Listen "What (actually) Works In Cloud Security"
Episode Synopsis
Send us a textSome of the most pertinent issues in cloud security are also very foundational. Questions like where to start, what works, and also what doesn’t work, can leave teams feeling frustrated and at a loss over how to proceed. Here to help us unpack these important questions is Jonathan Villa, the Cloud Security Practice director at GuidePoint Security. Jonathan’s career wasn’t always in security, he has spent time as an application developer, and as a pentester. All of this led him to build solutions in the cloud over a decade ago which organically transitioned into cloud security. In our conversation with Jonathan, we discuss what he learned about cloud security throughout his career, what he has found to be effective, both in terms of technology and managing teams. We explore important issues like how security has struggled with automation and how to address it. Later we address the challenges facing talent development in security and how to address them, including having leadership take a more long-term view and training junior staff members. Jonathan also discusses the RACI model, why so many companies struggle to implement it correctly and how best to be effective. Today’s episode offers key insight into cloud security, leadership, and the importance of teams, so make sure you tune in today!Jonathan's LinkedIn profile“I think that if security organizations really look to build more, they may attract more talent with development experience.” — Jonathan Villa [0:08:07]“When you look at the average tenure of a CISO, I don't know what it is now, it's like two years or something like that. It's like, how do you build a long-term talent development model if the leaders themselves are gone every two years?” — Jonathan Villa [0:20:39]The future of cloud security.Simplify cloud security with Prisma Cloud, the Code to Cloud platform powered by Precision AI.Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
More episodes of the podcast Cloud Security Today
From GTA to MFA
08/11/2025
CISO burnout and boardroom truths
01/09/2025
Iron Maiden and cloud security
14/07/2025
Navigating identity security
29/05/2025
The human side of cyber
22/04/2025
Principles in cyber leadership
23/03/2025
Rethinking security awareness
23/02/2025
Dr. Zero Trust on zero trust
20/01/2025
Cybersecurity compensation 2025
20/12/2024
LLMs: risks, rewards, and realities
20/11/2024
ZARZA We are Zarza, the prestigious firm behind major projects in information technology.