Episode 209 Deep Dive: Rock Lambros | Business Fundamentals, Communication Strategies, and CFO Engagement: Exploring the Evolving Role of CISOs

Kyriakos “Rock” Lambros is the CEO and Founder of RockCyber. He is a seasoned Cybersecurity and Information Technology executive with expertise in aligning Cybersecurity and technology strategy with enterprise business goals to reduce the risk of revenue to the organization. This experience includes building multi-framework security programs, policy and standards development, architecture, operations, threat intelligence, governance, risk management, compliance, and incident response for (multi-billion dollar) global organizations with exceptional security and requirements. The frameworks Rock has supported include the NIST Cybersecurity Framework, CMMC, NERC/CIP, NIST 800-53, NIST 800-171, NIST 800-207 (Zero Trust), ISO 27001, SOC2, PCI, and others. Rock’s enterprise experience has spanned industries with vastly differing security and privacy requirements, including energy, eCommerce, government, banking, and manufacturing.

Rock has served in several senior Cybersecurity and technology roles for global, multi-billion-dollar companies such as MPLX (a subsidiary of Marathon Petroleum Corporation), eBay, Honeywell, General Dynamics Information Technology, Wells Fargo, and Agilent Technologies. He built security programs from the ground up on multiple occasions. Rock was a pivotal contributor to M&A activities at numerous companies, including eBay’s acquisition of Shopping.com and Skype and Marathon Petroleum Corporation’s acquisition of MarkWest Energy Partners. Rock oversaw multi-million dollar budgets, led successful defenses against highly-publicized denial-of-service attacks, and built and managed large Security and Network Operations Centers.

Rock serves on the board of several stealth-mode startups as a corporate strategy and Cybersecurity advisor. He is also a member of the Secure Smart Cities Advisory Board at the National Cybersecurity Center and co-chaired the Rocky Mountain Information Security Conference from 2015 to 2017,

A sought-after speaker, Rock has spoken at the annual RSA Security conference, which is the Cybersecurity industry’s seminal yearly event. He has also spoken at the CIO Energy Summit, the Future of Data Security conference, the American Council for Technology, the ISSA CISO Mentorship series, and several industry association chapter meetings.

Rock is a member of ISSA, ISC2, the Cloud Security Alliance, and OWASP. He graduated with an MBA in Finance and Entrepreneurship from Arizona State University and received his BS in Management Information Systems from the University of Nevada, Las Vegas.