to conduct mock interviews and give career advice to students.

    Although she did not feel like the best person to advise others at that moment, she is grateful for the people she met during those seven months and the experience as a whole. Her main advice now is to “run towards the pain” and let your failures facilitate growth.

    The New CISO (43:56)

    To Sandy, being a new CISO means constantly evolving. If you’re in this unique position, it’s best to find new ways to collaborate, cooperate, and make positive changes for your customers and team alike.

    Links mentioned:

    LinkedIn


    Protecting Your Revenue with Machine Learning and Data Science Dec 15, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by returning guest Steve Magowan, VP of Cyber Security at Blackberry.

    Steve returns to dig into the reality of data science and AI and ML in cyber security. Breaking through the buzzwords, Steve understands the current state of technology and how it's used to protect revenue today. Listen to the episode to learn more about communicating expectations, using risk management to generate funding and the current landscape of security threats.

    Listen to Steve and Steve discuss educating executives and how utilizing data science in your security program can reduce friction and translate risk:

    Welcome Back, Steve (1:45)

    Host Steve Moore reintroduces our guest today, Steve Magowan. As a reminder, Steve manages everything security-related for Blackberry, from corporate security development to spearheading IoT initiatives.

    When asked to define AI, Steve Magowan explains that what AI means to the security world today is machine learning, both unsupervised and supervised, to prevent risk. In general, AI is still being widely researched and is often a buzzword thrown around, but full-on AI remains theoretical.

    Turning AI Into Action (6:22)

    Steve asks Steve Magowan how he handles the AI suggestion from executives, who may need more clarification on how this tech is used.

    Steve Magowan recognizes that he is a business enabler whose job is not only to protect data but to protect revenue. He would need to keep his company's resources in mind when discussing AI and determine if this type of tech is necessary for the goals ahead.

    Protector of Revenue (11:30)

    Steve Magowan has the unique position of protecting revenue for his company, an uncommon skill set for CISOs. Steve uses ML technology to map business activities and relate that to security. Having that ability allows him to communicate with executives in business terms to ensure their funds remain safe.

    Clear Lines (15:34)

    Although Steve has this authority, he believes CISOs should refrain from reporting to a CFO or CIO because their mandates conflict. Although executives wish to simplify their correspondence by going to a CIO for a one-stop shop, conflating their roles with a CISO would downplay both positions and render them less effective.

    Understanding Risk Management (19:10)

    Steve Magowan always tells leaders that risk management is the language in which security leaders gain money because you can turn security problems into dollars and cents. Pulling data allows you to understand and pitch how to receive resources based on the security issues faced.

    Ultimately, Steve's job is not to separate operations and business. His role is not to achieve technical outcomes but business outcomes using technical outcomes.

    Walking Through Detection Triggers (27:22)

    Steve asks Steve Magowan why the detection of bad things has shifted from signatures to "normal vs. abnormal."

    Steve Magowan explains how the landscape has changed and that cybercriminals now have more money to commit crimes and have the same education as security professionals. With cyber criminals getting more clever, ML is the only way to detect patterns that don't make sense, though even that is getting challenging.

    Staying Resilient (32:42)

    When facing sophisticated threats, you must ensure that you have data backups that cannot be breached and limit the scope of the hacker's blast radius for any hit. There will always be threats, but you must do your best to remain resilient.

    The Bias Problem (34:58)

    Steve Magowan outlines the risks of building your own ML program, such as personal biases that can skew the results of your data. The biggest lesson is that data can lie and lead you in the wrong direction if you let it.

    The Flow Of Output To Input (39:22)

    From a data science perspective, the data doesn't always cooperate. Although the goal is always to make the data readable to executives and reduce friction, these systems have been designed by different people from different systems during different times. Every security leader must parse through the information and bake it together into something usable for the business.

    Helpful Tips (43:48)

    Steve Magowan recommends mapping your tools, determining the problems they solve, and then relating that to your greater security framework. You can then review what works and what tools can be removed or added. The main goal is finding your problems and then mapping your solutions accordingly.

