SIGN UP FOR FREE | SIGN IN
Thinkers360
Interested in getting your own thought leader profile? Get Started Today.

Lee Vorthman

Chief Security Officer at Oracle

Denver Metropolitan Area, United States

As an experienced C-Level executive (CSO, CISO, CTO) and board member I have a strong background in governance, finance, technology, risk management, human resource management, compliance and strategy for both large public companies and startups. I have a breadth of experience across multiple industries including Technology, Government & Defense, Education and Oil & Gas. I have successfully partnered with businesses to build and mature security programs that reduce overall risk, create trust and align with the organization's goals and values. I have also successfully created and executed plans to help public companies evaluate and capitalize on new market opportunities for technology and security. As a veteran and board member, I bring a unique perspective into the evolving security and technology landscape and have successfully advised multiple startups and non-profits to success.

I am currently the Chief Security Officer (CSO) for Oracle Advertising where I oversee the security strategy and operations for one of the world's largest digital marketing and advertising platforms. I lead a global team of security experts who are responsible for protecting the data, assets, and reputation of our clients and partners across the advertising ecosystem. I have previously been a Chief Information Security Officer and a Chief Technology Officer.

Thoughts and opinions are my own and not reflective of my employer.

Lee Vorthman Points
Academic 0
Author 35
Influencer 26
Speaker 0
Entrepreneur 0
Total 61

Points based upon Thinkers360 patent-pending algorithm.

Thought Leader Profile

Portfolio Mix

Company Information

Company Type: Enterprise
Business Unit: Advertising
Theatre: Wold Wide
Minimum Project Size: $100,000+
Average Hourly Rate: $300+
Number of Employees: 100,000+
Company Founded Date: Undisclosed

Areas of Expertise

Business Continuity 30.12
Business Strategy 30.07
Careers 30.30
Cloud
Culture
Cybersecurity 30.78
DevOps
Digital Transformation 30.01
IT Leadership 30.10
IT Operations
IT Strategy 30.23
Leadership 30.47
Management
Mergers and Acquisitions 30.15
Privacy
Product Management
Security 31.41

Industry Experience

Publications & Experience

33 Article/Blogs
Navigating The First 90-180 Days In A New CISO Role
Import from wordpress feed
October 15, 2024
Late one Friday afternoon a call comes in and you find out you landed your next CISO role. All the interview prep, research, networking and public speaking has paid off! Then it dawns on you that you could be walking into a very difficult situation over the next few months. Even though the interview

See publication

Tags: Cybersecurity, Leadership, Security

Build A Proactive Security Program By Focusing On The Fundamentals
Import from wordpress feed
October 08, 2024
A common topic at security conferences, CISO dinners and networking events is: “how you are preparing your program for a new and upcoming regulation?” For CISOs, this conversation is a way to exchange ideas, gather information and compare programs. Unfortunately, CISOs often express feel

See publication

Tags: Cybersecurity, Leadership, Security

Is Agile and DevOps Holding Back Your Security Program?
Import from wordpress feed
October 01, 2024
There are a variety of development models you can run into as a CISO. If you are in the defense or government sector your engineering teams will probably use something like waterfall. However, if your company produces software products or services then most likely your organization uses Agile or SAF

See publication

Tags: Cybersecurity, Leadership, Security

Should Security Be An Approver For IT and Business Requests?
Import from wordpress feed
September 24, 2024
Over the course of my career I have consistently seen security in the approval chain for various IT operations and business requests, such as identity, network and even customer contracts. Having security in the approval chain may seem logical at first glance, but it can actually mask or exacerbate

See publication

Tags: Cybersecurity, Leadership, Security

Following SnowFlake, Cloud Providers Need To Shift To Secure By Default
Import from wordpress feed
August 20, 2024
In May 2024, SnowFlake experienced a data breach as a result of exposed credentials that allowed a threat actor to access customer accounts that weren’t secured with MFA. The fallout from this data breach ultimately impacted large SnowFlake customers like Ticketmaster, AutoZone, Santander Bank

See publication

Tags: Cybersecurity, Leadership, Security

Navigating The CISO Job Market
Import from wordpress feed
August 13, 2024
I had an interesting conversation with a friend over coffee last week and we were discussing how weird the CISO job market is right now. Even though the unemployment rates are favorable, the tech sector has actually seen slightly negative employment growth rates, which is not normal. This is largely

