Ryan Davis, Chief Information Security Officer (CISO) at New Charter Technologies, began his career with an early passion for computers in the 1980s, before the internet era. This passion, which started with disassembling systems and understanding how they work, later turned into a professional career in protecting digital infrastructures. Davis believes that his background as a "hacker" in his youth was not driven by malice, but rather by pure technical curiosity, which gave him a strong foundation for understanding how to defend systems today.
From MIT Labs to the Leadership Seat
Davis started his professional career at the MIT Lincoln Laboratory, a center specializing in applying advanced technologies to solve national security problems. There, he immersed himself in the world of information assurance and internal auditing for five years before moving to Veracode, a software security company, in 2012. At Veracode, he progressed from security program manager to software architect, reaching the position of Chief Information Security Officer in 2019, where he successfully built a security team from a single person to 15 experts.
Davis later moved to work at NS1, which was acquired by IBM, before settling into his current position at New Charter Technologies, a private equity-backed group that manages Managed Service Providers (MSPs) across North America.
The Security Officer as a Business Enabler
Davis believes that the title "Chief Information Security Officer" can sometimes be misleading; the true role is not limited to protecting data alone, but extends to protecting business continuity and ensuring its resilience. He emphasizes that today's successful security leader must combine two traits: the skilled technician and the astute business person.
Why does this shift in role matter?
Davis asserts that a security officer who does not understand business drivers will struggle to communicate with the executive management. He says, "If you cannot speak the language of business, you will end up talking over the heads of the rest of the executive team." The ability to explain complex technical issues in a language understood by financial and administrative leaders is the skill that separates success from failure in this position.
Team Building and Emotional Intelligence
Regarding building security teams, Davis moves away from traditional models, emphasizing that a team is the sum of its integrated parts. When hiring, Davis looks for diversity in personalities and skills; he is not content with introverted technical experts who prefer coding all day, but seeks to integrate them with personalities possessing strong soft skills capable of interacting with other company departments.
He stresses that diplomacy is the most important personal trait a security officer must possess, as the work requires a delicate balance between imposing security restrictions and facilitating workflow, which is only achieved by building trust and absolute transparency with the team and senior management.
Facing the Reality of Burnout
Davis does not hide the psychological challenges associated with working in the cybersecurity sector, describing burnout as "a living reality." He acknowledges that he went through work experiences reaching 100 hours a week, which affected his personal life and health.
What practically changes in managing pressures?
Davis advises on the necessity of striving for balance, not only for mental health, but for the quality of the security work itself. He emphasizes that trust in systems, architects, and the team is the key; an officer who tries to respond to every security alert all night long will not be able to endure for long. He concludes his vision by stating that successful security management begins with self-management and avoiding entering a state of permanent emergency that leads to the depletion of competencies.