◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Forgepoint Capital Advisory Council

Honored to join the Forgepoint Capital Advisory Council alongside an incredible community of cybersecurity, AI, and technology leaders. Throughout my career, I have benefited from the guidance, perspectives, and generosity of others who were willing to share their experiences. I look forward to paying that forward by supporting founders and…

What Does Scuba Diving Have in Common with Cybersecurity?

This past week, I had the opportunity to dive alongside my son, JeanCarlo, as he earned his Open Water scuba certification in the Cayman Islands. We averaged two to three dives a day and explored some incredible sites together. We also shared the stage at the Descent Cyber Conference, where…

Shadow AI Is a Signal

For years, we talked about Shadow IT as a governance problem. In some cases, it was. But often it was a signal that employees were trying to solve a problem faster than the organization could. I think we’re seeing the same thing with Shadow AI. People are not experimenting with…

The Cost of Optionality

The Cost of Optionality One thing I have learned over the years is that saying yes creates commitments, while saying no creates focus. As leaders, we often talk about opportunities. New initiatives, new partnerships, new projects, and new ideas. What gets discussed less often is the cost that comes with…

Experience Still Matters

Experience Still Matters AI can accelerate learning, generate ideas, and increase productivity. But experience still matters. Judgment is built through pressure, ambiguity, mistakes, and pattern recognition developed over time. Especially in leadership roles, the hardest decisions are rarely solved by information alone. I think one of the biggest risks organizations…

AI Agents Are Changing How We Use the Internet

AI Agents Are Changing How We Use the Internet For years, we have interacted with technology through screens, search engines, apps, and email. We navigate systems ourselves. I believe AI agents are already starting to change that. Instead of searching, clicking, comparing, and responding ourselves, we will increasingly delegate those…

The Decisions Ai Will Force Leaders to Make”

The Decisions Ai Will Force Leaders to Make" "AI is moving fast, and most of the conversation is focused on capabilities. What is becoming clear is the set of decisions it will force leaders to make." "Not technical decisions. Leadership decisions." "• Where do we allow autonomy, and where do…

Mythos: Board Implications – What This Means Now

Mythos: Board Implications - What This Means Now The shift we are seeing with AI is not theoretical. It is already changing how organizations approach technology risk, investment, and resilience. Cyber risk is no longer just about prevention. It is becoming a speed and resilience problem. The time between vulnerability…

What Stood Out to Me at RSA

What Stood Out to Me at RSA" Spent time at RSA this past week, including ESAF, Cyber Council, and a number of side conversations. A lot of great discussion, but a few themes stayed with me. Agentic AI is moving fast. The conversation is no longer about what it can…

Honored and deeply grateful

Honored and deeply grateful." "Being inducted into the 2026 CSO Hall of Fame is something I never imagined when I started my journey. Moments like this mean more than words in a short post could ever fully express." "This recognition is not about one person. Cybersecurity has always been a…