    What It Means To Be An Executive (39:47)

    Steve presses Steve Magowan on what it means to be an executive who leverages data science and ML. To Steve, it means you must use your technical skills to protect revenue if you want a seat at the table.

    Links mentioned:

    LinkedIn



    Life After Breach: How Hospitals Can Protect Patient Data Dec 01, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Jackie Mattingly of Owensboro Health.

    With a passion for technology since childhood, Jackie first began her career in IT. Today, she shares how an experience with a malicious insider transitioned her into a career in information security. Listen to the episode to learn more about Jackie’s career journey, navigating company acquisitions, and protecting patients’ data.

    Listen to Steve and Jackie discuss the unique challenges of working as a healthcare CISO and handling security breaches:

    Meet Jackie (1:51)

    Host Steve Moore introduces our guest today, Jackie Mattingly. Jackie is the CISO for Owensboro Health, a three-hospital system in Kentucky serving eighteen counties and two states.

    Jackie knew she wanted to work in technology since she was a little girl, first sparked by the game Oregon Trail. Getting her degree in computer programming, Jackie reflects on how she gained the work experience needed to have the career she wanted.

    News Days (7:04)

    Steve asks Jackie about her time working at a local news publication and if she has met anyone interesting while there. Jackie shares that she mainly worked alone at night, loading the news articles to the website.

    The Radiology Center (8:41)

    Jackie’s next move into information technology was at a radiology imaging center, whose owner understood the importance of keeping up with technology.

    In one of the first radiology centers with an MRI machine, Jackie reflects on connecting the other radiology systems to that machine and what you should consider when working with a new device.

    Transitioning Through Acquisitions (13:18)

    When Owensboro Health acquired the radiology center, Jackie’s lifestyle changed. Now at a much larger organization with never-ending hours, Jackie had to meet the challenges of serving a 24-hour operation.

    Preventing Burnout (17:17)

    To prevent her staff from burnout, Jackie rotated calls and cross-trained each person so no matter what, people could take on each other’s roles during their on-call shift.

    Jackie would also be available to dive into on-call sessions because she likes to help and get into the weeds of technology.

    Leveraging The Team (20:30)

    Jackie has tested new technology for her companies throughout her career. Now managing the information technology for a hospital, Jackie recognized the difficulty of getting advanced technology for a larger company.

    While it is understandable that the hospital focuses more on patient care than tech, Jackie shares how she and her staff were leveraged to get the hospital’s systems up to par.

    Updating The Voice Network (25:43)

    Steve presses Jackie on her role in upgrading the hospital’s voice network. With so many providers’ offices and clinics to service, Jackie did have to hire a consulting company to help with the project.

    Although Jackie does not have a project management certificate, she does believe that training is valuable.

    Phasing Into Information Security (29:32)

    One day the FBI showed up at the hospital to state that an employee was stealing patients’ identities through their systems. Still, in her IT management role, Jackie was less information security-minded at the time.

    Jackie was brought on to navigate this investigation and fell in love with the security world, leading to the next phase of her career. During this time, Jackie learned that she couldn’t quit obsessing over this breach and had the drive to solve security problems.

    Becoming The CISO (34:22)

    In 2013, Jackie moved from being the IT leader to officially the security leader. She then started auditing access to patients’ charts and finding other ways to protect others’ personal information.

    Soon Owensboro acquired another hospital, and the FBI arrived again to share that there was an even more significant security breach from a malicious outsider. Since this breach was inherited from the newly merged hospital, Jackie had to work through their systems and determine how to handle the issue.

    Money and Momentum (39:47)

    Steve presses Jackie on how she handled having money and momentum in the security space for the first time. Jackie immediately put inscriptions in place and built a security team who could help them with the organization’s overall mission.

    Getting Involved Early (43:27)

    After getting involved with another acquisition, Jackie explains how much easier that process was since they were brought on early. They were able to do their due diligence more effectively using their own products.

    The New CISO (46:01)

    To Jackie, being a CISO in healthcare is rewarding because you protect patients and their data.

