ON DEMAND • Podcast Episode

Cybersecurity in Finance and Entertainment: Leadership in a Changing Threat Landscape

A candid conversation with Roberto Galdamez, CISO at Kovac Financial Network, on cybersecurity leadership, cloud security, vendor risk, ransomware, AI-powered phishing, regulatory pressure, and why communication is now critical for security leaders.

FEATURED GUEST

Roberto Galdamez

Our featured guest

Roberto Galdamez

CISO, Kovac Financial Network

In this episode, Roberto Galdamez shares lessons from a cybersecurity career spanning professional sports, vulnerability management, governance, risk, compliance, cloud security, and financial services. He explains how the CISO role has shifted from hands-on technical execution to strategic leadership, where security must support business continuity, regulatory alignment, vendor oversight, and board-level risk conversations.

He also covers:

  • Why cybersecurity leaders need to translate risk into business language
  • How cloud adoption shifted security from network perimeter to identity
  • Where vendor risk and regulatory compliance create exposure
  • Why AI-powered phishing and deepfakes are raising the stakes
  • What future CISOs need beyond technical expertise

Why this conversation matters now

Security leaders are managing a more complex risk environment, where cloud adoption, identity risk, ransomware, AI-powered phishing, vendor exposure, and regulatory pressure are all converging.

01.

How do we explain cybersecurity risk in business terms?

02.

What should security teams prioritize in financial services?

03.

How do we manage vendor and third-party risk?

04.

What changes when identity becomes the new security perimeter?

05.

How should organizations prepare for AI-powered attacks?

06.

What skills do future cybersecurity leaders need?

What you'll learn in this episode

After unlocking the full podcast, you’ll get expert insights on cybersecurity leadership, cloud security, AI-enabled threats, and business risk management.
01.

Why executive communication is essential for modern cybersecurity leadership

02.

How CISOs balance security controls with business continuity

03.

Why ransomware and regulatory non-compliance remain major financial services risks

04.

How third-party risk connects to supply chain security

05.

Why cloud security requires identity-centric controls and cloud-native tooling

06.

How AI is changing phishing, malware development, deepfakes, and social engineering

07.

What aspiring security leaders should build beyond technical depth

Who this episode is for

CEOs and business leaders CISOs and security leaders CTOs and CIOs Financial services leaders GRC and compliance teams IT professionals growing into leadership Teams strengthening cybersecurity strategy

Our host

Colin McCarthy

Colin McCarthy

IT and security leader

is an accomplished IT and security leader specializing in Zero Trust, SaaS operations, and enterprise technology at scale. He has built and led global IT organizations, driven cloud-first workplace transformations, partnered with leading technology vendors on product innovation, and is a respected speaker and community advocate in security, SaaSOps, and modern IT management.

A preview of the key takeaways

01.

Cybersecurity leadership is a business role

Roberto explains that CISOs need to translate technical risks into business impact, including financial loss, reputational damage, operational disruption, and regulatory exposure.

02.

Identity is the new perimeter

Cloud adoption has shifted security away from the old network perimeter model. Organizations now need stronger identity controls, least-privilege access, cloud posture management, workload protection, and API security.

03.

Vendor risk is supply chain risk

Third-party applications and vendors need continuous assessment, evidence of controls, contractual review, and ongoing monitoring because external systems can create internal exposure.

04.

AI is changing attacker behavior

Threat actors are using GenAI to create more personalized phishing emails, automate malware development, and produce deepfake content for social engineering and reputational harm.

05.

Future security leaders need soft skills

Technical knowledge matters, but Roberto emphasizes communication, mentorship, project ownership, business understanding, and the ability to influence across departments.

Why tkxel is sharing this conversation 

 At tkxel, we work with growing businesses navigating cybersecurity, cloud modernization, AI adoption, data protection, software engineering, and digital transformation.

This episode is especially relevant for leaders trying to strengthen security while supporting business growth. It is not just a conversation about cyber threats. It is a business conversation about risk, trust, compliance, cloud security, and preparing teams for AI-enabled attacks.

