EP212 Securing the Cloud at Scale: Modern Bank CISO on Metrics, Challenges, and SecOps

Guest:

• Dave Hannigan, CISO at Nu Bank

Topics:

• Tell us about the challenges you're facing as CISO at NuBank and how are they different from your past life at Spotify?
• You're a big cloud based operation - what are the key challenges you're tracking in your cloud environments?
• What lessons do you wish you knew back in your previous CISO run [at Spotify]?
• What metrics do your team report for you to understand the security posture of your cloud environments?
• How do you know "your" cloud use is as secure as you want it to be?
• You're a former Googler, and I'm sure that's not why, so why did you choose to go with Google SecOps for your organization?

Resources:

• "Moving shields into position: How you can organize security to boost digital transformation" blog and the paper.
• "For a successful cloud transformation, change your culture first" blog
• "Is your digital transformation secure? How to tell if your team is on the right path"' blog
• EP201 Every CTO Should Be a CSTO (Or Else!) - Transformation Lessons from The Hoff
• EP104 CISO Walks Into the Cloud: And The Magic Starts to Happen!
• EP141 Cloud Security Coast to Coast: From 2015 to 2023, What's Changed and What's the Same?
• EP209 vCISO in the Cloud: Navigating the New Security Landscape (and Don't Forget Resilience!)
• "Thinking Fast and Slow" book
• "Turn the Ship Around" book