Skip to content
CISO Spotlights

Career profile

Ryan Davis

Chief Information Security Officer, New Charter Technologies

Status
Current role, per sources checked 4 August 2025
Appointed
4 August 2025
Published

Compiled 15 October 2026 from public records. Each statement below is drawn from the sources listed at the end.

Ryan Davis is the Chief Information Security Officer of New Charter Technologies, appointed in August 2025.

Career path

Davis has more than two decades of experience leading security organizations.

He began his career supporting Department of Defense customers in information assurance roles at MIT Lincoln Laboratory, where he helped develop information assurance strategies for classified national security initiatives.

He went on to serve as Chief Information Security Officer and interim Chief Information Officer at Veracode, where he built the company's internal information security team and led global IT operations, security and threat management, and risk and compliance.

Davis later served as CISO at NS1, an IBM Company, a role under which he appeared on a CISO panel at the FutureCon Boston CyberSecurity Conference in November 2023.

Following IBM's acquisition of NS1, he served as a business unit CISO at IBM, overseeing security across a suite of more than a dozen products.

New Charter Technologies, a portfolio company of Oval Partners, announced Davis as its Chief Information Security Officer in August 2025.

Remit at New Charter

In the role, Davis is focused on evolving New Charter's cybersecurity posture and strategy as threats grow more sophisticated.

He has described a people-first approach to the job, noting that security tools alone are not enough without educating staff and communicating what the security team is doing.

"Security and people have always been the two constants in my career, and the CISO role is where those two intersect," Davis said.

He has said his approach includes an outward-facing security strategy meant to build trust with clients and to support New Charter's adoption of artificial intelligence and other emerging technologies.

Published work and speaking

Davis frequently speaks at industry events about third-party risk and about strengthening information security practices through security policy creation, security education and training, and vulnerability and risk analysis.

In May 2019, while serving as CISO at Veracode, he published the article The Risky Business of Third Party Risk Management with BankInfoSecurity, examining how security programs often overlook risk introduced by third-party software, vendors and contractors.

Sources

  1. 1.
    SecurityWeeksecurityweek.com · undated page · checked 15 October 2026 · tier B
  2. 2.
    New Charternewchartertech.com · published 4 August 2025 · checked 15 October 2026 · tier A
  3. 3.
    events.secureworld.ioevents.secureworld.io · undated page · checked 15 October 2026 · tier B
  4. 4.
    New England Chapterengage.isaca.org · undated page · checked 15 October 2026 · tier B
  5. 5.
    bankinfosecurity.combankinfosecurity.com · undated page · checked 15 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.