WHERE TKXEL BRINGS CONTEXT

1 Cybersecurity strategy and risk management 2 Cloud security and identity architecture 3 Vendor risk and compliance readiness 4 AI-enabled threat preparedness

RECOGNIZED BY

Key concepts covered in this podcast

1

Cybersecurity leadership

Explains why modern security leaders need to connect technical risk with business continuity, compliance, and trust.

2

Cloud security

Covers how cloud adoption changes security architecture, control design, and operational responsibility.

3

Identity risk

Shows why identity, access management, and least-privilege controls are now central to cybersecurity strategy.

4

Vendor risk management

Explores how third-party tools and partners can create exposure across the business.

5

Ransomware readiness

Looks at why ransomware remains a major risk for financial services and other regulated industries.

6

AI-powered threats

Covers how GenAI is changing phishing, malware creation, deepfakes, and social engineering.

7

CISO communication

Explains why future security leaders need business fluency, influence, mentoring, and cross-functional communication.

Frequently Asked Questions (FAQs)

Is this episode only for cybersecurity leaders? Expand FAQ Collapse FAQ
No. While the conversation focuses on cybersecurity, it is also relevant for CEOs, CTOs, CIOs, compliance leaders, IT teams, risk leaders, and financial services executives.
What do I get after accessing the podcast? Expand FAQ Collapse FAQ
You get access to the full podcast episode and transcript.
What is the core focus of the episode? Expand FAQ Collapse FAQ
The core focus is cybersecurity leadership, cloud security, identity risk, vendor management, ransomware, AI-powered attacks, and the evolving CISO role.
Why is the podcast gated? Expand FAQ Collapse FAQ
It is positioned as a premium resource for leaders actively researching cybersecurity risk, cloud security, financial services compliance, and AI-enabled threats.
Can this help teams improving cybersecurity strategy? Expand FAQ Collapse FAQ
Yes. The episode is useful for teams thinking about executive risk communication, identity controls, vendor security, ransomware readiness, cloud posture, and security leadership development.

Access the full podcast

We'll only use your details to send this resource and relevant insights from tkxel.

privacy-icon

We value your privacy

tkxel uses essential cookies to ensure the proper functioning of our website. With your consent, we also use optional cookies for analytics, advertising, and third-party services.

By clicking “Accept all”, you consent to the use of all cookies. You can manage or withdraw consent for optional cookies at any time by clicking “Customize”. Please note that some website features may not function properly if optional cookies are disabled.

For more information, please read our Privacy Policy.

Customize
Accept All

Control Your Privacy

Websites may store or retrieve information on your browser, mostly in the form of cookies. This information is used to personalize your experience and is not usually linked to your identity. You can choose not to allow certain types of cookies, but it may affect your website experience. Learn more and change settings by clicking on the different categories.

Strictly Necessary

Strictly necessary cookies enable website functionality and cannot be turned off. They are typically set in response to actions you take, like setting privacy preferences, logging in, or filling in forms. You can block or receive alerts about these cookies, but some website features may not work. These cookies do not store personal information.

Performance

Performance cookies track site visits and traffic sources to measure and improve site performance. They provide information on popular pages and visitor behavior. The information collected is anonymous. If you do not allow these cookies, we will not know when you have visited the site and cannot monitor its performance.

Targeting

Targeting cookies are cookies that our advertising partners may set on our site. They use them to create a profile of your interests and show relevant ads on other sites. They do not store personal information, but use your browser and internet device's unique ID. Without these cookies, you will see less targeted ads.

Functional

Functional cookies improve your website experience through enhanced functionality and personalization. They are set by us or third-party providers. Without them, some or all of these services may not work properly.

Confirm My Choices
Accept All

Upcoming Webinar

FinOps for AI Workflows: Controlling Cloud Costs for Businesses

August 12, 2026 10:00 am EST

Register Now
Watch Now
00 Days
00 Hours
00 Minutes
00 Seconds
Register Now