Chief Information Security Officer & Senior Vice President for Security Solution Architecture, Qualys
Search every verified Jonathan Trull interview, podcast appearance, and on-the-record quote — each transcript cross-checked by AI and human review to confirm speaker identity. Jonathan Trull, Chief Information Security Officer and Senior Vice President for Security Solution Architecture at Qualys, has spoken at several industry events in 2024 and 2025 about the evolving role of CISOs and the impact of artificial intelligence on cybersecurity. At ROCon25 Houston, Trull said CISOs should avoid being "sucked into the hype around AI" and instead become "the most knowledgeable people about AI in the company to advise the board." He noted that organizations are grappling with the "duality" of AI, with CEOs asking how to use it for competitive advantage while security teams assess new attack vectors such as sophisticated phishing and deepfakes. Trull stated that if the scientists who develop AI are "surprised by these emergent behaviors," it falls on CISOs to help manage the associated risks. Trull has also emphasized the need for cybersecurity professionals to translate technical risk into business language that boards and CFOs can understand. In a fireside chat with Oracle, he said CISOs face "difficult conversations" in the boardroom, citing an example where a board member would not allocate more funds unless the CISO could clearly articulate what the budget would buy. He has advocated for breaking down silos between GRC, vulnerability management, and security operations, describing risk management as "the grand unifier" that aligns security with business objectives. In a GovExec TV interview, Trull discussed challenges facing government entities, including limited resources and difficulty securing talent, particularly in rural areas. He also noted that frameworks for securing AI are emerging from NIST and ISO, and that organizations should integrate privacy and security controls into AI development from the start rather than retrofitting them later.
“So let's look at the other side of the AI which is, you know, oh my gosh AI is going to ruin the world, right?”
“I think every organization in the world right now has their head spinning looking at the duality, the multiple aspects of this; the CEOs are saying how do we take advantage of this to separate ourselves from our competitors, go into new markets, be more efficient.”
“Then there's how what are the new attacks that we're going to see from this.”
“What's really important for CISOs is not to get sucked into the hype around AI — to say it's the greatest thing ever or it hallucinates, it's terrible, it's the end of the world — and in fact, I think we need to be the most knowledgeable people about AI in the company to advise the board.”
CISOs can't afford to get lost in the AI hype — it's not the end of the world, but it is changing how we manage risk.” From the ...
Jonathan Trull, CISO at Qualys, shares his journey from military intelligence to cybersecurity leadership, offering insights from his ...
A conversation with Qualys CISO Jonathan Trull, recorded on May 28th at the Qualys Public Sector Cyber Risk Conference.
Join Andrew Whitaker, Master Principal Cloud Architect & Field CISO at Oracle, and Jonathan Trull, CISO and SVP Security ...
Sponsored by Invincea. Paul Roberts of Security Ledger and Anup Ghosh of Invincea speak with CISO Jonathan Trull of Qualys.
Security Ledger Editor in Chief Paul Roberts and Anup Ghosh, CEO of Invincea talk with Jonathan Trull, the CISO of security firm ...
Sign in to search the full transcript archive, filter by topic, and access every quote from Jonathan Trull.