Michael Piacente's guest appearances

Michael Piacente

Open Source Security Podcast

Kruze Consulting's Founders and Friends Podcast for Startups

Security Conversations

Hacker Valley Studio

CISO Tradecraft®

The Confident Defense Podcast

Future of Application Security

Adam Shostack

Mohit Tiwari

Chris Castaldo

Immad Akhund

David Barrett

Cory Doctorow

Brian Balfour

Michael Tannenbaum

Rod Drury

Parker Conrad

Justin Anderson

Charles Hudson

Jeff Lee

Jeff Smith

Matt Martin

OwlTail

Have you ever wondered how to negotiate your best CISO compensation package?  On this episode, we invite Michael Piacente from Hitch Partners to discuss important parts of the compensation packages.  Examples include but are not limited to: - Base Salary, Bonuses (Annual, Relocation, &amp; Hiring) Reserve Stock Units Annual Leave Title (VP or SVP) Directors &amp; Officers Insurance Accelerated Vesting Clauses Severance Agreements  You can learn more about CISO compensations by Googling any of the following compensation surveys Hitch Partners CISO Compensation and Organizational Structure Survey Report: https://www.hitchpartners.com/ciso-security-leadership-survey-results-23 Heidrick &amp; Struggles Global Chief Information Officer Survey: https://www.heidrick.com/en/insights/... IANS CISO Compensation and Budget Benchmark Study: https://www.iansresearch.com/ciso-com...  Full Transcripts: https://docs.google.com/document/d/1e... Chapters: 00:00 Introduction 01:58 What's the Difference? 06:50 The Three-Legged Stool (Base Salary, Bonuses, &amp; RSUs) 11:44 Is there a signing bonus? 13:56 What's the difference between RSUs &amp; Options? 18:52 Private Companies - What's the Value of the Offer? 22:04 Double Triggers in Private Companies 26:38 Should you counter an offer? 28:17 Corporate Liability Insurance 29:50 Do you want to be extended on the Director and Officer Insurance Policy? 32:56 How to negotiate a severance agreement 36:00 Compensation Survey Reports

