Costas Chousiadis

Cybersecurity is a business enabler, brand differentiator, and board-level priority. With over 25 years of experience in information security, I help organizations build and mature security programs that not only defend against today’s threats but align tightly with business strategy and regulatory expectations. Bringing a unique blend of technical depth and executive perspective, having led initiatives across the full cybersecurity lifecycle - from GRC frameworks and enterprise risk management to offensive security, including red teaming and penetration testing. I’ve advised executive leadership, guided regulatory compliance across global jurisdictions, and led multidisciplinary teams to embed security into culture and operations. My approach is pragmatic and outcome-driven: design security strategies that work in the real world, mitigate risks that matter, and earn trust at every level - from DevOps to the boardroom. Leadership Focus: - Building and Scaling Security Programs (CISO) - GRC & Risk-Driven Security Strategy (NIST, ISO 27001, SOC 2, GDPR, etc.) - Executive & Board Cyber Risk Advisory - Red Team & Threat-Informed Defense - Secure Digital Transformation & Cloud Security - Incident Response Readiness and Crisis Management - Business-Aligned Metrics, KPIs & ROI of Security Investments Whether as a full-time CISO, advisor, or fractional leader, I deliver clarity, calm, capability in a complex threat landscape, and experienced cybersecurity leadership that translates complexity into action and risk into resilience. Certifications: MSc In Information Security (Uni. of London, Royal Holloway) Certified Information Systems Security Professional (CISSP) Offensive Security Certified Professional (OSCP) Certified NIST CSF v2.0 Specialist Licensed Penetration Tester (Master) (LPT) Certified Red Team Operator (CRTO) Certified Expert Penetration Tester (CEPT) Certified Web App Penetration Tester (CWAPT) Certified Information Security Manager (CISM) Certified Ethical Hacker (CEH) ISO 27001 Lead Auditor (ISO 27001 LA) ISO 9001 Lead Auditor (ISO 9001 LA) PCI ASV Other trainings like: Cisco Certified Design Architect (CCDA) Cisco Certified Network Associate (CCNA) Securing Networks with PIX and ASA (SNPA) Checkpoint Certified Security Administrator – Engineer (CCSA/CCSE) Certified Network Security Associate (FCNSA) Certified Network Security Professional (FCNSP) Cirix Application Firewall 8.0 Administrator (CCA) Symantec Technical Specialist in Endpoint Protection (STS-SEP) Symantec Technical Specialist in Security Information Manager (STS-SIM)