10 CISOs in law firms
Chief Information Security Officer and Global Chief Information Security Officer are the current titles held by these CISOs in law firms, at firms that include Simpson Thacher & Bartlett LLP, Foley & Lardner LLP and Loeb & Loeb LLP. A reader can learn how CISOs lead security organizations in law firm businesses.
Professionals to explore
Allen G. Feke
LinkedInExperience: Chief Information Security Officer · Gibson Dunn
Allen G. Feke has been Chief Information Security Officer at Gibson Dunn since January 2006, and the listing describes Gibson Dunn as a law practice. They were Director of Information Technology at Sedgwick LLP (2000–2005) and Manager of Technology at Latham & Watkins (1998–2000).
Brent Kidwell
LinkedInExperience: Chief Information Security Officer · Jenner & Block
Brent Kidwell is listed as Chief Information Security Officer at Jenner & Block, a row dated from August 1994 with no end date. The profile says they are Chief Information Security Officer and partner at Jenner & Block LLP, responsible for the firm's information security program, information governance and data protection.
Brett Lambo
LinkedInExperience: Chief Information Security Officer · King & Spalding
Brett Lambo has been Chief Information Security Officer at King & Spalding since July 2024. They were Chief Information Security Officer at Foley & Lardner LLP (2019–2024) and Senior Director, Cybersecurity Operations, Engineering, Risk Management at Capital One (2013–2019).
Ely Pinto - CISM, CISSP, CEH
LinkedInExperience: Global Chief Information Security Officer · Simpson Thacher & Bartlett LLP
Ely Pinto - CISM, CISSP, CEH has been Global Chief Information Security Officer at Simpson Thacher & Bartlett LLP since July 2024. They were Head of Global Third Party Security, Strategy & Governance at American Express (2019–2024) and Chief Information Security Officer at Valley Commercial Banking (2017–2019).
Eric Puente
LinkedInExperience: Chief Information Security Officer · Debevoise & Plimpton
Eric Puente has been Chief Information Security Officer at Debevoise & Plimpton since February 2016, and the profile headline reads CISO at Debevoise & Plimpton. They were Chief Information Security Officer at Volt Information Sciences (2011–2015) and Director of Infrastructure there (2002–2015).
Josh DeFrain
LinkedInExperience: Chief Information Security Officer · Foley & Lardner LLP
Josh DeFrain has been Chief Information Security Officer at Foley & Lardner LLP since July 2024. They were Chief Information Security Officer at Rokt (2023–2024) and at Flatiron Health (2017–2023), and Global Cyber Security Operations Director at Capital One (2015–2017).
Mark Hendrick
LinkedInExperience: Chief Information Security Officer · Vinson & Elkins
Mark Hendrick has been Chief Information Security Officer at Vinson & Elkins since February 2021 and was Director of Information Security there (2020–2021). They were Chief Information Officer at Bradley Arant Boult Cummings LLP (2015–2019) and Director of Information Technology at Baker Botts (1996–2015).
Tim Knighten
LinkedInExperience: Chief Information Security Officer · Brownstein Hyatt Farber Schreck
Tim Knighten has been Chief Information Security Officer at Brownstein Hyatt Farber Schreck since June 2026. They were Director Information Security at FirstBank (2025–2026), Information Security Manager there (2023–2025) and Lead Security Architect at the Colorado Judicial Branch (2022–2023).
Wayne Ray
LinkedInExperience: Chief Information Security Officer · Hinkle Law Firm LLC
Wayne Ray is Chief Information Security Officer at Hinkle Law Firm LLC, a row dated from November 2000 with no end date, and the profile says they have led the firm's cybersecurity program as CISO for many of those years. They were Systems Administrator at Hite, Fanning & Honeyman L.L.P. (1998–2000).
Wilson Ye
LinkedInExperience: Chief Information Security Officer · Loeb & Loeb LLP
Wilson Ye has been Chief Information Security Officer at Loeb & Loeb LLP since November 2021. They were Senior Security Consultant at Accenture (2019–2021) and Director of IT Security at Paul Hastings (2000–2018). The listing places them in Los Angeles, California, United States.
Choose the right perspective
Choose someone whose firm and earlier roles match the decision you are working on. Check how long each person has held the role to judge whether they can speak to building a program or to running one for years.
Questions to take into the conversation
- 01What did you change first when you became CISO at your firm, and why?
- 02How do you get partners and lawyers to follow security rules without slowing their work?
- 03How do you answer the security questions your firm receives from its own clients?
Reaching CISOs in law firms
How can I contact one of these CISOs in law firms?
Pick one of the 10 people on this page and choose "Book a paid call", or describe your project to find others. You offer a fee for a 15-minute call or a written answer, Instant Expert finds the person's work email and sends the invitation, and they decide whether to accept. The list covers 10 companies, including Gibson Dunn, Jenner & Block and King & Spalding, based on profile data retrieved on October 22, 2026. Being listed here doesn't mean someone has agreed to take calls.
How much does it cost to reach CISOs in law firms?
You choose the offer, starting at $5 per person. The offer is what the person receives, and Instant Expert's fee is added on top, so a $100 offer costs you $125. The fee is 20% of what you pay. You're charged only when the person books the call or sends the answer.
What if they don't reply?
You pay nothing. Instant Expert sends follow-up reminders, and if the person hasn't booked or answered within 7 days, the request expires and any hold on your card is released. You can invite several of the 10 people on this list at once and cap your total spend, so you pay only for the ones who accept.
Can an AI agent ask one of these CISOs in law firms a question?
Yes. An agent with a USDC wallet on Base can ask one question without an Instant Expert account. It names the person, for example by the LinkedIn URL on this page, and pays per ask over x402 (HTTP 402). The person answers in writing or by voice note, and if nobody answers within 7 days, the payment goes back to the wallet automatically. Claude and ChatGPT can do the same through the Instant Expert connector: setup is at /docs/mcp for Claude and /docs/chatgpt for ChatGPT. x402 docs
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.
Request a correction or removal