Have you ever wondered how to negotiate your best CISO compensation package?  On this episode, we invite <a href="https://www.linkedin.com/in/moderncisosearch/" rel="nofollow" target="_blank">Michael Piacente</a> from Hitch Partners to discuss important parts of the compensation packages.  Examples include but are not limited to: - Base Salary, <ul><li>Bonuses (Annual, Relocation, &amp; Hiring)</li> <li>Reserve Stock Units</li> <li>Annual Leave</li> <li>Title (VP or SVP)</li> <li>Directors &amp; Officers Insurance</li> <li>Accelerated Vesting Clauses</li> <li>Severance Agreements</li> </ul> You can learn more about CISO compensations by Googling any of the following compensation surveys <ul><li>Hitch Partners CISO Compensation and Organizational Structure Survey Report: <a href="https://www.hitchpartners.com/ciso-security-leadership-survey-results-23" rel="nofollow" target="_blank">https://www.hitchpartners.com/ciso-security-leadership-survey-results-23</a></li> <li>Heidrick &amp; Struggles Global Chief Information Officer Survey: <a href="https://www.youtube.com/redirect?event=video_description&amp;redir_token=QUFFLUhqbDcyemxROUZ1ZmJKRE11QlpxbDl2OEZRS19Ud3xBQ3Jtc0tsOGVNVzdYNmwxNG1xQnJjXzg2dnNuWmxOUG1Yb21lYTd2bHR2UkFVcTZfdGV1RHhYcU1Wb2xtbEJBamk3Mkcwc1Y1a2J0WDVfTFEzZWJNRW5BRGFHZkpLd2d1VTlPdnFwX0pxWmxRVFBWRE1nRk9QWQ&amp;q=https%3A%2F%2Fwww.heidrick.com%2Fen%2Finsights%2Fcompensation-trends%2F2022-global-chief-information-security-officer-ciso-survey&amp;v=bm_zGiT0S_I" rel="nofollow" target="_blank">https://www.heidrick.com/en/insights/...</a></li> <li>IANS CISO Compensation and Budget Benchmark Study: <a href="https://www.youtube.com/redirect?event=video_description&amp;redir_token=QUFFLUhqa3FEU2dNSzRJNHUwazNsWXRRdkpva2x2am9yQXxBQ3Jtc0ttbFRhMTNBNkhOeHNDck5rQ1Uxb3Bxa0Z3ZjM1TktPYXJoUHl2MWhtUVRydUc2bEFfd1N3T3NrYUlaTVVMNmw4VGcza0EtNlNDVk9MVm0wSXo4TDBpem9KQ2ZrdnFEV2U5Mm1wdGZGNTdnVXhXTFRFMA&amp;q=https%3A%2F%2Fwww.iansresearch.com%2Fciso-comp-survey&amp;v=bm_zGiT0S_I" rel="nofollow" target="_blank">https://www.iansresearch.com/ciso-com...</a></li> </ul> Full Transcripts: <a href="https://www.youtube.com/redirect?event=video_description&amp;redir_token=QUFFLUhqbFRHN0QtTlRXampXcDRsSFBTaDVwSi1kQ21BQXxBQ3Jtc0tsWUVqRHNXSkNFY3FKd2NqZ2VHMk9qSUxhTHhKZjh1SlpBNTE4NndrZVR6Z1hKYkd3YzZWMkV6X2FUa3ZiajBoZi1BYzlXWDlkM1hDQkhESjhCeTJKRHM4bUd2bUFZNDN0Q1B1S191dFZrVVo2dkFjUQ&amp;q=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1eE92elfR7qRi0nVaRb6HglUydHId8eER&amp;v=bm_zGiT0S_I" rel="nofollow" target="_blank">https://docs.google.com/document/d/1e...</a> Chapters: <ul><li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=0s" rel="nofollow" target="_blank">00:00</a> Introduction</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=118s" rel="nofollow" target="_blank">01:58</a> What's the Difference?</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=410s" rel="nofollow" target="_blank">06:50</a> The Three-Legged Stool (Base Salary, Bonuses, &amp; RSUs)</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=704s" rel="nofollow" target="_blank">11:44</a> Is there a signing bonus?</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=836s" rel="nofollow" target="_blank">13:56</a> What's the difference between RSUs &amp; Options?</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=1132s" rel="nofollow" target="_blank">18:52</a> Private Companies - What's the Value of the Offer?</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=1324s" rel="nofollow" target="_blank">22:04</a> Double Triggers in Private Companies</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=1598s" rel="nofollow" target="_blank">26:38</a> Should you counter an offer?</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=1697s" rel="nofollow" target="_blank">28:17</a> Corporate Liability Insurance</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=1790s" rel="nofollow" target="_blank">29:50</a> Do you want to be extended on the Director and Officer Insurance Policy?</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=1976s" rel="nofollow" target="_blank">32:56</a> How to negotiate a severance agreement</li> <li><a href="https://www.youtube.com/watch?v=bm_zGiT0S_I&amp;t=2160s" rel="nofollow" target="_blank">36:00</a> Compensation Survey Reports</li></ul>

#120 - Negotiating Your Best CISO Package (with Michael Piacente)