See publication

Tags: Cybersecurity, Leadership, Security

Should Companies Be Held Liable For Software Flaws?
Import from wordpress feed
August 06, 2024
Following the CrowdStrike event two weeks ago, there has been an interesting exchange between Delta Airlines and CrowdStrike. In particular, Delta has threatened to sue CrowdStrike to pursue compensation for the estimated $500M of losses allegedly incurred during the outage. CrowdStrike has recently

See publication

Tags: Cybersecurity, Leadership, Security

How CIOs, CTOs and the rest of the C-Suite Can Better Support CISOs
Import from wordpress feed
July 31, 2024
There are a variety of reporting structures for CISOs, such as reporting to the CTO, CIO, CFO or CEO. No matter who the CISO reports to, the CISO is still an integral part of the C-Suite. Yet despite this, CISOs don’t always receive full support from the rest of their C-Suite peers, which can caus

See publication

Tags: Cybersecurity, Leadership, Security

A CISO’s Analysis Of the CrowdStrike Global Outage
Import from wordpress feed
July 23, 2024
Overnight from July 18 to July 19, 2024, Windows systems running CrowdStrike ceased functioning and displayed the blue screen of death (BSOD). As people woke up on the morning of July 19th they discovered a wide reaching global outage of the consumer services they rely on for their daily lives, such

See publication

Tags: Cybersecurity, Leadership, Security

Tips For Managing Anxiety, Stress, Burnout and Mental Health
Import from wordpress feed
July 16, 2024
CISOs have been in the hot seat lately, particularly related to personal liability, increasing regulatory pressure and a shifting technological landscape. Compound these macro issues with the internal demands CISOs deal with such as incidents, budget cuts or political battles for relevancy and it is

See publication

Tags: Cybersecurity, Leadership, Security

How Should CISOs Think About Risk?
Import from wordpress feed
July 10, 2024
There are a lot of different ways for CISOs to think about and measure risk, which can be bucketed into two different categories. Qualitative measurement, which is a subjective measurement that follows an objective process or quantitative measurement, which is an objective measurement grounded in do

See publication

Tags: Cybersecurity, Leadership, Security

Should CISOs Be Technical?
Import from wordpress feed
July 02, 2024
Don’t want to read this? Watch a video short of the topic here. There are a lot of different paths to becoming a CISO and everyone’s journey is different, however two of the most common paths are coming up through the technical ranks or transitioning over from the compliance function. Co

See publication

Tags: Cybersecurity, Leadership, Security

Are Security Certifications Worth Renewing?
Import from wordpress feed
June 18, 2024
Almost weekly I see someone post a question on social media asking: “Is renewing my security certification worth it?” This is a valid question since security certifications are often expensive, time consuming and hard won. Maintaining your security certification may be required to land a

See publication

Tags: Cybersecurity, Leadership, Security

Navigating Hardware Supply Chain Security
Import from wordpress feed
June 04, 2024
Lately, I’ve been thinking a lot about hardware supply chain security and how the risks and controls differ from software supply chain security. As a CSO, one of your responsibilities is to ensure your supply chain is secure, yet the distributed nature of our global supply chain makes this a c

See publication

Tags: Cybersecurity, Leadership, Security

Accelerate Your CISO Career By Investing In Your Brand
Import from wordpress feed
May 28, 2024
When I was in the military there was a single consistent phrase that was repeated to us over and over again – reputation matters. Even though the military is a large organization, your specialization creates a small group and so how you perform and behave will stay with you throughout your car

See publication

Tags: Cybersecurity, Leadership, Security

Whats The Difference Between A CSO and CISO?
Import from wordpress feed
May 21, 2024
Like Arnold Schwarzenegger to Danny DeVito in the movie Twins, the Chief Security Officer (CSO) role is the big brother to the Chief Information Security Officer (CISO) role. What is the difference between these two roles and what skills does a CISO need to focus on if they aspire to become a CSO? I

See publication

Tags: Cybersecurity, Leadership, Security

When Evaluating A New CISO Role Don’t Forget The SEC 10-K And Other Governance Forms
Wordpress
May 14, 2024
Did you know there are publicly available documents that can provide a wealth of information about how a public company governs and prioritizes cybersecurity and risk? When preparing for a new CSO / CISO role it is important to research the company thoroughly and areas that have a wealth of information are SEC forms and board documents. CSO / CISO candidates should review these documents to get a sense of how the company views the security function and also identify red flags so you can discuss these topics during the interview.