    Links mentioned:

    LinkedIn


    Building Your Framework for Fulfillment Nov 17, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Demetrios “Laz” Lazarikos, three-time CISO and Co-founder of Blue Lava Security.

    A naturally curious child, Laz became interested in technology early, prompting his life-long love of learning. Today, he shares how different lessons from childhood and the airforce led to his fulfilling CISO career. Listen to the episode to learn more about Laz’s fascinating cybersecurity journey, the influence of his family, and how to become a more effective mentor.

    Listen to Steve and Laz discuss his approach to career development and how his passion for learning led to his success:

    Meet Laz (1:43)

    Host Steve Moore introduces our guest today, Laz Lazarikos. With over thirty years of security experience, Laz wanted to build a platform where security leaders could measure, optimize, and develop their security programs, which he accomplished with Blue Lava.

    As a child, Laz’s mother encouraged his interest in technology. Passionate about solving tech problems at an early age, Laz credits his childhood interest as his cyber security start.

    Growing Up Greek (6:56)

    Laz shares what it was like growing up in a traditional Greek family, which he compares to the film My Big Fat Greek Wedding. From a family of entrepreneurs, Laz felt pressure to take over the family business but instead started a security career.

    At twelve years old, Laz’s mother advised him to go to his uncle, a loan shark, for a loan to buy tech, which he paid back with interest. Laz appreciates the lessons he received from his mother and credits her for giving him valuable life experience.

    Meeting Carl Sagan (10:46)

    At ten years old, Laz heard Carl Sagan, of the original Cosmos fame, speak during a field trip. Much of Carl’s speech resonated with Laz, including that anyone could do anything they wanted if their actions aligned with their goals.

    Going Into The Airforce (13:13)

    Steve asks Laz about his time in the airforce. While being recruited, Laz became interested in how systems and machines worked. Before he joined, the airforce promised he would get much training and education around security communications, which secured his interest.

    At seventeen, Laz’s mother allowed him to emancipate, and he officially joined the airforce and learned foundational lessons for functioning in society.

    A Foundation Of Learning (18:30)

    Steve presses Laz on what he is doing today in his pursuit of education. Laz shares how his mother took him to the library every weekend as a kid and how his father had him complete writing exercises based on the newspaper.

    Today, Laz looks at education as something you can never lose and can apply to life and work. Still a lover of libraries, Laz has three library cards for three cities and looks to history to improve his efforts.

    Working Backward To Move Forward (22:32)

    In terms of mentorship, Laz recommends thinking about your goals and working backward. This approach has always worked for Laz and other CISOs as well.

    Laz puts thought into how he uses his time for personal growth and looks to the great CISOs of history to evaluate actions for success.

    MBA Or Side Hustle (30:00)

    Steve presses Laz on if CISOs should get an MBA or do a side hustle to build a security network.

    To make this decision, you should evaluate the cost and time investments required and determine if either opportunity is needed for your overarching goals. You have to make choices based on what’s best for you.

    Advancing Through Mentorship (36:58)

    To Laz, your CISO career boils down to mentorship, and he acknowledges that his mentors were his family and, later, the airforce. With meaningful relationships, training, and academic learning, you can advance your career and succeed at your job.

    The Missing Piece (39:32)

    Steve asks Laz what senior security professionals are missing in terms of mentorship tactics. Laz recognizes that CISOs should understand their goal as leaders and then work backward. He also suggests being open to feedback and working on teaching effectively.

    Laz felt inspired to teach to give back to the community and share his life lessons with his students.

    A New CISO (49:25)

    To Laz, new CISOs should ask themselves if they are coachable, open to feedback, and willing to learn new ways. Although the old tactics were helpful, we must look to new strategies as we move forward.

    Links mentioned:


    LinkedIn



    Bridging the Effectiveness Gap: A CISO's Perspective on New-Scale SIEM with Tyler Farrar Nov 03, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Tyler Farrar, the CISO at Exabeam.

    With malware-free attacks becoming increasingly common, Tyler understands the best ways to bridge the effectiveness gap. With this in mind, he shares his SOC philosophy and the importance of threat detection. Listen to the episode to learn more about the act of prevention, the pillars of a SIEM product, and why attackers gravitate toward credential techniques.

