SecurityWeek’s ‘People on the Move’ coverage shines a light on fresh hiring announcements, promotions, and career achievements within the cybersecurity community.
Hi, what are you looking for?
SecurityWeek
Week of March 24, 2025
AI security startup SplxAI has announced that Sandy Dunn has joined the company as Chief Information Security Officer (CISO), to spearhead development of its governance, risk, and compliance (GRC) solutions. An industry veteran, Dunn previously served as CISO at Brand Engagement Network and Blue Cross of Idaho, as Chief Information Officer / Chief Security Officer (CIO/CSO) at BreachQuest, and as Information Security Officer (ISO) at HP. SplxAI has just raised $7 million in seed funding.
Tax preparation giant H&R Block announced that Phillip Miller will join the company as its new Vice President and Chief Information Security Officer (CISO) on March 31. Miller is the founder of cybersecurity consulting firm Qurple. Prior to that, he held VP and CISO roles at NetApp and Brooks Brothers. He also served as a Principal Security Advisor at AWS.
Israel-based identity security and governance solutions provider Linx Security has announced the appointment of Sarit Reiner Frumkes as Chief Technology Officer (CTO). She previously held leadership roles at Microsoft, Payoneer, and in the Israeli government.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
Register
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)