10 CISOs in Enterprise SaaS
A deputy CISO title came before the current job for five of these enterprise SaaS CISOs, whose present employers include Salesforce, GitLab, Box, Docusign, PagerDuty and Anaplan. That makes the group a practical sounding board for a B2B software company preparing for customer security reviews, hiring its first CISO or deciding where product security and trust work should report.
Professionals to explore
Chaim Mazal
LinkedInExperience: Chief Information Security Officer · GitLab
Chaim Mazal became Chief Information Security Officer at GitLab in 2026, leading a global security organization that includes corporate security, product security, security operations, trust and safety, and security assurance. Chaim was Chief AI and Security Officer (2025-2026) and Chief Security Officer (2022-2025) at Gigamon, and sits on advisory boards at Cloudflare (since 2020) and Rapid7 (since 2024).
Is this you? Claim your profile and get paid for calls.
Charles (Chuck) Miller
LinkedInExperience: Chief Information Security Officer (CISO) · Blackbaud
At Blackbaud, Charles (Chuck) Miller has been Chief Information Security Officer (CISO) since 2022. Chuck Miller also sits on customer advisory boards at CrowdStrike (since 2026) and Zscaler (since 2025), the CISO Advisory Board at Rubrik (since 2024) and is a DSAC Member at the Domestic Security Alliance Council (DSAC), a fit for questions on choosing and managing security vendors.
Is this you? Claim your profile and get paid for calls.
Chuck Kesler
LinkedInExperience: Chief Information Security Officer · Pendo.io
Chuck Kesler has been Chief Information Security Officer at Pendo.io since 2018, where they built the security program from the ground up, and cites over 15 years as a CISO. Chuck Kesler was Chief Information Security Officer at Duke Health (2011-2018) and Senior Manager, Consulting Services at Symantec (2007-2011), which makes building a first SaaS security program the strongest topic.
Is this you? Claim your profile and get paid for calls.
Heather Ceylan
LinkedInExperience: SVP & Chief Information Security Officer · Box
Governance, risk and compliance programs are strong topics for Heather Ceylan, who was Head of Security Governance, Risk, and Compliance at Zoom (2021-2023) and then Deputy Chief Information Security Officer there (2023-2025). Since 2025, Heather has been SVP & Chief Information Security Officer at Box, and also sits on the board of CISO Ascent (since 2025).
Is this you? Claim your profile and get paid for calls.
Iain Mulholland
LinkedInExperience: EVP, CISO · Salesforce
Salesforce's EVP, CISO since 2026, Iain Mulholland was Deputy CISO, Google Cloud & Technical Infrastructure at Google (2022-2026) before that. Iain was also Chief Of Staff at Google (2021-2022), has been an Investor with SVCI - Silicon Valley CISO Investments since 2025 and was an Advisor at Clover Security (2025-2026), a fit for questions on cloud infrastructure security at large scale.
Is this you? Claim your profile and get paid for calls.
Jack M.
LinkedInExperience: VP, Chief Information Security Officer · Anaplan
The Anaplan titles held by Jack M. are Head of Cyber Defense (2020-2022), Director, Deputy CISO (2022-2024), Sr. Director, Chief Information Security Officer (2024-2025) and VP, Chief Information Security Officer since 2025. Jack describes the current focus as securing enterprise AI and agentic platforms at scale, a fit for questions on AI security in a SaaS product.
Is this you? Claim your profile and get paid for calls.
Michael Adams
LinkedInExperience: Group Vice President, Chief Information Security Officer · Docusign
With a legal background at Zoom as Chief Counsel to COO and CISO (2020-2022), Michael Adams went on to Interim Chief Information Security Officer (2022) and Chief Information Security Officer (2022-2025) there. Since 2025, Michael has been Group Vice President, Chief Information Security Officer at Docusign, and has served on the Cyber Council of the Intelligence and National Security Alliance since 2018.
Is this you? Claim your profile and get paid for calls.
Peter Liebert V
LinkedInExperience: Chief Information Security Officer · Salesloft
Peter Liebert V holds two current titles at Salesloft, Chief Information Security Officer (since February 2026) and CIO & CISO (since June 2026). Peter was Executive Director, Cybersecurity (Deputy CISO) at Vista Equity Partners (2024-2026) and has been a Member of SVCI - Silicon Valley CISO Investments since 2019, useful for questions on combining IT and security leadership.
Is this you? Claim your profile and get paid for calls.
Pritesh Parekh
LinkedInExperience: VP, Chief Information Security Officer · PagerDuty
Since 2024, Pritesh Parekh has been VP, Chief Information Security Officer at PagerDuty, and was SVP of Engineering and Chief Trust & Security Officer at Delphix (Acquired by Perforce) from 2023 to 2024. Pritesh is also an Advisor at YL Ventures (since 2018) and RightRev (since 2021), and the combined engineering and trust title suits questions on running security alongside engineering.
Is this you? Claim your profile and get paid for calls.
Sergey Tsygalnitsky
LinkedInExperience: VP Chief Security Officer CISO · CDK Global
Two CDK Global titles appear for Sergey Tsygalnitsky: VP Chief Security Officer CISO since 2026 and VP, Chief Information Security Officer (2024-2026), securing the automotive retail experience for millions of customers. Sergey was also Deputy Chief Information Security Officer (2023-2024) and Director, Global Information Security (2021-2023) at Grainger, and a Security Solutions Architect at Amazon Web Services (AWS) (2020-2021).
Is this you? Claim your profile and get paid for calls.
Choose the right perspective
If you are about to hire or become a first-time CISO, the five who stepped up from deputy roles (Iain Mulholland, Heather Ceylan, Sergey Tsygalnitsky, Jack M. and Peter Liebert V) can describe that jump. Chuck Kesler built a security program from the ground up at Pendo.io, Chaim Mazal fits questions on combining product security with trust and safety, and Michael Adams and Pritesh Parekh bring legal and engineering backgrounds to the CISO job.
Questions to take into the conversation
- 01Which security controls and certifications should a SaaS company have in place before enterprise buyers start sending security questionnaires?
- 02Should product security report to the CISO or to engineering at a software company, and what changes as the company grows?
- 03How do you answer enterprise customers' questions about AI features and customer data without slowing down the sales cycle?
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.