    Listen to Steve and Tyler discuss the steps to success in an age of constantly increasing data :

    Meet Tyler (2:06)

    Host Steve Moore introduces our guest today, his colleague, Tyler Farrar. Before working at Exabeam, Tyler was a customer.

    With his impressive background in the security field, Tyler explains Exabeam's perspective on "defender behavior" and balancing incident response and crisis management with prevention.

    The Focus On Prevention (5:50)

    Steve presses Tyler on how you should balance your methods to increase prevention. Tyler lists different preventative tools, such as firewalls, and stresses the importance of detecting suspicious activity early on.

    Tyler gives his take on how response becomes prevention in crisis management. Preventative tools can fail, so being able to detect suspicious behaviors is critical.


    Addressing The Gap (10:36)

    Addressing the gap in analytics, Tyler recognizes that there is a difference between what the security team needs and what the SIEM product delivers.

    Every company faces an immense volume of data, an inefficient manual cyber process, and software that can fail to detect the attacker's behaviors. Tyler lists the solutions that can counteract these problems, including behavioral analytics.


    The Rise Of Malware-Free Attacks (14:32)

    Steve points out how 71% of cyber-attacks are credentialed and malware-free. Tyler explains that attackers use the compromised credentials approach because it is easy. CISOs can miss the mark because legacy software can be ineffective at detecting threats.


    New-Scale SIEM (20:43)

    According to Tyler, new-scale SIEMs would be able to securely ingest data from anywhere, parse through that information quickly, and then store that information and make it searchable.

    Tyler also explores his philosophy on how to design a SOC. One example of a productive SOC is conducting risk assessments throughout the organization to identify gaps and then acting on those results.


    Life Of The Analyst (28:52)

    Steve presses Tyler on how the experience of the investigation factors into meaningful work for the analyst.

    Tyler stresses the importance of SOC leadership to make the team effective. A stressed SOC can lead to the loss of talented workers and affect the company's security.


    New Software Ahead (33:16)

    Tyler discusses the products he is looking forward to on the horizon. Every CISO's goal is to keep their company safe. Being able to show all the threats and vulnerabilities in place would be hugely valuable, which is why Tyler is interested in Systems Navigator.


    SOC Philosophy (49:55)

    Tyler's top SOC philosophy is to be aligned with your adversaries and learn how they think in addition to your defenders. Understanding both perspectives can create a culture of empowerment and protect the organization from threats.


    Links mentioned:

    LinkedIn



    Storytelling For CISOs – How to Make Your Message Resonate with Tom August Oct 20, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Tom August, a seasoned CISO with over thirty years of experience.

    First starting his career as an accounting intern, Tom has since had an incredible journey where he not only wrote the CISO Handbook but created a risk-management methodology. Today, he shares what he's learned from his years in the cybersecurity industry and the importance of storytelling. Listen to the episode to learn more about Tom’s unique transition into cybersecurity, the inspiration behind the CISO Handbook, and selling your “why.”

    Listen to Steve and Tom discuss how to captivate executives without fearmongering and navigating hard conversations with the broader organization:

    Meet Tom (1:55)

    Host Steve Moore introduces our guest today, Tom August. Over his decades-long career, Tom has worked across multiple industries, from healthcare to military defense to financial services.

    A lifelong fan of electronics, cybersecurity became a life-changing move for Tom, despite having an initially unrelated start.

    Tom’s Take (5:30)

    Steve presses Tom on what it was like watching the famous John McAfee and his team work when Tom was an accounting intern.

    Tom saw they had an organized methodology and plan when handling a security breach and appreciated being brought in. A wide-eyed college student, Tom was fascinated by everything he learned and wanted to do more.

    The Move To Financial Services (9:07)

    While building out the security program at a financial organization, Tom had the opportunity to be mentored by one of the original CISOs, Micki Krause. Recognizing that Micki is a trailblazer in the cybersecurity industry, Tom appreciates that he learned technical skills from her and how to communicate with chief executives.