Michael Piacente, Managing Partner &amp; Cofounder at Hitch Partners, answers the essential question on many cybersecurity professionals’ minds: Where do CISOs find CISO jobs? As it turns out, Michael helps many cybersecurity teams find their perfect CISO match with the assistance of his own team at Hitch Partners. In this episode, Michael clarifies what the role of a CISO really is, explains the compensation and benefits, and reveals the many responsibilities a CISO may take on during their team in the role.   Timecoded Guide: [00:00] Defining the role of CISO &amp; finding the right homes for each CISO [05:21] VCISO &amp; fractional CISO as an alternative to a full-time CISO [11:49] CISO annual income, benefits, &amp; non-monetary incentives [16:37] Explaining additional responsibilities &amp; tasks taken on by the CISO [25:11] Giving advice to future CISOs looking for the next cyber executive opportunity   Sponsor Links: Thank you to our sponsor Axonius and NetSPIfor bringing this episode to life!  The Axonius solution correlates asset data from existing solutions to provide an always up-to-date inventory, uncover gaps, and automate action — giving IT and security teams the confidence to control complexity. Learn more at axonius.com/hackervalley   For more than 2 decades, NetSPI has helped companies discover and remediate critical security issues through its platform-driven, human delivered security test. NetSPI is much more than a pentesting company, bringing you the most comprehensive suite of offensive security solutions. Visit netspi.com/HVM to learn more.   In your own definition and experience, what is a CISO? Although there’s many definitions of the role, Michael clarifies that defining CISO should always include being an executive. To have a CISO who makes a positive impact and fulfills an organization’s needs, that CISO has to be properly placed, properly sponsored, and be in an environment where they have the proper reporting processes. Michael also believes the CISO should always be looking over their shoulder to be diligent of the next threat. “In my version of it, a CISO is the executive— and that's the key term here— that has been properly placed, properly sponsored to handle all of the business information and data risk policy execution and operations in the company.”   What is the difference between a fractional CISO and a VCISO? In Michael’s opinion, a VCISO (virtual CISO) and fractional CISO can be used interchangeably in a situation where a company does not need a full-time CISO executive. Unless they’re looking to support a strong security program, Michael understands that many companies don’t need a full-time CISO in order to be successful. A VCISO makes an impact on an organization’s security without being an overwhelming role in a smaller organization. “Bringing in your starter package to implement the baseline or foundational building blocks of what will become a security program, in the form of a consultant or consulting firm, is often a wiser choice than going in building a security program around a full-time CISO role.”   Are there different types of CISOs, and have those types changed over time? Previously, Michael defined 3 different types of CISOs in his search for CISOs with Hitch Partners. However, a fourth type has emerged in recent years: the BISO, or Field CISO. This fourth type joins the ranks alongside other impactful CISO types, including the client (or governance) facing CISO, highly technical CISO, the IT-focused CISO, and now, our fourth type, the BISO, who focuses on the business side of the risk. “It's amazing that all of our CISO searches contain all these different types of CISOs. The fun part of that we get to figure out is: What's the priority [for the role]? What's the order? What does everyone in the organization think the priority should be?”    How would you direct someone to take that first step after realizing they want to be a CISO? Discovering the CISO role exists and being the right person for the role is an important distinction, and Michael encourages potential CISOs to take some time to research the job before getting involved in a job search. However, once someone knows they want to be a CISO, Michael advises finding a CISO mentor and diving into a passion. Each type of CISO needs an expertise and passion to propel them into the superpower status needed to be a CISO.  “I think it’s about finding a passion. I'm a big believer that you just have to know where your superpower is, or what your superpower wants to be. In other words, that thing that's passionate to you, that you probably know better than 99% of the population out there.” --------------- Links: Keep up with our guest Michael Piacente on LinkedIn Learn more about Hitch Partners on their website Connect with Ron Eddings on LinkedIn and Twitter Connect with Chris Cochran on LinkedIn and Twitter Purchase a HVS t-shirt at our shop Continue the conversation by joining our Discord Check out Hacker Valley Media and Hacker Valley Studio

