Skip to content
CISO Spotlights

Career profile

Larry Jarvis

SVP, Chief Information Security Officer, Iron Mountain

Status
Current role, per sources checked 2 November 2026
Appointed
Not stated in the sources
Published

By the CISO Spotlights Desk. Compiled from public records. Each statement below is drawn from the sources listed at the end.

Larry Jarvis is the SVP and Chief Information Security Officer of Iron Mountain.

Career path

By July 2023, Jarvis held the title of SVP, CISO at Iron Mountain, and shared a three-pronged approach to the role in an article for Security Intelligence. He also stressed the need for security leaders to keep re-evaluating their security awareness training so the content stays engaging and relevant across all levels of employees. By January 2025, Jarvis said his role had expanded significantly in recent years, reflecting the growing complexity of security work, and now spanned risk management, business resiliency, and compliance. He said cybersecurity had moved beyond technical IT concerns to become a core business priority.

Remit: risk, resilience and operational technology

Jarvis has said his responsibilities now go beyond protecting digital assets to aligning security strategy with wider business objectives, driven by more sophisticated cyber threats, regulatory demands, and the need to protect customer trust. He has pointed to the rapid adoption of generative AI as a new source of security challenges for the business. Operational technology has become a particular focus for him, since integrating physical and digital security is essential in a hybrid environment, and he has described business continuity planning as important to protecting operations against disruption from cyberattacks or other threats. On Iron Mountain's own resources page about risk management and business resilience, Jarvis is listed as SVP and Chief Information Security Officer. There, he said, "By building resilience against potential future threats rather than merely responding to familiar ones, organizations are capable of adapting to unforeseen risks and seizing emergent opportunities," framing resilience as a matter of anticipating risk rather than only reacting to it.

Published commentary

Jarvis has written for Security Intelligence on how the CISO role is evolving. He has also authored an Iron Mountain opinion piece titled The data-first approach: My 2026 cybersecurity predictions, in which he writes that the industry no longer debates whether an attack will happen, only when.

Sources

  1. 1.
    ironmountain.comironmountain.com · undated page · checked 2 November 2026 · tier A
  2. 2.
    ironmountain.comironmountain.com · published 3 July 2023 · checked 2 November 2026 · tier A
  3. 3.
    CSO Onlinecsoonline.com · published 13 January 2025 · checked 2 November 2026 · tier B
  4. 4.
    ironmountain.comironmountain.com · undated page · checked 2 November 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.