    After being challenged by Micki, Tom was encouraged to write security books, leading to the CISO Handbook.

    The CISO Storyteller (15:50)

    To Tom, every CISO needs to be a storyteller, though few have mastered that. Often CISOs will speak to executives using different buzzwords and acronyms versus adequately explaining the problem they are trying to solve. To combat this, Tom urges listeners to work on their communication skills.

    The IT Audit (17:07)

    Tom led many audits and learned many facts about the organizations. Tom had to present a lot of research to international executives as a result.

    Although Tom can’t share much information about this time, he acknowledges that specific cultural differences made it challenging to tell the story of the problem at hand.

    A Lever of Influence (27:55)

    Due to his mentor relationship with Micki, Tom learned a simple but valuable risk-management methodology. Tom decided to take that further by meeting with executives individually to see what they cared about in terms of risk.

    As a result, Tom ensured that he could meet the needs of his organization. By the time he met with the board, there were no surprises about his security plans.

    Improving Our Stories (36:50)

    Steve presses Tom on why so many CISOs lack comprehensive storytelling skills, which Tom credits as their need to be correct. Recognizing that CISOs have good intentions, Tom also understands they can miss the bigger picture.

    If you are a CISO, you should know why your problem is compelling, and if you can sell that, the “where, ” “when,” and funding will follow. The main thing is not to be confusing with your delivery to maintain captivation and promote clarity.

    Risk Vs. Compliance (44:46)

    Due to his accounting background, Tom understands that auditors are well-intentioned but limited due to their checklists. Knowing that risk does not follow the rules, Tom explains that compliance is not always the most helpful approach.

    Risks are difficult to quantify and require everyone involved to be on the same page about the next steps.

    The Modern CISO (49:55)

    To Tom, being a new CISO means you are a fantastic listener, business partner, and someone who understands both risk and compliance. And, of course, you need to be a good storyteller who knows how to put everything together.

    Links mentioned:

    LinkedIn


    Translating Your Military Skills for Security Success with Jason Hamilton Oct 06, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Jason Hamilton, CISO at Mutual of Omaha, to discuss how having a military background leads to security success.

    After twenty-two years in the U.S. Marine Corps, Jason was able to take his skillset and move into the cyber security industry. Today, he shares what he learned over the years that prepared him for the career he has today. Listen to the episode to learn more about Jason’s military experience, tips for officers entering the civilian workforce, and the importance of corporate mentorship.

    Listen to Steve and Jason discuss ways for veterans to transition into the corporate world:

    Meet Jason (1:45)

    Host Steve Moore introduces our guest today, Jason Hamilton. Jason shares his first mission as a Communications Systems and Information Officer. Jason also divulges what a higher-ranking officer should do, such as refining leadership skills and managing efficiently.

    Essential Lessons (8:30)

    Steve presses Jason on what else he learned from his early days as an officer.

    Jason explains that there’s no such thing as a perfect leader, and everyone makes mistakes. The key is to learn from your mistakes when you’re young, which applies to both the military and corporate world.

    Civilian Training (10:01)

    When Jason first joined the Marine Corps, information technology was separate from his role.

    To move up, Jason had to learn to work with data on the battlefield and eventually took on an instructor position. To get smart fast, he took civilian classes to ensure he could adequately train other officers on information and data.

    Part Of The Job (14:56)

    As Jason rose through the ranks, working with data remained. Jason learned about Cyber, formerly known as Information Assurance, and how it became a priority of the Marine Corps. As Cyber became part of the military, it became more and more a part of Jason’s career.

    The Last Ten Years (19:22)

    Jason reflects on his last ten years in the corps. Like anyone who has long served, he had to broaden his horizons to reach a different level, often through education. Jason had a strictly cyber role by the end of his military career and focused on leadership.

    Ultimately, Jason credits everything he did in the Marine Corps for preparing him for the corporate world.

    General Feeback (22:55)

    Steve presses Jason for advice he can give other officers looking to transition into civilian work.

