Dom Glavach

About Dom Glavach

As a Chief Information Security Officer (CISO) and cybersecurity strategist with over two decades of leadership across SaaS, defense, and regulated industries, I build resilient, business-aligned security programs that enable innovation and growth.At CyberSN, I lead enterprise security strategy and operations across a fully remote workforce - integrating governance, risk, and compliance with SOC, vulnerability management, and secure product development. My focus is on embedding security into culture and code, empowering organizations to operate confidently in a data-driven, AI-enabled landscape.My foundation is rooted in high-stakes environments, having led cybersecurity for a Top-100 DoD Contractor and maintaining a TS/SCI Polygraph clearance (now former). I architected compliance programs aligned to FedRAMP, DFARS, and NIST 800-171/CMMC, and led rapid incident response to nation-state adversary campaigns. These efforts directly enabled over $50M in secured contract awards and strengthened national cyber defense partnerships. I continue to leverage this experience to advise on M&A cyber due diligence, regulatory readiness, and enterprise risk transformation.I’m passionate about advancing the cybersecurity workforce and mentoring emerging leaders. I authored the CyberSN Job Taxonomy, serve as an Adjunct Professor of cybersecurity at Indiana University of Pennsylvania, and speak frequently on topics including AI-enabled defense, workforce risk management, and CISO leadership

Experience

1. Chief Information Security Officer (CISO) and Chief Security Strategist

   Cybersn

   Oct 2016 — Present · Pittsburgh, PA, US

   Provide executive leadership for enterprise cybersecurity strategy, operations, and compliance across a high-growth SaaS and consulting organization serving clients in life sciences, healthcare, financial, and federal sectors. Drive alignment between business objectives, client engagement, and cyber resilience while advancing CyberSN’s mission to modernize the cybersecurity workforce.• Architected and operationalized the company’s security program spanning SOC, risk management, incident response, and compliance aligned to SOC 2, CCPA, and NIST CSF frameworks. • Directed Zero Trust implementation across Google Workspace, SaaS platforms, and distributed infrastructure, strengthening identity assurance and data protection for a fully remote workforce. • Established enterprise KPIs and KRIs linking governance, risk, and operations; delivered board-level dashboards that reduced time-to-decision and improved audit readiness. • Partnered with engineering and DevSecOps teams to embed secure SDLC and CI/CD controls, balancing delivery velocity with regulatory compliance. • Authored the CyberSN Cyber Job Taxonomy, now leveraged across the industry to define and measure cybersecurity roles and workforce risk. • Serve as a trusted advisor to executive leadership and strategic clients on M&A cyber due diligence, privacy compliance, and enterprise risk transformation.

Education

• Western Governors University

  Master of Science - MS, Cybersecurity and Information Assurance

• Indiana University of Pennsylvania

  BS, Computer Science