Hearst Deputy CISO on His Approach to Leadership, Security and Adversarial Mindset

Andres Andreu, deputy chief information security officer at global media company Hearst, brings a unique perspective to cybersecurity leadership. His background in federal law enforcement and his detail-oriented approach to data handling have shaped his career in cybersecurity. Despite the challenges of enforcing uniform security standards across diverse entities, he remains focused on the critical role human factors play in both protecting individuals and managing insider threats.

See Also: The Hidden Threat: Understanding Insider Risks

Andreu's extensive experience in offensive operations gives him what he calls "healthy paranoia," helping him anticipate risks from all angles.

"Having spent a number of years in the offensive space, you hear people talk about getting into the adversarial mindset, but they've never broken into anything. It's kind of superficial," he said. "If you've ever had to break into an apartment to place a wiretap - physically break in - there's a reality to it. It molds you as a person."

Creativity is central to Andreu's approach. Whether breaking down complex threats or writing his second book, "The CISO Playbook," he sees cybersecurity as another form of creation.

In this video interview with Information Security Media Group at the Financial Services Cybersecurity Summit, conducted as part of the CyberEdBoard's ongoing Profiles in Leadership series, Andreu also discussed:

Andreu is responsible for reviewing and optimizing software development processes to ensure consistent and predictable delivery. His expertise spans information security management and cyber and web application security. With nearly 30 years of experience, Andreu previously served in the U.S. Drug Enforcement Administration, where he perfected his skills in law enforcement and intelligence. He is a member of the CyberEdBoard.