◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Field notes.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

The Cost of Optionality

The Cost of Optionality One thing I have learned over the years is that saying yes creates commitments, while saying no creates focus. As leaders, we often talk about opportunities. New initiatives, new partnerships, new projects, and new ideas. What gets discussed less often is the cost that comes with…

Experience Still Matters

Experience Still Matters AI can accelerate learning, generate ideas, and increase productivity. But experience still matters. Judgment is built through pressure, ambiguity, mistakes, and pattern recognition developed over time. Especially in leadership roles, the hardest decisions are rarely solved by information alone. I think one of the biggest risks organizations…

AI Agents Are Changing How We Use the Internet

AI Agents Are Changing How We Use the Internet For years, we have interacted with technology through screens, search engines, apps, and email. We navigate systems ourselves. I believe AI agents are already starting to change that. Instead of searching, clicking, comparing, and responding ourselves, we will increasingly delegate those…

The Decisions Ai Will Force Leaders to Make”

The Decisions Ai Will Force Leaders to Make" "AI is moving fast, and most of the conversation is focused on capabilities. What is becoming clear is the set of decisions it will force leaders to make." "Not technical decisions. Leadership decisions." "• Where do we allow autonomy, and where do…

Mythos: Board Implications – What This Means Now

Mythos: Board Implications - What This Means Now The shift we are seeing with AI is not theoretical. It is already changing how organizations approach technology risk, investment, and resilience. Cyber risk is no longer just about prevention. It is becoming a speed and resilience problem. The time between vulnerability…

What Stood Out to Me at RSA

What Stood Out to Me at RSA" Spent time at RSA this past week, including ESAF, Cyber Council, and a number of side conversations. A lot of great discussion, but a few themes stayed with me. Agentic AI is moving fast. The conversation is no longer about what it can…

Honored and deeply grateful

Honored and deeply grateful." "Being inducted into the 2026 CSO Hall of Fame is something I never imagined when I started my journey. Moments like this mean more than words in a short post could ever fully express." "This recognition is not about one person. Cybersecurity has always been a…

Start With the Why”

Start With the Why" "One lesson that has stayed with me over the years is the importance of starting with the why." "It was refreshing to hear a leader reference this during a committee meeting last week. In the middle of discussing priorities and next steps, they paused and reminded…

Burnout Is Not Always Visible”

Burnout Is Not Always Visible" "This past week I was talking with a colleague who decided it was time to move on. One of the reasons they shared was simple: they did not want to get burned out." "That comment stuck with me." "Many of the people closest to burnout…

Culture Determines AI Outcomes”

Culture Determines AI Outcomes" "Two organizations can deploy the same AI tool and get very different results." "Why?" "Because AI does not operate in a vacuum. It operates inside culture." "If a culture prioritizes speed over scrutiny, AI will amplify speed." "If a culture values discipline and oversight, AI will…