Skip to content
CISO Spotlights

Career profile

Christopher Leach

Chief Information Security Officer, Judy Security

Status
Current role, per sources checked 20 October 2026
Appointed
2 January 2024
Published

Compiled 20 October 2026 from public records. Each statement below is drawn from the sources listed at the end.

Christopher Leach is the Chief Information Security Officer of Judy Security, appointed in January 2024.

Career path

Leach's career in cybersecurity spans more than 30 years in risk analysis, operations, strategy, and financial controls, and he has been described as a 30-year cybersecurity veteran.

He began as CISO for Bank One and continued in that role after the bank was acquired by JPMorgan Chase & Co.

He also served as Senior Vice President and Chief Risk Officer at JPMorgan Chase and at First Horizon National Bank, and held the CISO role at ACS, which was later acquired by Xerox.

Leach held senior positions at Hewlett Packard and Hewlett Packard Enterprise, where he worked with CISOs, CTOs, and CIOs on security strategies and emerging threats.

Across his career he has served as CISO for several Fortune companies, including JPMorgan Chase & Co., ACS, and HP.

In January 2024, Judy Security, a provider of cybersecurity solutions for small and medium-sized businesses, named Leach its Chief Information Security Officer.

The appointment was listed on Judy Security's news page alongside other company announcements from the same period, including a partnership with Strike Graph and the company's listing on the CRN 2023 Stellar Startups list.

Role and public statements

At Judy Security, Leach is responsible for protecting the company's team members and customers and for supporting product innovation.

He has been described as a global thought leader in cybersecurity who maintains relationships with other security professionals, providers, and vendors.

On joining the company, Leach said: "In joining Judy Security, I am focused on leveraging our strong foundation to achieve leadership in the cybersecurity domain,"

He added that the role gives him the opportunity to help small and medium-sized businesses keep pace in the digital environment and protect the economic functions they support.

Sources

  1. 1.
    judysecurity.aijudysecurity.ai · undated page · checked 20 October 2026 · tier A
  2. 2.
    judysecurity.aijudysecurity.ai · undated page · checked 20 October 2026 · tier A
  3. 3.
    CSO Onlinecsoonline.com · published 14 June 2024 · checked 20 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.