Michael Piacente, Managing Partner &amp; Cofounder at Hitch Partners, answers the essential question on many cybersecurity professionals’ minds: Where do CISOs find CISO jobs? As it turns out, Michael helps many cybersecurity teams find their perfect CISO match with the assistance of his own team at Hitch Partners. In this episode, Michael clarifies what the role of a CISO really is, explains the compensation and benefits, and reveals the many responsibilities a CISO may take on during their team in the role. Timecoded Guide: [00:00] Defining the role of CISO &amp; finding the right homes for each CISO [05:21] VCISO &amp; fractional CISO as an alternative to a full-time CISO [11:49] CISO annual income, benefits, &amp; non-monetary incentives [16:37] Explaining additional responsibilities &amp; tasks taken on by the CISO [25:11] Giving advice to future CISOs looking for the next cyber executive opportunity Sponsor Links: Thank you to our sponsor Axonius and NetSPIfor bringing this episode to life! The Axonius solution correlates asset data from existing solutions to provide an always up-to-date inventory, uncover gaps, and automate action — giving IT and security teams the confidence to control complexity. Learn more at<a href="http://axonius.com/hackervalley" rel="nofollow" target="_blank"> axonius.com/hackervalley</a> For more than 2 decades, NetSPI has helped companies discover and remediate critical security issues through its platform-driven, human delivered security test. NetSPI is much more than a pentesting company, bringing you the most comprehensive suite of offensive security solutions. Visit <a href="https://www.netspi.com/HVM" rel="nofollow" target="_blank">netspi.com/HVM </a>to learn more. In your own definition and experience, what is a CISO? Although there’s many definitions of the role, Michael clarifies that defining CISO should always include being an executive. To have a CISO who makes a positive impact and fulfills an organization’s needs, that CISO has to be properly placed, properly sponsored, and be in an environment where they have the proper reporting processes. Michael also believes the CISO should always be looking over their shoulder to be diligent of the next threat. “In my version of it, a CISO is the executive— and that's the key term here— that has been properly placed, properly sponsored to handle all of the business information and data risk policy execution and operations in the company.” What is the difference between a fractional CISO and a VCISO? In Michael’s opinion, a VCISO (virtual CISO) and fractional CISO can be used interchangeably in a situation where a company does not need a full-time CISO executive. Unless they’re looking to support a strong security program, Michael understands that many companies don’t need a full-time CISO in order to be successful. A VCISO makes an impact on an organization’s security without being an overwhelming role in a smaller organization. “Bringing in your starter package to implement the baseline or foundational building blocks of what will become a security program, in the form of a consultant or consulting firm, is often a wiser choice than going in building a security program around a full-time CISO role.” Are there different types of CISOs, and have those types changed over time? Previously, Michael defined 3 different types of CISOs in his search for CISOs with Hitch Partners. However, a fourth type has emerged in recent years: the BISO, or Field CISO. This fourth type joins the ranks alongside other impactful CISO types, including the client (or governance) facing CISO, highly technical CISO, the IT-focused CISO, and now, our fourth type, the BISO, who focuses on the business side of the risk. “It's amazing that all of our CISO searches contain all these different types of CISOs. The fun part of that we get to figure out is: What's the priority [for the role]? What's the order? What does everyone in the organization think the priority should be?”  How would you direct someone to take that first step after realizing they want to be a CISO? Discovering the CISO role exists and being the right person for the role is an important distinction, and Michael encourages potential CISOs to take some time to research the job before getting involved in a job search. However, once someone knows they want to be a CISO, Michael advises finding a CISO mentor and diving into a passion. Each type of CISO needs an expertise and passion to propel them into the superpower status needed to be a CISO.  “I think it’s about finding a passion. I'm a big believer that you just have to know where your superpower is, or what your superpower wants to be. In other words, that thing that's passionate to you, that you probably know better than 99% of the population out there.” --------------- Links: Keep up with our guest Michael Piacente on <a href="https://www.linkedin.com/in/moderncisosearch/" rel="nofollow" target="_blank">LinkedIn</a> Learn more about Hitch Partners on <a href="https://www.hitchpartners.com" rel="nofollow" target="_blank">their website</a> Connect with Ron Eddings on <a href="https://www.linkedin.com/in/ronaldeddings/" rel="nofollow" target="_blank">LinkedIn</a> and <a href="https://twitter.com/ronaldeddings" rel="nofollow" target="_blank">Twitter</a> Connect with Chris Cochran on <a href="https://www.linkedin.com/in/chrishvm/" rel="nofollow" target="_blank">LinkedIn</a> and <a href="https://twitter.com/chrishvm" rel="nofollow" target="_blank">Twitter</a> Purchase a HVS t-shirt at our <a href="https://store.hackervalley.com/" rel="nofollow" target="_blank">shop</a> Continue the conversation by joining our <a href="https://hackervalley.com/discord" rel="nofollow" target="_blank">Discord</a> Check out <a href="https://hackervalley.com/" rel="nofollow" target="_blank">Hacker Valley Media</a> and <a href="https://hackervalley.com/show/hackervalley/" rel="nofollow" target="_blank">Hacker Valley Studio</a>

Hiring the Next Fractional CISO with Michael Piacente

CISOs have one of the most unique views of an organization.    Being in charge of teams that are under enormous pressure to ship, deliver, and sell security goes beyond an effective management.   Michael Piacente is the co-founder and managing director of Hitch Partners and he has been helping the CISO community for several years.  In today's show, he shares his insights about the patterns that most successful CISOs have in common. Topics discussed in this episode: The attributes and skill sets of a great CISO. What Hitch Partners does and Michael's professional journey. Suggestions for aspiring CISO that want to gain exposure and visibility. The importance of partnering with the technical and non-technical part of the business. Keys to retaining and engaging top talent. Tips on how to structure the interview process. Why building a personal brand is very important for the CISO career path. What Hitch Partners CISO Survey is all about.

