Career profile
John Bruce
Chief Information Security Officer, Quorum Cyber
- Current role, per sources checked 24 November 2025
- November 2025
John Bruce is the Chief Information Security Officer of Quorum Cyber, appointed in November 2025.
Career path
Before joining Quorum Cyber, Bruce spent 25 years in banking and cyber security services. He held CISO and senior security leadership positions at financial institutions and technology companies. His background includes building security programmes, managing global security operations, and advising boards on cyber security strategy. Quorum Cyber named him CISO as part of a wider senior-leadership expansion that also brought in a chief revenue officer, a chief marketing officer and a vice-president for its Microsoft Partnership.
Remit at Quorum Cyber
In the role, Bruce is responsible for developing and implementing Quorum Cyber's internal security strategy and for ensuring the company maintains its security standards while managing its own risk profile. He works with the executive team to align security initiatives with business objectives and growth plans. A further part of the role involves advising Quorum Cyber's customers, drawing on his industry experience to offer counsel on their security programmes. On joining, Bruce said: "I'm thrilled to join Quorum Cyber at such an exciting time in the company's journey."
Published commentary
In a Quorum Cyber interview titled Unlocking Cyber Security Excellence: Insider Tips from a Leading CISO, Bruce described his approach to balancing compliance with innovation across Quorum Cyber's operations in the UK, the US, Canada and the Middle East. He outlined the use of privacy champions embedded in product teams, compliance-as-code initiatives, risk-based prioritisation and data minimisation to manage regulatory requirements. He also described moving data governance from static annual policy reviews to a modular privacy framework with regional partnerships and automated compliance scanning. For CIOs and IT teams building global privacy roadmaps, he recommended starting with asset management and data discovery, designing for flexibility, investing in automation, and using privacy-enhancing technologies such as encryption and tokenisation. He has also written blog posts titled Alleviating the Pressure: Supporting CISOs to Reduce Stress and Avoid Burn-out and A CISO's Guide to Securing Cyber Security Budget: Speaking the Board's Language.