    Jason reminds officers to humble themselves when entering the corporate sector because co-workers may not care about their military past. Also, he urges officers to work on resume writing and seek mentorship when looking for a job.

    Lessons On Corporate Culture (32:10)

    When veterans come into an interview, there is a natural culture shock, primarily because workers are not as likely to be Type A outside the military. Other differences are incorporating empathy and listening into your leadership style.

    While it is up to you to quickly solve a problem in the military, in the corporate world, there is much more emphasis on nurturing your team to fix workplace issues.

    The Mentor Relationship (35:31)

    Jason used to meet his corporate mentor once a month and learned after his first meeting that he would need to drive the conversation. Jason then would send his mentor his agenda two weeks ahead of time to ensure that he would make the most out of every encounter.

    Ultimately, veterans need to show initiative when transitioning into civilian work.

    The End Of The Mentorship (37:37)

    Steven asks Jason what officers should gain from a corporate mentorship program. Besides resume writing, Jason urges veterans to learn how to negotiate salaries and familiarize themselves with corporate culture.

    Finally, A CISO (41:58)

    Now a CISO, Jason shares his goals when starting his cyber security career. His first goal was to give himself two years in the corporate world to see how he fared. His next goal was to learn how to influence the program and take the necessary steps.

    To Jason, being a new CISO means having the ability to set a direction in the corporate world. It also means giving back to his company and associates as he continues to hone his leadership abilities.

    Links mentioned:

    Mutual of Ohama


    Broad Knowledge is Power: Building a Better Security Team with Bryan Willett Sep 22, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Bryan Willett, CSO at Lexmark International, Inc, to highlight the importance of collaboration and team building.

    With over two decades of experience, Bryan understands the CISO role and how to support your team. With this in mind, he shares what CISOs can do once they achieve this status to develop their skills further. Listen to the episode to learn more about transitioning into management, sharing your knowledge, and the benefits of diversity.

    Listen to Steve and Bryan discuss how to build a diverse security team and the skills needed to be a better CISO:

    Meet Bryan (1:50)

    Host Steve Moore introduces our guest today, Bryan Willett. Bryan has worked at Lexmark for over 25 years and prioritizes minimizing risk for the business.

    With a unique scope of duties, Bryan has worked his way up the ranks and monitors security trends, such as supply chain measures. Ultimately, he understands the importance of collaboration to keep all company areas safe.

    The Road Travelled (5:37)

    Beginning his career in firmware development, Bryan wanted to transition into a position where he could learn more about the product development pipeline and work with people. He then went down the product management track, which set him up for the leadership side of the field.

    The Best PM (10:27)

    When asked about his stepping stone from product manager to manager, Bryan reflects on what motivates him to work hard and improve the team around him.

    Feeling Intimidated (13:00)

    Steve presses Bryan on how intimidation and imposter syndrome impacts career goals.

    Bryan shares that he’s primarily looking for team members who are jacks of all trades and that he believes having a diverse set of knowledge will set you up for success. With multiple skills, you will be able to work well in the security field, even if it’s initially uncomfortable.

    Developing as a CISO (16:26)

    Bryan shares what CISOs can do in their position to develop further. Once getting into a management position, you should always support your team and prepare them for their subsequent roles.

    Improving as a Salesperson (24:02)

    As you pitch executive leadership on programs you want to implement, make sure you can explain what you need simply, without technical jargon, to convey the key points you are trying to make. Crafting a clear elevator pitch will help you make the sale.

    Solving Business Problems (31:18)

    Early in Bryan’s career, Lexmark was experiencing challenges due to the nature of the printing industry. Noticing that the company could experience a certain level of risk, Bryan built a highly capable team to harden the system and create a security development lifecycle for both the company and the customers.

    Third-Party Risk Management (38:16)

    When Bryan started his third-party risk management program at Lexmark, he had to partner with the procurement and legal team. Due to experience with other aspects of the business, Bryan was well-prepared to oversee this endeavor and communicate with others about their needs.

    Business Savvy (42:07)

    Steve presses Bryan on the future of CISOs.

