Richard Seiersen

Richard Seiersen is a cybersecurity executive, author, and industry expert with more than two decades of experience in security, risk management, and data science. Seiersen has held chief information security officer roles in healthcare, insurance, and cloud-native enterprises, including positions at GE Healthcare, Twilio, and LendingClub. He also managed security operations across the United States for Kaiser Permanente, a leading health maintenance provider. Early in his career, Seiersen contributed to vulnerability management products at companies such as Qualys and Tripwire, establishing a foundation in cybersecurity product development and risk assessment.

Seiersen co-founded Soluble, a company focused on integrating security into developer tool chains using open source components and third-party tools. Soluble was later acquired by Lacework.com. After the acquisition, Seiersen served as chief risk officer at Resilience Insurance, where he specialized in cyber risk quantification, loss forecasting, security control prioritization, and aligning insurance policies with enterprise cybersecurity needs.

As an author, Seiersen has influenced the cybersecurity industry’s approach to measurement and risk. He co-authored "How to Measure Anything in Cybersecurity Risk" and authored "The Metrics Manifesto: Confronting Security With Data." "How to Measure Anything in Cybersecurity Risk" is included in the curriculum for the Department of Defense CISO program at Carnegie Mellon University, the Society of Actuaries exam preparation, and various university programs. "The Metrics Manifesto" addresses applied measurement, predictive analytics, and R programming for security metrics.

Seiersen is the chief risk technology officer at Qualys, focusing on cybersecurity risk management and supporting security leaders in aligning security practices with business objectives. In this capacity, he introduced the concept of a Risk Operations Center, which emphasizes managing business value and reducing risk at scale. Seiersen is also a member of IANS Research’s CISO Faculty and has consulted with more than 250 Fortune-level organizations on metrics, strategy, and cyber risk quantification. He is a frequent speaker at security and risk management events, including the RSA Conference, where he has presented on risk-first operating models and the Risk Operations Center. Seiersen’s work emphasizes the importance of quantitative, business-aligned communication of risk for security leaders and executive boards.