Skip to content
CISO Spotlights

Career profile

Karl Mattson

Chief Information Security Officer, Endor Labs

Status
Current role, per sources checked 25 August 2025
Appointed
24 September 2024
Published

Compiled 8 October 2026 from public records. Each statement below is drawn from the sources listed at the end.

Karl Mattson is the Chief Information Security Officer of Endor Labs, appointed in September 2024.
He is the company's first CISO, joining the open source software security provider to help secure its own systems and the software supply chains of its customers.

Career path

Mattson completed eight years of active duty in the US Army, including service as a Noncommissioned Officer and intelligence analyst.
He holds a bachelor of business administration from St. Mary's University of San Antonio, an MBA from Auburn University, and a master of science in computer and information systems from Boston University.
He later served as senior vice president of IT Risk Management at PNC. He went on to become CISO of City National Bank in Los Angeles, where he led information security, business continuity, vendor risk management and IT risk programs.
He also served as CISO at PennyMac Financial Services.
Before joining Endor Labs, Mattson was CISO at Noname Security, an application programming interface and application security company later acquired by Akamai.
Endor Labs named him its first Chief Information Security Officer in September 2024.

Industry involvement and credentials

Mattson has served as president of the LA Cyber Lab and as Financial Services Sector Chief for InfraGard, the public-private partnership between US businesses and the FBI.
He has also been a member of the FS-ISAC Mortgage Risk Council and has held an adjunct faculty position at the University of Minnesota's Technological Leadership Institute for more than ten years.
He is a graduate of the FBI CISO Academy and holds the CISSP certification.

Published commentary

Mattson wrote a commentary for Federal News Network describing how his military service shaped the way he leads a security team. On joining Endor Labs, he said, "I've always been drawn to companies that are truly able to look ahead even as they deal with the problems of the present,"

Sources

  1. 1.
    businesswire.combusinesswire.com · published 24 September 2024 · checked 8 October 2026 · tier A
  2. 2.
    endorlabs.comendorlabs.com · published 25 August 2025 · checked 8 October 2026 · tier A
  3. 3.
    Dark Readingdarkreading.com · undated page · checked 8 October 2026 · tier B
  4. 4.
    federalnewsnetwork.comfederalnewsnetwork.com · published 7 March 2023 · checked 8 October 2026 · tier B
  5. 5.
    Carnegie Mellon University's Heinz Collegeheinz.cmu.edu · undated page · checked 8 October 2026 · tier A
  6. 6.
    FinTech Futuresfintechfutures.com · published 30 September 2024 · checked 8 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.