Executive Cybersecurity Leadership

AI Governance. Enterprise GRC. Cybersecurity Leadership.

Helping organizations build resilient security programs, manage enterprise risk, and adopt AI responsibly.

I have spent more than two decades helping Fortune 500 organizations strengthen governance, reduce enterprise risk, and build cybersecurity programs that support business growth. My experience spans governance, risk management, regulatory compliance, security awareness, and enterprise security strategy across highly regulated industries.

Throughout my career, I have partnered with executive leadership to transform cybersecurity from a technical function into a strategic business enabler. From leading post-merger security integration and developing enterprise risk registers to improving security awareness programs and guiding compliance initiatives, I have consistently delivered measurable results that reduce risk while supporting business objectives.

Throughout my career, I have partnered with executive leadership to transform cybersecurity from a technical function into a strategic business enabler. From leading post-merger security integration and developing enterprise risk registers to improving security awareness programs and guiding compliance initiatives, I have consistently delivered measurable results that reduce risk while supporting business objectives.

James A. Bohan | Executive Cybersecurity Leadership

Today, I help organizations navigate the rapidly evolving challenges of cybersecurity and artificial intelligence governance. Drawing on industry frameworks such as the NIST AI Risk Management Framework and ISO/IEC 42001, I work with organizations to establish practical governance models that encourage innovation while maintaining security, compliance, and responsible oversight.

I believe effective cybersecurity is built on transparency, measurable risk management, and aligning security initiatives with business priorities. My goal is to help organizations make informed decisions, strengthen resilience, and confidently adapt to an increasingly complex threat landscape.

Core Leadership Expertise

Core Leadership Expertise

  • Governance, Risk & Compliance
  • Enterprise GRC Architecture
  • Risk Registers & Reporting
  • Regulatory Compliance
  • Security Policies & Standards
  • PCI Compliance
  • Control Framework Design

Cybersecurity Leadership

  • Security Program Development
  • AI Governance
  • Security Awareness Programs
  • Cyber Risk Assessment
  • Threat & Vulnerability Management
  • Post-Merger Security Integration

Executive Advisory

  • Executive Risk Communication
  • Business Alignment
  • Strategic Planning
  • Cross-Functional Collaboration
  • Governance Roadmaps
  • Organizational Resilience

Driving Measurable Cybersecurity Outcomes

Enterprise Governance & Risk

  • Unified 37+ security policies and standards following a corporate acquisition
  • Built enterprise risk registers supporting executive decision-making
  • Mapped cyber risk to business capabilities and critical operations

Security Awareness & Human Risk

  • Reduced phishing failure rates by 17%
  • Reduced user-caused security incidents by 14%
  • Developed role-based security training aligned with employee risk profiles

Compliance & Program Efficiency

  • Reduced ongoing PCI compliance costs by 20%
  • Shortened information security request fulfillment by 20–23%
  • Led assessments across PCI, SOX, HIPAA, NIST, and ISO frameworks

Vulnerability & Risk Reduction

  • Directed remediation of 40,000+ past-due vulnerabilities
  • Completed remediation efforts 45 days ahead of schedule
  • Reduced production application vulnerabilities by 30%

Driving Measurable Cybersecurity Outcomes

Governance, Risk & Leadership

  • Unified 37+ security policies after a corporate acquisition
  • Built enterprise risk registers for executive leadership
  • Mapped cyber risk to critical business operations
  • Strengthened governance programs for business growth

Cybersecurity Performance & Risk Reduction

  • Reduced phishing failure rates by 17%
  • Reduced user-caused security incidents by 14%
  • Directed remediation of 40,000+ past-due vulnerabilities
  • Reduced PCI compliance costs by 20% through program consolidation

Executive Leadership & Strategic Advisory

  • Advised executives on enterprise cyber risk and mitigation strategies
  • Aligned cybersecurity initiatives with business objectives
  • Led cross-functional teams across security, technology, and compliance
  • Translated technical risk into actionable business decisions

Responsible AI & Future-Ready Governance

  • Guided organizations on responsible AI governance
  • Applied NIST AI RMF and ISO/IEC 42001 principles
  • Developed governance frameworks supporting secure AI adoption
  • Balanced innovation, compliance, and enterprise risk management

Let’s Start the Conversation

Schedule an Interview
Download Resume

Trusted Experience & Credentials

ENTERPRISE

  • Stericycle
  • GoHealth
  • Discover
  • CVS Health

CERTIFICATIONS

  • CISSP
  • Microsoft Certified Professional

CERTIFICATIONS

  • CISSP
  • Microsoft Certified Professional

Framework Expertise

  • NIST CSF
  • NIST AI RMF
  • ISO 27001
  • ISO/IEC 42001
  • PCI DSS
  • SOX
  • HIPAA
  • OWASP