10 heads of security
Cyber and physical security divide these heads of security: most hold security engineering, risk or compliance remits at companies such as Stripe, Uber, Harvey and Enphase Energy, while Nathan Mills and Carl Agnelli have physical security and executive protection backgrounds. Companies hiring a first head of security, or preparing for ISO 27001, SOC 2 or customer security reviews, can ask them where to start.
Professionals to explore
Carl Agnelli
LinkedInExperience: Head of Security a16z Crypto · Andreessen Horowitz
Carl Agnelli is Head of Security a16z Crypto at Andreessen Horowitz (since 2024), managing physical security for a16z Crypto staff, facilities, events and executive leadership globally and directing executive protection. Carl was Director of Security at Citi (2016–2024), and at the U.S. Secret Service held Special Agent in Charge (2014–2015), Assistant Special Agent in Charge (2013–2014) and Assistant to the Special Agent in Charge (2005–2013).
Is this you? Claim your profile and get paid for calls.
Edward Frye
LinkedInExperience: Head of Security · Luminary
Within five months as Head of Security at Luminary (since 2024), Edward Frye achieved ISO 27001 certification with zero non-conformities, building the compliance program from a basic security policy and an unimplemented Drata instance, and then SOC 2 Type II with zero exceptions noted. Edward was Chief Information Security Officer (CISO) at Aryaka (2019–2024) and has been a Board Member at the Information Systems Security Association (ISSA) since 2009.
Is this you? Claim your profile and get paid for calls.
Kyle Bowes
LinkedInExperience: Global Head of Security · Bumble Inc.
Kyle Bowes was Director, Security Engineering at Bumble Inc. (2024–2026) before becoming Global Head of Security there in 2026, with end-to-end security across a global consumer platform spanning product and application security. Kyle held Head of Cyber Defence and Governance (2022–2024) and Cyber Security Operations Manager (2020–2022) at Royal London, and has been a Director at Hyper9 since 2020. Kyle suits consumer platform security questions.
Is this you? Claim your profile and get paid for calls.
Matthew Kemelhar
LinkedInExperience: Head of Security · Stripe
Matthew Kemelhar has been Head of Security at Stripe since 2022, serving as its CISO and overseeing security infrastructure, governance, regulatory compliance, privacy engineering and detection. Matthew was Lifecycle Security Manager (2020–2022) and Threat Operations Manager (2018–2020) at Stripe, and Global Director of Incident Response & Recovery Services (2015–2018) and Principal Security Consultant (2012–2015) at Microsoft. Matthew fits questions on incident response and on the security remit at Stripe.
Is this you? Claim your profile and get paid for calls.
Nathan Mills
LinkedInExperience: Global Head of Security · Brink’s Inc
Nathan Mills became Global Head of Security at Brink’s Inc in 2026, responsible for a risk-based, intelligence-led security program that protects people, assets and operations across more than 140 countries. At Zoom, Nathan was Head of Global Security (CSO Physical) (2023–2026), Head of Physical Security (2022–2023) and Senior Manager Physical Security (2021–2022), and was Director - Security Risk and Crisis Management at GE (2019–2021).
Is this you? Claim your profile and get paid for calls.
Pablo V.
LinkedInExperience: Head of Security · Airbyte
Pablo V. has held Head of Security at three companies: Airbyte (since 2026), Julius AI (2025–2026) and PathAI (2022–2025). Pablo has also been Founder at SutroSec since 2016 and a Member of the Information Security Leadership Foundation since 2022. Repeated head of security roles make Pablo a good call on what the first security leader at a company should set up and in what order.
Is this you? Claim your profile and get paid for calls.
Prakash Kalaiah
LinkedInExperience: Head of Security · Enphase Energy
Prakash Kalaiah leads the cybersecurity program at Enphase Energy as Head of Security (since 2022), designing security strategy and managing security architecture and engineering. At Visa, Prakash was Head of Product Security (2018–2022) and Sr. Director, Security Architecture & Strategy (2011–2018), and Prakash sits on customer advisory boards at Cloudanix and Cyble. Prakash is the one to ask about product security and security architecture.
Is this you? Claim your profile and get paid for calls.
Scott MacDougall
LinkedInExperience: Global Head of Security · Vanguard
Scott MacDougall moved from Global Head of Threat Management (2023–2025) to Global Head of Security at Vanguard in 2025, and calls themselves a cyber operations and physical security executive. At BNY, Scott was Director - Global Head of Threat Intelligence (2019–2023), VP - Senior Intelligence Officer and Lead for EMEA Intelligence - London Office (2016–2019) and Acting Head of Cyber Threat Intelligence Group (2015–2016). Scott fits threat intelligence questions.
Is this you? Claim your profile and get paid for calls.
Tobias Boelter
LinkedInExperience: Head of Security · Harvey
Tobias Boelter has been Head of Security at Harvey since 2023, and in Tobias's first year the company grew from 20 to 200 employees and from zero to $30M ARR. Tobias was Security Engineer (Tech Lead) at Jump Trading (2022–2023), Staff Security Engineer at Nuro (2020–2022), Security Engineer at Google (2019–2020) and Senior Security Researcher at Samsung Electronics (2017–2019). Tobias fits questions on security during fast headcount growth.
Is this you? Claim your profile and get paid for calls.
Yinka Badmus
LinkedInExperience: Head of Security, Global Risk & Compliance · Uber
Yinka Badmus is Head of Security, Global Risk & Compliance at Uber (since 2023), after VP, Global Security Awareness, Strategy, & Engagement at Equifax (2018–2023). Yinka was Director, Security Risk & Compliance at Visa (2015–2018), and at IBM held Snr Mgr, IT Security & Controls (2011–2015) and SWG Business Operations Manager (2010–2011). Yinka suits questions on security risk, compliance programs and security awareness.
Is this you? Claim your profile and get paid for calls.
Choose the right perspective
For a first security hire, Pablo V. has held Head of Security at Airbyte, Julius AI and PathAI, Edward Frye describes building a compliance program at Luminary, and Tobias Boelter has held the Harvey job while the company grew from 20 to 200 employees. Risk and compliance questions fit Yinka Badmus and Matthew Kemelhar, threat intelligence fits Scott MacDougall, and physical security or executive protection go to Nathan Mills or Carl Agnelli.
Questions to take into the conversation
- 01What should a first head of security tackle in the first 90 days: compliance certifications, detection or customer security reviews?
- 02When should physical security and executive protection report to the same head of security as cybersecurity?
- 03How do you pass enterprise customers' security reviews while the security team is still one or two people?
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.