Back in My Day, You Could Get a Cybersecurity Job at the Corner Store

In this episode of the CISO Series Podcast, hosts David Spark and Andy Ellis explore the evolving landscape of cybersecurity leadership, vendor dynamics, and generational differences in digital literacy. The conversation kicks off with a playful yet insightful discussion on the phrase 'Do you know who I am?', dissecting its connotations and offering respectful alternatives for asserting authority. The central theme revolves around the tension between startups chasing Fortune 500 logos for validation versus serving mid-market CISOs who often need their solutions most. Paul Drapeau, Head of Global Information Security at New Balance, shares his firsthand experience from the startup world, emphasizing the value of early customer feedback—even from small organizations—in shaping product-market fit. The hosts then delve into the idea of 'generational immunity' in cybersecurity, debating whether those who grew up with dial-up internet and manual troubleshooting have a deeper, more intuitive grasp of technology than today’s Gen Z users, who grew up with locked-down devices and seamless interfaces. The discussion evolves into the critical role of synthesis in modern security leadership, with Paul and Andy highlighting the need for 'specialist generalists' who can connect disparate domains and think beyond technical details. The episode closes with a humorous yet revealing 'What's Worse?' game, where a supply chain attack during a sixth-grade field trip is deemed far more damaging than a DDoS attack during a school musical—underscoring the real-world responsibilities that come with leadership. Throughout, the emphasis remains on trust, delegation, and purpose-driven decision-making in cybersecurity. Key takeaways include: 1) The 'Do you know who I am?' line can be reframed respectfully through context and humility; 2) Startups should balance enterprise deals with mid-market adoption to build sustainable growth; 3) Generational differences in tech exposure don’t equate to skill—curiosity and hands-on experience matter more; 4) The most effective CISOs are not just technical experts but synthesizers who connect dots across disciplines; 5) True leadership means empowering teams to act independently, with clear success criteria; 6) Delegation is not micromanagement, and overruling team decisions undermines trust; 7) The 'Does this stop the shoes?' test forces leaders to focus on business impact over technical minutiae; 8) AI tools require human judgment—especially in recognizing hallucinations and system constraints.