CISOs have one of the most unique views of an organization.  Being in charge of teams that are under enormous pressure to ship, deliver, and sell security goes beyond an effective management.   Michael Piacente is the co-founder and managing director of Hitch Partners and he has been helping the CISO community for several years.  In today's show, he shares his insights about the patterns that most successful CISOs have in common. Topics discussed in this episode: <ul><li>The attributes and skill sets of a great CISO.</li> <li>What Hitch Partners does and Michael's professional journey.</li> <li>Suggestions for aspiring CISO that want to gain exposure and visibility.</li> <li>The importance of partnering with the technical and non-technical part of the business.</li> <li>Keys to retaining and engaging top talent.</li> <li>Tips on how to structure the interview process.</li> <li>Why building a personal brand is very important for the CISO career path.</li> <li>What Hitch Partners CISO Survey is all about.</li></ul>

EP 2 - Hitch Partners Michael Piacente: What It Takes To Become a Successful Chief Information Security Officer

Michael Piacente, Cofounder and Managing Partner of Hitch Partners, a firm that specializes in CISO and Security leadership retained search projects, host of the podcast The Hitch Cast, trusted advisor to industry-leading CISOs, cited as an expert in WSJ.

The Effective CISO with Michael Piacente from Hitch Partners. What it means to be a Head of Security in 2020 and Beyond.

Hitch Partners principal Michael Piacente dishes on the cybersecurity job market during an economic crisis, the intricacies of recruiting top-flight security talent, the high rate of turnover among CISOs, and why companies should spend more time on writing better job descriptions.Links:WSJ: CISOs stay on the job less than three years, compared with nearly seven years for CEOsExploring the CISO's personal brand

Hitch Partners principal Michael Piacente dishes on the cybersecurity job market during an economic crisis, the intricacies of recruiting top-flight security talent, the high rate of turnover among CISOs, and why companies should spend more time on writing better job descriptions.Links:<ul><li><a href="https://www.wsj.com/articles/cisos-short-tenures-can-hamper-cyber-defenses-11582021801?mod=djemCybersecruityPro&amp;tpl=cy" rel="nofollow" target="_blank">WSJ: CISOs stay on the job less than three years, compared with nearly seven years for CEOs</a></li><li><a href="https://www.linkedin.com/pulse/exploring-cisos-personal-brand-michael-piacente/" rel="nofollow" target="_blank">Exploring the CISO's personal brand</a></li></ul>

Michael Piacente, Principal, Hitch Partners

Josh and Kurt talk to Michael Piacente from Hitch Partners about the past, present, and future role of the CISO in the industry.

<a href="https://twitter.com/joshbressers" rel="nofollow" target="_blank">Josh</a> and <a href="https://twitter.com/kurtseifried" rel="nofollow" target="_blank">Kurt</a> talk to Michael Piacente from Hitch Partners about the past, present, and future role of the CISO in the industry.

Episode 116 - The future of the CISO with Michael Piacente

Michael Piacente discusses his firm, Hitch Partners (https://www.hitchpartners.com), the leading Executive Search Firm for Security Professionals. Michael talks about the explosion in demand for Executives in Security and the downside companies face when they haven't invested properly in securing their IT Operations. Michael is a long time recruiting expert and shares tons of Best Practices for Recruiting as well.

Michael Piacente discusses his firm, Hitch Partners (<a href="https://www.hitchpartners.com" rel="nofollow" target="_blank">https://www.hitchpartners.com</a>), the leading Executive Search Firm for Security Professionals. Michael talks about the explosion in demand for Executives in Security and the downside companies face when they haven't invested properly in securing their IT Operations. Michael is a long time recruiting expert and shares tons of Best Practices for Recruiting as well.