Career profile
John Denning
Chief Information Security Officer, FS-ISAC
- Current role, per sources checked 23 March 2026
- 1 January 2024
John Denning is the Chief Information Security Officer of FS-ISAC, appointed effective January 1, 2024.
Career path
Denning spent eleven years as a congressional staff member focused on cybersecurity, telecommunications and critical infrastructure protection.
He then served as Director of External Affairs for the US Department of Homeland Security's Office of Cybersecurity and Communication.
He joined Bank of America, where he spent 13 years, including 11 years within Global Information Security.
At the bank he was Senior Vice President of Cyber Crime Prevention, Identity and Access Management, and led the Cybersecurity Threat Intelligence team.
He also held executive leadership roles in Global Risk Management, Cyber Crimes Advisory Services, Global Access Management Ops, and Cyber Readiness and Resiliency Operations.
His most recent role at Bank of America was Global Compliance and Operational Risk Executive, responsible for second line of defense oversight of Global Markets Technology, Global Markets Operational Technology and Global Banking Technology, with a focus on risk identification and reduction.
FS-ISAC named Denning CISO in December 2023, with the appointment effective January 1, 2024.
Remit at FS-ISAC
Denning owns the organization's internal cybersecurity and risk management functions.
He also works across the financial sector to curate and disseminate baseline cybersecurity practices, including bringing lessons from the most mature cyber defense programs to the wider sector.
Public talks and commentary
Denning spoke on a panel examining AI's effect on threat intelligence sharing at the RSAC 2026 Conference in San Francisco, alongside leaders from the Retail & Hospitality ISAC and Health-ISAC.
"Trust underpins everything, but the thing that makes it valuable is converting trust into action," Denning said, adding that FS-ISAC focuses on giving members implementable advice.
In September 2025, he spoke at an RSAC virtual seminar session titled Transformational Security Leadership: Strategic Planning, AI Architecture, and More, addressing the value of intelligence sharing, trusted communication practices, and strategies for current and emerging threats.
Denning has also discussed post-incident information sharing with Cybersecurity Dive, saying that understanding threat information and its criticality helps companies defend their networks.
He added that organizations able to share information quickly through an established and trusted distribution channel can do significant good for the sector.
He said volume and quality of shared information both have value, but that he would rather receive more information than less.
