Roland Palmer

Roland Palmer is the Chief Information Security Officer (CISO) and Vice President of Security at JumpCloud, appointed in March 2026.

Career path

Before joining JumpCloud, Palmer spent eight years as VP of Security and Compliance at Sumo Logic.

At Sumo Logic he led global security operations and worked to integrate compliance directly into engineering workflows, building the company's Global Security Operations Center from the ground up and achieving FedRAMP, ISO 27001, and HIPAA certifications.

An ISSA International speaker profile describes Palmer as having led Sumo Logic's Information Security division, with a focus on cybersecurity incident management, organizational leadership, and developing security protocols to support business continuity and regulatory compliance.

JumpCloud named Palmer CISO and Vice President of Security on March 2, 2026, to lead the company's global security strategy and protect its global employee and customer base.

Palmer said he had admired JumpCloud's approach to identity and device trust challenges before joining the company.

Remit at JumpCloud

In his current role, Palmer oversees JumpCloud's global security strategy, with the aim of keeping the company's unified platform a resilient foundation as it scales.

JumpCloud's leadership page describes him as comfortable both briefing the Board of Directors and working directly in the security operations center, and as someone who treats security as a factor that can accelerate growth and build customer trust rather than as an obstacle.

Public commentary on security leadership

Speaking with CSO Online, Palmer said he has not yet mastered business risk and instead partners with colleagues in legal, finance, marketing, and the COO to understand the organization's risk appetite. "We form a great team to understand risk and the organization’s risk appetite," he said.

He also told CSO Online that he regularly asks himself what issue his security program has addressed that would otherwise have hindered the business, and said the question helps him demonstrate security's return on investment and communicate that value internally.

On identity and access management, Palmer said knowing how many human and nonhuman identities operate within an organization, and whether their access is properly restricted, has moved from being an everyday question to an hourly one given the growth of AI use, shadow AI, and AI agents.

He described testing his own program by assessing whether he would be comfortable sharing real-time patch management and vulnerability management statistics with customers, treating repeated negative answers within a quarter as a signal to refocus his team's efforts.