Jorge Zelaya
Chief Information Security Officer
Atmosera
About
Jorge Zelaya is the Chief Information Security Officer (CISO) at Atmosera, where he leads the company’s cybersecurity strategy, managed security services, compliance initiatives, and cyber resilience programs. With more than 20 years of experience in cybersecurity and information technology, he has built and scaled security organizations across startups, managed service providers, and Fortune 1000 companies spanning healthcare, financial services, manufacturing, SaaS, and technology sectors. At Atmosera, Zelaya is responsible for advancing the company’s security operations and compliance offerings, including Microsoft-aligned security services and Atmosera’s Microsoft Verified MXDR capabilities. He oversees 24x7 security operations, cyber risk management, governance and compliance programs, and the integration of AI-driven security automation. His work focuses on helping organizations strengthen cyber resilience while aligning security investments with business objectives and regulatory requirements. Prior to joining Atmosera, Zelaya served as the Global CISO ZeroFox and IDX, where he was responsible for cybersecurity strategy, IT vision, and platform operations. Throughout his career, he has led security modernization, incident response, risk management, and technology transformation initiatives across a wide range of industries. A recognized cybersecurity thought leader and industry speaker, Zelaya frequently shares insights on AI governance, cyber risk, cloud security, managed detection and response, Microsoft security technologies, and executive security leadership.
Sessions
Uninvited Guests & Unchecked Agents
What you will learn:
Imagine you're throwing a party. You want people to show up, have fun, and enjoy themselves. But before you open the doors, you probably want to know who's coming, who invited them, which rooms they're allowed into, and who's keeping an eye on things. Now imagine some of your guests can invite other guests, hand out keys, and make decisions on your behalf, all without asking you first. That's increasingly what we're doing with AI agents inside the enterprise. So the question isn't whether we should throw the party. The party is already happening. The question is whether we're prepared to host it safely.