Virtual CISO

The security of your company is only as good as the CISO leading its protection.

The LEO Cyber Security Virtual Chief Information Security Officer (vCISO) service is designed for organizations that need someone to take responsibility for the creation, growth, and measurement of the organization’s information security program. With our vCISO service, you get a retained board-level resource who can ‘virtually sit inside your company’ and manage your security strategy, budget, and success of your risks and regulatory programs.

LEO only hires seasoned CISOs with experience building and managing information security programs across financial services, energy, software, and other industry verticals. This service can range in duration from being a few hours per month to an interim full-time CISO.

An expert, independent view of your risk, compliance, and security frameworks.

Coordination of security breach and incident investigations and remedial measures put in place to prevent future occurrences.

Assessment and development of the information security skills of your wider team.

A senior security management professional with a wealth of industry experience.

An elastic offering, LEO can scale the service up or down according to your changing information security requirements over time.

Access to your own virtual Cyber Security team to help address the needs of your security program.


In cybersecurity, experience and passion for protecting information are crucial. Rod Holmes, one of our senior Chief Information Security Officers, has both. For nearly 30 years, Rod has worked in some form of cybersecurity. He started his career at Johnson Space Center, and he rose through the ranks to become a leading security leader at Marathon Oil. Rod has designed and managed many corporate information security programs, including multiple initiatives to integrate operational technology security in the industrial control systems (ICS) world with corporate IT security. Certifications? He has those, too. Rod is a Certified Information Systems Security Professional (CISSP) and has advanced degrees from Texas A&M University. We know our information is in good hands with Rod Holmes on our team.


With over 18 years of professional experience, Mike has held almost every job in IT and Security from Java Developer to Fortune 500 CISO and everything in between. Mike can be technical at all levels and then translate those ideas in terms the business can understand and vice versa. Mike specializes in greenfield and post-breach environments using his skills to bridge the gaps between IT and the Business to take organizations from reactive security postures and transform them into proactive security programs. Mike has been successful with numerous organizations to develop security programs, conduct project management for security strategies, design/implement secure IT systems, develop incident response programs, and evaluate organizations existing enterprise security postures and overall maturity.


While the word “expert” is not one we at LEO use lightly, our Chief Information Security Officer, Heath Renfrow, is one. Mr. Renfrow has 19 years of global cybersecurity professional experience and is considered one of the leading cyber experts in the world. He has served as the CISO for multiple global organizations, most recently for United States Army Medicine where he was awarded the 2017 Global CISO of the year by EC-Council, the largest cyber-training body in the world. Mr. Renfrow holds a Bachelor of Science in Information Technology and a Master of Science in Cyber Studies. He also serves on the following boards: National CyberWatch Center Foundation, Association for Executives in Healthcare Information Security, University of Indiana Cyber Advisory Council, and Cyber Patriot Program Advisory Council. Like we said, Mr. Heath Renfrow is a cyber expert.


Justin Silbert brings a wealth of knowledge and experience from DOD and Civilian world. As CISO of what is now the Walter Reed National Military Medical Center, he managed cyber security as the hospital transitioned into the nation’s most important Joint Military Medical Facility. His expertise focuses on applying sound security practices across a spectrum of systems and environments, from certified medical devices to shared research systems. Through his work, his goal is to improve the health of organizational leaders, by providing a cyber security program that allows them to sleep better and worry less.

LEOs are legends. They accumulate years of experience filled with noteworthy ideas. Take Andrew Hay for example, with 20 years in the field he held important roles in a number of internationally recognized companies – including as the CISO for storage and security vendor DataGravity, Inc. (now a part of HyTrust). He is a Co-Founder of LEO and currently serves as the Chief Technology Officer (CTO). The sparks trailblazers leave grab the attention of major media stories and Andrew has been the lead of most. Featured in periodicals like Forbes, Bloomberg, USA Today and several others.


Glenn Sweeney is a trailblazer of Incident Response and Security Operations, particularly for global organizations. Glenn has over 15 years of experience from thinking on his feet. In which time he achieved several security certifications like CISSP, CHFI, GIAC, and GSEC. No wonder this LEO is one of our founders.


Leader, designer, and accomplished writer. That is Chief Information Security Officer Travis Farral in a nutshell. Travis is an IT security professional at LEO, specializing in threat intelligence, incident response, and industrial control systems security. He has a background in computer and network forensics, architecture, and design, as well as project and program management. Travis has successfully led teams in a variety of management roles, including his time at ExxonMobil as Cybersecurity Intelligence & Strategic Services Supervisor. To top it all off, Travis is a contributing member of various open and closed security communities, keeping him at the forefront of all things cyber.