Devon Bryan

Devon Bryan is the Global Chief Security Officer of Booking Holdings, appointed in January 2025.

Career path

Bryan's information security career began in the United States Air Force, where he served for 11 years as a Captain and lead network security engineer protecting the critical networks of the Air Force's Air Combat Command.

He went on to serve as Deputy Chief Information Security Officer for the Internal Revenue Service, after directing the agency's FISMA-compliant information security program and leading its incident response team.

While in that role, in 2010 Bryan was named co-chair of the (ISC)2 U.S. Government Advisory Board for Cyber Security. At the time he said he was "looking forward to serving in this new capacity and bringing my ‘view from the trenches’ to this respected body of cybersecurity leaders and educators,"

Bryan joined ADP in 2011 as Global Chief Information Security Officer, leading information security strategy across the payroll and human resources provider's global operations. In 2014 he co-founded the International Consortium of Minority Cybersecurity Professionals, later known as Cyversity, a non-profit supporting underrepresented groups in cybersecurity through scholarships, mentoring and job placement.

He became Executive Vice President and CISO for the Federal Reserve System's National IT Organization in 2016, overseeing the Fed's information security policies, architecture and incident response team.

Bryan later served as Managing Director and CISO at MUFG Union Bank (Americas), establishing the bank's information security strategy and program, and also held the CISO role at KPMG North Americas. He joined Carnival Corporation & plc as Global CISO in November 2021, leading global information security strategy across the cruise operator's brands. In January 2025 he moved to Booking Holdings as SVP and Global Chief Security Officer.

Remit and public commentary

At Booking Holdings, Bryan is responsible for cybersecurity, physical security and fraud prevention across the company's brands, including Booking.com, Rentalcars.com, Priceline, Agoda, Kayak and OpenTable. He has described his career as moving through financial services, consulting, critical infrastructure and hospitality before reaching global travel technology, which he says gave him exposure to differing risk environments and operating models. He has told Help Net Security that the travel industry's interconnected ecosystem of identity, payments, loyalty programs and third-party integrations creates compounding risk, and that artificial intelligence has expanded threat modeling to include prompt injection, model access and shadow AI adoption.

Talks and recognition

Bryan has presented at ISC2 events, including a December 2024 talk titled Show Me What You Got: A CISO's Approach to Skills-Based Hiring. He also authored commentary on Challenges with Real-time Correlation Hybrid Cloud and Legacy Environments for GovInfoSecurity in 2019. He was inducted into the CSO Hall of Fame in 2023 and named to CISO's Connect's Top 100 CISOs list in 2021 and 2022.