James Sipe

As of February 2026, James Sipe is the Executive Deputy Chief Information Officer of the Commonwealth of Pennsylvania. In that role he is responsible for planning, implementing, and overseeing enterprise security, network, infrastructure, and related technology services across the Commonwealth's IT environments.

Career path

Sipe joined the Commonwealth as Chief Information Security Officer, starting November 27, 2023. As CISO, he was responsible for the Commonwealth's enterprise-wide cybersecurity programs, including governance, auditing, monitoring and compliance, risk management, data privacy, vulnerability and threat management, incident management, forensic investigations, security awareness, identity and access management, and agency assistance. Before joining state government, he led an international team at Amazon Web Services that provided IT security and technical guidance to the company's 25 largest global customers. Prior to AWS, he was an IT security executive for MessageBird, a digital communications and marketing company serving more than 29,000 customers worldwide, including Google, Facebook, and Uber. Earlier in his career he led cybersecurity and compliance for global firms in hospitality and entertainment, accounting, management consulting, media and advertising, weather and environmental monitoring, modular space and storage, building technology, and engineered materials, including Pennsylvania-headquartered or Pennsylvania-office employers Hershey Entertainment and Resorts Company, Glatfelter, and Johnson Controls. He earned a Bachelor of Science in English Language and Literature/Letters from Millersville University. In an interim capacity ahead of his permanent appointment, Sipe served as acting executive deputy secretary for information technology for the Commonwealth. He was appointed Executive Deputy Chief Information Officer in February 2026.

Public remarks and briefings

On taking the CISO post, Sipe said, "I am excited to bring my 20-plus years of experience leading, advising, and working on cybersecurity and compliance for some of the world's largest companies to my new role as CISO for the Commonwealth." As CISO, he presented on cyber basics, the eight domains of security, and basic cyber hygiene to Pennsylvania's 9-1-1 Advisory Board. He also joined a panel of state chief information security officers from California, West Virginia, and Maryland on StateScoop's Priorities podcast to discuss strategies for managing generative artificial intelligence in government.

Remit as CISO

As the Commonwealth's top cybersecurity official, Sipe oversaw the team protecting and defending Pennsylvania's IT systems and data from cyberattacks, and maintained cybersecurity strategy and standards for agencies under the Governor's jurisdiction. His office also worked with local governments on shared cybersecurity services such as security awareness training, anti-phishing exercises, vulnerability testing, and network intrusion monitoring, coordinating with the Governor's Office of Homeland Security and the Pennsylvania Emergency Management Agency under the State and Local Government Cybersecurity Grant Program.