298 sourced profiles · 4 path studies
How security leaders reach the seat.
CISO Spotlights publishes career profiles of chief information security officers, built only from company announcements, official biographies, government pages and established trade press. Every fact carries its source.
In the spotlight
Devon Bryan
Global Chief Security Officer, Booking Holdings
Featured profiles
All 298 →
Shaun Khalfan
Senior Vice President & Chief Information Security Officer
PayPal
James Sipe
Executive Deputy Chief Information Officer
Commonwealth of Pennsylvania
Andrew Rose
Chief Security Officer
SoSafe
Jaya Baloo
COO & CISO
AISLE
Michael Knight
Chief Information Security Officer
University of Manchester
Donna Kidwell
Chief Information Officer
University of Toronto
Katie Arrington
Performing the Duties of the Department of Defense Chief Information Officer
Department of Defense
Dennis Leber
Chief Information Security Officer
Erlanger Health System
Roland Palmer
Chief Information Security Officer (CISO) and Vice President of Security
JumpCloud
Monte Ratzlaff
Chief Information Security Officer (CISO)
University of California
Path studies
Path study: September 2026
Vendor-side and repeat CISO paths tie at 14 of 27 profiled in September 2026
September 2026 path study: 27 profiled CISO appointments, with vendor-side and repeat-CISO paths each at 14, plus sector and title counts, from sourced profiles.
Path study 03
Builders in the chair: the engineers, researchers and product people who became CISOs
Eleven profiled CISOs came up through hands-on technical work: software and security engineering, malware research, breach analysis, product and infrastructure.
Path study 01
Deputy, then chief: how the number-two security job leads to the top seat
Twelve of our profiles show two routes to the CISO title: promotion inside one organization, or a deputy post at one employer traded for the top job at another.
Guides
All 19 →
How GitHub's CISO disclosed the internal-repository breach
What Alexis Wales said in GitHub's May 20 and May 26, 2026 posts on the internal-repository breach, and how it compares with her earlier posts.
What CISOs say on podcasts and webinars
Four sourced CISO appearances show what security leaders discuss in public: vendor risk, AI, zero trust, liability and budget.
How CISOs frame securing AI: Adobe, Atlassian and Synechron in their own words
What Adobe, Atlassian and Synechron security leaders say about securing AI and AI-driven vulnerability work, and what their publications commit them to.
Who the CISO reports to
All 7 →A growing record of the security function's reporting line at individual companies, exactly as each company's own 10-K Item 1C disclosure states it. No rankings, no view on which structure is better.
How long has the CISO held the seat?
All 5 →A growing record of how long each company's named Chief Information Security Officer has held the role, exactly as its most recent Form 10-K states it. No rankings, no view on whether a tenure is long or short.
Which boards name a cybersecurity expert?
All 11 →A growing record of companies whose own proxy statement names a director as having cybersecurity expertise — voluntary, since the SEC dropped that disclosure requirement from its final 2023 cybersecurity rule. No rankings, no view on whether naming one is meaningful.
Who is covering the seat while it's vacant?
All 35 →A growing record of companies whose own SEC filing names an interim or acting Chief Information Security Officer covering the seat during a search. A market data point, not commentary on why a seat is vacant.