Jim Nitterauer
Making organizations harder to hack and easier to trust for over three decades.
CISO, strategist, and speaker. I bridge the gap between the boardroom and the SOC — because security is a business problem first, and technology is just how we solve it.
Executive Leadership
CISO, strategist, and board-level advisor. Built security programs from the ground up, led SOC 2, ISO 27001, PCI DSS, HIPAA, and NIST compliance initiatives, and served in senior leadership roles including Zix|AppRiver and Graylog.
About MeSpeaking & Training
20+ conferences and counting — DEF CON, RSA, BSides Las Vegas, and more. My talks are practical by design. I want audiences to walk away with something they can actually use on Monday morning.
SpeakingThought Leadership
Published in CPO Magazine, Infosecurity Magazine, and Security Magazine. Writing on cybersecurity, compliance, AI, and the real decisions security leaders face every day.
Read WritingRecent Writing
Why Your Corporate Emails Are Getting Blocked — And Who's Really to Blame (It's Not The Recipient)
Legitimate corporate emails from well-known companies are getting blocked by Spamhaus ZEN. The culprit in most cases? Google. Here's what's happening, why it's getting worse, and what your organization should do about it.
Don't Make Your Email Filter Your First Line of Defense – Why organizations keep getting phished when the fix is in the DNS
Having worked in email filtering for more than 15 years, I know that proper DNS configuration can dramatically reduce your phishing exposure. Yet most organizations still rely almost entirely on their email filter.
The Grace Period Is Over: AI Has Ended the Era of "Good Enough" Security Configurations
Hackerbot-claw ran autonomously for a week, scanned 47,000 repos, and compromised at least 6 major targets. No zero-days. No nation-state resources. Just AI and misconfiguration.
29 Minutes. That's How Long You Have. What's Your MTTD — and Do You Actually Know It?
The 2026 CrowdStrike Global Threat Report finds that the average attacker breakout time has dropped to just 29 minutes. Fastest observed: 27 seconds. Does your detection and response program reflect this reality?
20+ Conferences.
One Goal.
Practical security insights you can actually implement. I don't do theoretical frameworks that look great on slides and fall apart in the real world.
View Speaking HistoryReady to build something secure?
If you're building something that needs a security leader who's been in the trenches and in the boardroom — let's talk.