See publication

Tags: Business Strategy, Careers, Cybersecurity

Start Preparing For Your Next Role During Your Current Role
Wordpress
May 07, 2024
My latest article discusses how to set your career on a path for success by planning for your next role in your current role. In this article I discuss top tips such as how to gain experience, what credentials to get and how to be ready when your dream job opens up!

Like my articles? Follow me, subscribe to my newsletter or subscribe to my blog (link in bio).

See publication

Tags: Careers, Cybersecurity, Leadership

What’s Better – Complete Coverage With Multiple Tools Or Partial Coverage With One Tool?
Wordpress
April 30, 2024

See publication

Tags: Cybersecurity, IT Leadership, IT Strategy

If Data Is Our Most Valuable Asset, Why Aren’t We Treating It That Way?
blog.370security.com
April 23, 2024
Over the past two decades, data has become the most valuable asset for every business. However, recent ransomware attacks and data breaches show that businesses continue to fail to properly secure and govern this critical asset.

In my latest newsletter article, I explore how businesses have evolved into digital data hoarders and cover common data security assumptions that can lead to hidden risks. I conclude the article by making several recommendations for best practices to properly secure and govern your data, so data breaches and ransomware can become a non-event.

It's time to take action and properly secure your data. Check out the article for some valuable insights and recommendations.

See publication

Tags: Business Continuity, Cybersecurity, Digital Transformation

Security Considerations For M&A and Divestitures
blog.370security.com
April 16, 2024
Mergers, acquisitions, and divestitures are commonplace in the corporate world. However, have you considered the security implications and risks that come along with them? How involved should the security team be and what are some key risks to consider? In my latest newsletter article, I explore specific security considerations for M&A and divestitures. Check it out!

See publication

Tags: Business Strategy, Cybersecurity, Mergers and Acquisitions

Are We Peak CISO?
Import from wordpress feed
April 02, 2024
Let’s be honest…the CISO role is weird right now. It is going through a transformative phase and the industry is at an inflection point similar to what other C-Level roles (like the CFO) have gone through in the past. What makes the role weird? The CISO community and any company that has

See publication

Tags: Cybersecurity, Leadership, Security

370 Security Blog
Wordpress
March 28, 2024
Documenting the experience of being a Chief Security Officer (CSO) at one of the largest cloud companies in the world

See publication

Tags: Cybersecurity, Leadership, Security

370 Security Blog
Wordpress
March 28, 2024
Documenting the experience of being a Chief Security Officer (CSO) at one of the largest cloud companies in the world

See publication

Tags: Cybersecurity, Leadership, Security

Security Theater Is The Worst
370 Security Blog
March 26, 2024

We have all been there…we’ve had moments in our life where we have had to “comply” or “just do it” to meet a security requirement that doesn’t make sense. We see this throughout our lives when we travel, in our communities and in our every day jobs. While some people may think security theater has merit because it “checks a box” or provides a deterrent, in my opinion security theater does more harm than good and should be eradicated from security programs.

See publication

Tags: Leadership, Security

2 Author Newsletters
Are Security Certifications Worth Renewing?
LinkedIn
June 20, 2024
Along with the variety of certifications there are different ways to earn a certification. The least expensive and most time consuming is to purchase the course material, self study and then sit for the exam. The most expensive and least time consuming is to attend a boot camp and then test for the exam on the last day. If you are lucky your employer will pay for or reimburse the expense of the certification.

See publication

Tags: Cybersecurity, Leadership

What's Better - Complete Coverage With Multiple Tools Or Partial Coverage With One Tool?
LinkedIn
May 02, 2024
The debate between complete coverage with multiple tools versus imperfect coverage with one tool regularly pops up in discussions between security professionals. What we are really talking about is attempting to choose between maximum functionality and simplicity. Having pursued both extremes over the course of my security career I offer this post to share my perspective on how CISOs can think about navigating this classic tradeoff

See publication

Tags: Cybersecurity, Leadership, Security

Thinkers360 Credentials

2 Badges

Blog

Opportunities

Events

Add to Shortlist View Shortlist »

Contact Lee Vorthman

Book a Video Meeting

Media Kit

Share Profile

Contact Info

  Profile

Lee Vorthman

Search
How do I climb the Thinkers360 thought leadership leaderboards?
What enterprise services are offered by Thinkers360?
How can I run a B2B Influencer Marketing campaign on Thinkers360?