Paul de Graaff leads the Security Advisory Practice for Cirrus Cyber to assist clients with addressing risk to their business through a well-defined and executed cybersecurity strategy, supported by security operations, and tightly aligned with their compliance program.  

Blending his background in security and management consulting with a deep technical understanding of various security solutions, Paul helps clients solve complex challenges with their cybersecurity and compliance programs.

Prior to joining Cirrus Cyber, Paul served as the Global Information Security Officer for AIG and held the position of Corporate Information Security Officer (CISO) at the Depository Trust & Clearing Corporation. Past experience also includes both leadership and consulting positions at SecZetta, SailPoint, WW (formerly Weight Watchers), ING, ABN/AMRO, IBM, UNISYS, and Vanguard Integrity Professionals.

Outside of work, Paul serves on advisory boards for cybersecurity startups, mobile payment, and crowdsourcing. Additionally, Paul is a published author, regular speaker for security and compliance topics, and awarded the Top 100 IT Leadership Award by Computerworld Magazine.