    Considering the CISO today, Bryan understands they likely worked their way up in the security field. However, Bryan recognizes that this field will mature as we uncover new risks, and the CISO role will change with it. Bryan predicts that future CISOs will have the immense business knowledge needed to keep the company moving and make necessary trade-offs.

    The New CISO (45:47)

    To Bryan, being a new CISO means focusing on diversity in the workplace by hiring individuals different than you. It’s essential to understand your weaknesses and fill in the gaps with other talented security professionals who can make your team complete.

    Links mentioned:

    Lexmark



    Success After CISO: How to Become Your Own Boss” with guest Aaron Bailey from The Missing Link Sep 08, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Aaron Bailey, CISO and co-founder of The Missing Link, to discuss what it takes to start your own security business.

    Getting his first computer at eleven years old, Steve has always loved working with technology. Through explaining his professional journey, Steve shares the benefits and difficulties of being a cyber security founder. Listen to the episode to learn more about Aaron’s first jobs, joining an established startup, and success after being a corporate CISO.

    Listen to Steve and Aaron discuss being your own boss and the challenges of being a co-founder:

    Meet Aaron (1:32)

    Host Steve Moore introduces our guest today, Aaron Bailey. Always a tinkerer with technology, Aaron explains how he started in cyber security, working his way up from entry-level positions.

    After high school, Aaron struggled to find a job. After memorizing a manual per his father’s advice with a proposition of being quizzed, Aaron finally got hired at a computer shop, launching his career.

    Why This Job (9:23)

    Steve asks Aaron what the pay was like at his first job.

    Through hard work, Aaron’s salary doubled within a year, and he was paid far more than other people his age.

    Aaron’s Advice (11:52)

    Although Aaron does not believe you need to be a staunch techie like himself for every job, what he looks for in an interviewee is passion, intelligence, perseverance, and dedication to the field.

    Essential Aid (19:42)

    Steve presses Aaron on the guide Essential Aid and how to explain it to others. Aaron defines it as containing the top mitigation strategies for cyber intrusions. To use it properly, you have to embrace automation.

    Becoming a Founder (25:53)

    When Aaron’s colleague Sam resigned from their corporate job, Aaron learned he was starting his own business and wanted Aaron to come with him.

    Sam prompted Aaron to meet with the other partners, beginning the next stage of his CISO career. Aaron then shares the early weeks of joining the Missing Link and the challenges along the way.

    A Non-Startup Startup (33:05)

    The Missing Link was already a successful startup before Aaron joined, but they did not have a cyber security department. Aaron and Sam then became the company’s security professionals, which came with tremendous planning and organizing.

    The Entrepreneur CISO (38:48)

    Host Steve presses Aaron on his advice for other CISOs wanting to start their own businesses.

    Aaron shares what was difficult about being a corporate CISO where you’re not always listened to compared to his position at the Missing Link. As a founder, you have increased responsibilities, but it’s much easier to ask for what you need for your team.

    More Advice (44:03)

    Aaron is still learning the shareholding and equity aspects of being a founder. Success once does not always mean success every time, so Aaron’s main advice is to always ask for advice.

    Starting your own cyber security department is the most incredible interview of your career, but this path is not always easy.

    A New CISO Founder (50:59)

    To Aaron, being a CISO and a boss means having a seat on the board. Training new CISOs and watching them leave to start their own companies gives him the most joy.

    Ultimately, the new CISO strives for the top and is not afraid to bring others up in this increasingly necessary field.

    Links mentioned:

    The Missing Link


    Leading with a Military Mindset: It’s We, Not Me with Steve Magowan Aug 25, 2022
    Show notes

    In this episode of The New CISO, Steve is joined by Steve Magowan, Vice President of Cyber Security at BlackBerry, to discuss how military teachings apply to tech.

    First starting his career in the air force, Steve understands how the military mindset can make you an asset in the security field. Through evaluating the benefits of his experience, Steve shares what CISOs can learn from military professionals. Listen to the episode to learn more about the importance of understanding IoTs, the military work ethic, and how quality leadership stems from a lack of ego.

