Career profile
Diana Kelley
Chief Information Security Officer (CISO), Noma Security
- Current role, per sources checked 11 August 2025
- 4 August 2025
Diana Kelley is the Chief Information Security Officer (CISO) of Noma Security, appointed in August 2025.
Career path
Kelley's earlier roles included a position as a Manager at KPMG and a Vice President post at Burton Group, which later became Gartner.
She was also CTO and co-founder of SecurityCurve and served as Chief vCISO at SaltCybersecurity.
She went on to hold senior roles as General Manager at Symantec, Global Executive Security Advisor at IBM Security, and Cybersecurity Field CTO at Microsoft.
Before joining Noma Security, she served as CISO at Protect AI.
Noma Security announced her appointment as CISO, alongside Mavi Etzyon-Grizer as Vice President of Customer Success, on August 4, 2025.
In the announcement, Noma Security CEO and co-founder Niv Braun described the appointments as part of building the company's executive team as it scaled to meet enterprise AI security demand.
At Noma Security, Kelley's responsibilities include serving as a trusted advisor to customers and leading strategic programs supporting continuous innovation in AI security.
Boards, honors and published work
Kelley serves on multiple advisory boards, including WiCyS, The Executive Women's Forum (EWF), InfoSec World, and Cyber Future Foundation.
She is a 2023 Global Cyber Security Hall of Fame inductee and was named one of AuditBoard's Top 25 Resilient CISOs in 2024.
She was EWF's 2020 Executive of the Year and has chaired the EWF Conference since 2021.
Kelley has co-authored the book Practical Cybersecurity Architecture and has lectured in Boston College's Masters program in cybersecurity.
Her speaking engagements have included the talk AI Trust & Security: What Executives, Boards and Their Advisors Should Know.
Commentary on AI security risk
Discussing the shift toward integrated AI platforms, Kelley has said security needs to be built into how AI systems are constructed and run rather than added after a model goes live. She has also described the risk of shared infrastructure across AI systems, noting that a flaw in common dependencies can widen the effect of a single security issue across business functions. On joining Noma Security, she said, "AI is rewriting the rules of enterprise technology and with that comes a wave of new, complex security risks," said Kelley.
