Career profile
Paul Calatayud
Chief Information Security Officer and Chief Strategy Officer, Archipelo
- Current role, per sources checked 18 October 2026
- 17 March 2025
Paul Calatayud is the Chief Information Security Officer and Chief Strategy Officer of Archipelo, a provider of Developer Security Posture Management solutions, appointed in March 2025.
Career path
Calatayud began his cybersecurity career in the Army, serving as an information security cryptographer.
He later became Director of Information Security at United Health Group, a Fortune 15 company, where he managed a department of 50 security professionals supporting more than 150,000 employees.
He went on to serve as Chief Information Security Officer at Surescripts, heading the company's Information Security, Audit and Enterprise Risk Management departments.
Calatayud also held security, privacy and risk roles at SANS, FireMon and Code42.
He spent more than four years at Palo Alto Networks, serving as Chief Security Officer for the Americas and later as Global Chief Security Officer.
In January 2022, Calatayud was named Chief Information Security Officer at Aqua Security, a cloud native security provider, where he worked to scale the security program and advance certifications including FedRAMP.
He joined Archipelo as Chief Information Security Officer and Chief Strategy Officer in March 2025, having previously served as Global CSO at Palo Alto Networks and CISO at Aqua Security.
Public talks and published work
Speaking at the Minnesota Virtual Digital Government Summit in June 2021 while at Palo Alto Networks, Calatayud discussed how machine learning could help agencies apply zero-trust verification to remote and hybrid workforces. He said automation could also widen agencies' hiring pools by reshaping job requirements: "If I can bring in AI automation and reduce the amount of human intervention and interpretation, it means I can probably change the job classification just enough that we can bring in people from outside the cybersecurity industry," Calatayud said. While at Palo Alto Networks, Calatayud also wrote for the company's blog, including reviews for the Cybersecurity Canon such as A Data-Driven Computer Security Defense, Disrupt or Die: What the World Needs to Learn from Silicon Valley to Survive the Digital Era, and World Class Risk Management. He also wrote on healthcare cloud adoption and security, and on Internet of Things predictions for 2018.
Credentials
Calatayud holds a B.S. in information technology, a master's in information security and a Ph.D. in leadership, and carries CISSP, CISA, CISM and GCIH certifications.
