Should CTO and CISO Roles Converge in the Age of AI? | Interview with Ben Wilcox

In this episode of the Secure and Simple Podcast, host Dejan Kosutic (CEO at Advisera) speaks with Ben Wilcox, who serves as both CISO and CTO at ProArk, about how AI is collapsing the traditional separation between technology transformation and security risk management. Ben explains that AI touches data, identity, permissions, apps, workflows, and decision-making, making every technology decision a risk decision and requiring CISOs to understand architecture and DevOps while CTOs embed security from the start. They discuss when merging CTO/CISO roles may work versus when separation is required by regulation, how Ben balances speed and risk using context such as data sensitivity and blast radius, and lessons from building an agentic product, including the need for better telemetry and technical governance controls. They conclude with recommendations for experimenting, ensuring compliance feasibility, and collaborating earlier in projects.

Links from the episode:
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account 
- Beginner's Course for ISO, Cybersecurity, and AI Consultants: https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t
- How to Grow Your Cybersecurity, ISO, or AI Consultancy: Advanced Course:https://advisera.co/GrowYourConsultancyTraining 
  • (00:00) - Interview with Ben Wilcox
  • (00:57) - How AI Changes Roles
  • (04:55) - Should Roles Merge
  • (10:42) - Balancing Speed and Risk
  • (13:36) - Benefits and Innovation
  • (17:55) - Making the Merge Work
  • (20:48) - AI Agents Governance Lessons
  • (26:53) - Governance Reviews and Ownership
  • (32:27) - Resources for Security Professionals

Creators and Guests

person
Host
Dejan Kosutic
CEO at Advisera & Cybersecurity governance expert
Should CTO and CISO Roles Converge in the Age of AI? | Interview with Ben Wilcox
Broadcast by