Darin McCloy

About Darin McCloy

Cybersecurity Executive | CISO | Digital Health & Compliance Leader | Risk Strategist | USMC (Ret. LtCol)I’m a cybersecurity and compliance executive with 20+ years of leadership experience across digital health, healthcare, defense, and high-growth SaaS companies. My work spans building and scaling enterprise security programs, securing cloud-first platforms, achieving regulatory compliance (HITRUST, SOC 2, HIPAA, PCI, ISO), and advising boards and founders during hypergrowth, M&A, and audits.As a former United States Marine Corps Lieutenant Colonel and multi-time CISO, I bring a mission-driven approach to risk management—balancing innovation with protection, speed with control, and product with privacy. What I do best- Build cybersecurity programs from scratch and scale them as companies grow- Align security to product, engineering, and go-to-market strategies- Lead organizations through HITRUST, SOC 2, HIPAA, and HHS/OCR audits- Guide cross-functional incident response and tabletop exercises- Implement KPIs, dashboards, and board reporting that drives action- Integrate security into the SDLC, developer training, and vendor reviews- Support cyber insurance readiness and claims processes- Serve as a vCISO for startups and scaling digital health firms. Who I work with- Health tech and AI companies committed to trust and transformation- Executive teams looking to embed security into their growth culture- Boards, investors, and regulators who expect resilience and transparency- Engineering and product leaders who value collaboration over control.If your organization is scaling fast and needs a security leader who’s been there before—someone who sees security as an enabler, not a blocker—I’d love to connect.Let’s secure something meaningful.

Experience

1. VP Security and Compliance, CISO

   Policyco

   Feb 2021 — Present · Nashville, TN, US

   PolicyCo’s elegant approach: Break policy down into individual elements or articles. Connect procedures to implement each policy article. Define, collect and embed evidence that show cybersecurity controls implementation and effectiveness.

Education

• Naval Postgraduate School

  Master of Science (MS), Electrical Engineering, Digital Signal Processing

• The United States Naval Postgraduate School

  Master of Science - MS, Electrical Engineering

• United States Naval Academy

  BS, Engineering