Thank you for Subscribing to CIO Applications Weekly Brief
A featured contribution from Leadership Perspectives, a curated forum for enterprise technology leaders, nominated by our subscribers and vetted by the CIOApplications Editorial Board.

Jacuzzi Group
Ray Malmassari, Sr. Director, IT Security and Infrastructure
Leading Cybersecurity with a Blend of AI, and Human-Centered Strategy


● Can you walk us briefly through your leadership role as Sr. Director, IT Security and Infrastructure? What are your key responsibilities and areas of focus?
-
I prioritize building a security-conscious environment where employees feel comfortable reporting incidents and where collaboration between teams is encouraged and celebrated
As Sr. Director of IT Security and Infrastructure, I lead a global team responsible for cybersecurity, infrastructure operations, and IT support. My core responsibilities include developing and executing our enterprise security strategy, managing infrastructure resilience, overseeing vendor relationships and contract negotiations, and ensuring compliance with standards like NIST and ISO 27001.
● The human factor remains one of the most significant vulnerabilities in cybersecurity. What are some initiatives you’ve championed around awareness, training, and culture building?
Human behavior plays a critical role in cybersecurity outcomes. I have led initiatives to implement continuous security awareness training, phishing simulations, and customized education for various roles across the organization. We also integrate security into the onboarding process and employee reviews to ensure it becomes part of the culture. Beyond formal training, I prioritize building a security-conscious environment where employees feel comfortable reporting incidents and where collaboration between teams is encouraged and celebrated.
● How do you see the intersection of AI and cybersecurity evolving—both in terms of threat landscape and defense strategy?
AI is transforming the cybersecurity landscape in powerful ways. On the threat side, we are seeing adversaries use AI for faster social engineering, dynamic malware creation, and automated exploitation. On the defense side, we are using AI to enhance threat detection, automate analysis, and accelerate response times. The intersection of AI and cybersecurity is a race to innovate. Success will depend on how effectively we combine AI driven tools with human expertise to stay ahead of increasingly adaptive threats.
● You have also authored content and contributed to thought leadership in cybersecurity. How important is storytelling and education in developing the next generation of cyber professionals?
Storytelling and education are vital in shaping future cyber professionals. Technical skills are important, but context and critical thinking are what separate good from great. In my book Cyber Warriors and other educational content, I use real-world stories to illustrate challenges, ethical dilemmas, and leadership decisions in cybersecurity. These narratives help make complex topics relatable and memorable. Sharing knowledge in this way inspires others, fosters deeper understanding, and encourages the kind of mindset needed for long-term success in this field.
● What advice would you offer to aspiring cybersecurity leaders looking to grow from technical roles into strategic executive positions?
First, make it a priority to understand the business and how security supports its goals. Learn to communicate risk in terms of business impact. Develop strong relationships with stakeholders across legal, HR, finance, and operations. Invest in leadership development, communication skills, and credentials like CISSP and PMP that bridge the gap between technical execution and strategic planning. Most importantly, empower and mentor others. A true leader builds a team that thrives with or without them, and that kind of trust and performance is what earns a seat at the executive table.