    Listen to Steve and Steve discuss the key qualities of a leader and breaking into cyber security:

    Meet Steve (1:39)

    Host Steve Moore introduces our guest today, Steve Magowan. Steve reveals how long he’s worked for BlackBerry.

    Steve Magowan explains how his background in the air force led to his cyber security career, where he utilizes his tech abilities and wears many hats.

    A Canadian In The Air Force (4:44)

    Steve asks Steve Magowan, a Canadian, what was more challenging about the air force: the cold in Canada or dealing with Americans?

    Steve shares that the real difficulty is flying through the congestion above the United States. He realized how empty most of Canada is, which makes for great training grounds.

    A Transition Opportunity (8:19)

    Steve Magowan shares how his various skill sets suited him well for transitioning into cyber security and how there are more needs for people who understand IoT applications.

    Although having this skill set is now recognized as vitally important, it’s challenging to find someone with tech abilities who can also manage a team. Due to their work ethic and unique perspective, the military has become a worthwhile option for recruiting cybersecurity professionals.

    The Military Mindset (13:56)

    Steve and Steve discuss the differences between non-military and military security professionals.

    Host Steve notes that people who have served tend to be more willing to work long hours and share their perspectives to manage a crisis. Steve Magowan explains that much of this team mentality comes from the “us and we and ours” core of their military training.

    Moving Into Cyber Security (17:00)

    Although Steve did not have a direct cyber security background, a family friend knew of a job for him in the field. With years of consulting and IoT experience at 38 years old, Steve was well suited to transition into, at first, an IT team due to his leadership skills.

    He recognizes that his military experience opened the door for him, but his hunger for knowledge made him succeed.

    Bringing Leadership To The Table (22:38)

    For aspiring CISOs, host Steve presses Steve on which qualities helped break him into the field and assure employers of his leadership abilities.

    Steve reiterates that his military background made him a worthwhile candidate, partly due to his lack of ego. Steve knows he’s not the most intelligent guy in the room, which makes him want to learn and figure out how to solve any security problems that come his way.

    The Emerging Problem (27:55)

    Supply chain risks are a growing threat, a challenge to people in the cyber security world. Steve Magowan shares how security professionals have dealt with these types of breaches and the differing objectives between business leaders and CISOs.

    Differing Agendas (31:15)

    Steve and Steve discuss the conflicting agendas between CIOs and CISOs. Corporate America has not fully grasped the increasing cyber threats, making it harder for CISOs to do their jobs.

    CISOs have accepted high-risk positions, which is why they must learn how to communicate with CFOs with their interests in mind: money and business outcome.

    See You Next Time (41:16)

    With so much to discuss, especially third-party and supply chain risks, host Steve invites Steve back to the show.

    The New CISO (42:25)

    To Steve Magowan, a CISO is someone who is an enabler versus a barrier. A CISO’s job is to protect the company against risk and allow the business to succeed.

    Links mentioned:

    BlackBerry


    Previous 1 6 7 8 9 10 16 Next

    Related Podcasts

    How I Built This with Guy Raz

    1

    How I Built This with Guy Raz Business
    Planet Money

    2

    Planet Money Business
    Inside Strategic Coach: Connecting Entrepreneurs With What Really Matters

    3

    Inside Strategic Coach: Connecting Entrepreneurs With What Really Matters Business
    BiggerPockets Real Estate Podcast

    4

    BiggerPockets Real Estate Podcast Business
    The Smart Passive Income Online Business and Blogging Podcast

    5

    The Smart Passive Income Online Business and Blogging Podcast Business
    A Thousand Natural Shocks With Gabe S. Dunn

    6

    A Thousand Natural Shocks With Gabe S. Dunn Business
    footer-logo

    Contact Us

    Toll Free: 844-670-7747

    Links

    • Home
    • Top Charts
    • Networks
    • Apps
    • Independents Podcasts
    • Podcast Advertising
    • Podcast News
    • Contact Us
    • About Us
    • Analytics & Insights

    Stay Connected

      Privacy, Terms of Use & Our Code of Ethics Protecting Content Creators Copyrights