AI Is Redefining the CISO’s Role, Nvidia Security Chief Says

CISO leaders are facing a rapid shift as artificial intelligence becomes central to business strategy, with Nvidia’s security policy chief Mark Weatherford telling ISC2 Strategic Congress 2026 that CISOs must help executives weigh AI’s advantages against its risks and ensure accountability when deploying the technology.

The discussion emphasised that speed matters: AI is evolving so quickly that traditional security practices, such as annual penetration testing, are increasingly insufficient, and continuous or around-the-clock testing is becoming the norm.

Weatherford, who has held senior security roles across government and industry, warned of a FOMO-driven rush to adopt AI without proper due diligence or a clear understanding of value. He urged CISOs to embrace calculated risk and adopt a mindset akin to the Navy’s command by negation—taking autonomous actions aligned with the organisation’s risk tolerance unless told otherwise.

The executive also highlighted the need for CISOs to articulate risk ownership to the board and ensure there is a clear path for talent development within security teams, including AI-native interns and practical assessments that test adaptability rather than one “right” solution. He warned that being slow to adopt AI could invite blame when deployments create new risks, and he called for ongoing learning, curiosity, and a weekly focus on new AI topics to stay ahead.