PwC security chief says AI is reshaping risks and teams

PwC’s global CISO and CIO James Shira tells Dark Reading that AI is amplifying both opportunities and risks for security teams, driving a faster pace of change and a larger attack surface. In the interview for the Heard It From a CISO series, Shira argues that organisations must adapt their risk management and security strategy to cope with rapid AI adoption, noting that attackers’ capabilities are evolving as quickly as defenders’.

He emphasises the need for leadership to focus on consistency in process while allowing security programmes to scale in response to new AI-enabled workflows, patching demands, and an expanding inbound request load.

The discussion also covers career paths and team building. Shira backs certification as a catalyst for external equity, while acknowledging that a four-year degree remains important for those aiming for executive security roles, with a master’s degree as a possible later step. He describes PwC’s culture as supportive of learning and collaboration, and stresses the value of transparency, self-direction, and emotional resilience in high-performing security teams.

On boardroom engagement, he advises CISOs to deliver results first, then communicate in a clear, authentic voice using storytelling, rather than jargon, to explain risk and priorities. Balancing the CISO and CIO roles is framed as an increasingly harmonised endeavour, though Shira notes that the CIO side may involve more political considerations.

Looking ahead, he foresees AI transforming both security practice and the broader workforce, while urging leaders to manage budget and footprint as they adapt to a changing landscape.