Career profile
James Scobey
Chief Information Security Officer, Keeper Security, Inc.
- Current role, per sources checked 19 October 2026
- October 2024
James Scobey is the Chief Information Security Officer of Keeper Security, Inc., appointed in October 2024 as the company's first CISO.
Career path
Scobey began his career in leadership and engineering roles at SMS Data Products Group, By Light Professional IT Services, USmax Corporation, Federal Data Systems and S2i2.
He later worked at the federally funded research and development organization MITRE as a Principal Systems Engineer and Cyber Performance Systems Engineer.
Through S2i2, Scobey co-founded SigmaCyber, where he served as President and Chief Executive Officer.
At the U.S. Securities and Exchange Commission, he held the roles of Chief Technology Officer and Assistant Director of Cybersecurity Operations before becoming the agency's Chief Information Security Officer in August 2022.
As SEC CISO, Scobey oversaw the implementation of zero-trust principles and drove the agency's shift to an identity and data-centric security model.
He departed the SEC in October 2024 to join Keeper Security as its first Chief Information Security Officer.
Scobey holds a Master of Engineering in Cybersecurity Policy & Compliance from George Washington University, as well as an MBA and a Bachelor of Science in Computer Science from the University of Maryland Global Campus.
Remit at Keeper Security
As Keeper's first CISO, Scobey leads the company's global cybersecurity strategy, with responsibility for protecting company data and reinforcing defenses against emerging cyber threats.
His arrival coincided with Keeper's expansion into the federal market, including efforts toward FedRAMP High and IL certifications.
Published commentary
Writing for SecurityWeek's Cyber Insights 2025: Identities, Scobey addressed the growing sophistication of identity-based attacks. "Phishing attacks are becoming increasingly more targeted, using highly personalized tactics driven by social engineering and AI-enhanced data scraping," said James Scobey, CISO at Keeper Security. He also warned that generative AI would play a dual role in identity threats during 2025, enabling attackers to create convincing deepfakes while also offering defenders new tools for anomaly detection and behavioral biometrics. Separately, Scobey noted that machine identities remain a weak point for attackers to exploit, since multi-factor authentication for machine identities still relies largely on static factors such as certificates rather than the more dynamic methods used for human identities. Scobey has also authored blog posts for Keeper Security on topics including zero-trust architecture for industrial control systems, enterprise password management for federal agencies, and risks associated with legacy privileged access management systems.
