Andrew Rose

Andrew Rose is the Chief Security Officer of SoSafe, appointed in February 2024.

Career path

Rose built an early record in the legal sector, holding CISO roles for more than a decade across Clifford Chance LLP and Allen & Overy LLP.
He also worked at Forrester Research as a Principal Analyst covering the awareness and culture change space, where he developed models later used across the industry.
In 2015 he was awarded UK Awareness Campaign of the Year at the UK Cyber Security Awards after implementing those models. He then oversaw the cybersecurity of UK airspace traffic at NATS, contributing to the design of the next-generation air traffic control system.
Rose moved to Vocalink, a Mastercard company, as Chief Security Officer, managing the secure processing of trillions of pounds in transfers.
He was named European CISO of the Year 2018 while leading security transformations that took three organizations to ISO27001 certification.
Rose then served as Resident CISO, EMEA at Proofpoint, focusing on driving the company's people-centric security vision among its customer base, cultivating a community of CISOs and representing the brand externally. In November 2020 he was recognized at the CSO30 Awards for his external board and mentoring work, his involvement with CyBOK, and his security transformation efforts. SoSafe announced his appointment as Chief Security Officer on February 7, 2024.

Remit and public commentary

At SoSafe, Rose focuses on driving the company's vision to strengthen digital self-defense worldwide and help customers transform their security culture, drawing on experience managing risk across complex enterprises. On joining, he said the move was driven by the industry's imbalance between technology spending and the human element of risk: "There is a huge imbalance in focus as the biggest part of security budgets are dedicated to security technology while according to the World Economic Forum, 95% of cyber threats have a human element involved." He has since appeared on SoSafe's Human Firewall Podcast discussing how to build a security culture and manage human risk, in an episode exploring the evolving role of the CISO.

Speaking and published work

Rose has delivered keynote appearances at InfoSec Europe and RSAC Conference events in both the US and Europe, alongside speeches, webinars and panel sessions at other conferences and private events. He has been quoted and published in outlets including the Wall Street Journal, the Financial Times, the Washington Post, The Telegraph, Metro, the Guardian, Retail Week, CNBC TV, Wired, El Pais and the Times. He has also appeared on panel discussions covering data loss prevention and business email compromise response.