Inspired by Phil Venables’ Good CISO / Bad CISO framework, this piece explores the mental models that distinguish effective security leaders from those trapped in reactive cycles.

I’ve spent the past decade working across cloud, application, and enterprise security. I currently serve as an Information Security Lead and Deputy CISO.

My work centers on advising executives on risk, resilience, and security strategy while ensuring that security aligns with broader business priorities.