Skip to content
CISO Spotlights

Career profile

Sean Bruton

Chief Information Security Officer, Illumia

Status
Current role, per sources checked 3 September 2026
Appointed
September 2026
Published

By the CISO Spotlights Desk. Compiled from public records. Each statement below is drawn from the sources listed at the end.

Sean Bruton is the Chief Information Security Officer of Illumia, appointed in September 2026. In the role he leads Illumia's information security strategy and oversees security and compliance programs across the business, working closely with teams across technology, product, legal, compliance, IT and cloud operations. He reports to Taran Lent, Chief Technology Officer at Illumia.

Career path

Earlier in his career, Bruton served as Senior Director of Security at NeoSpire. He also built and delivered managed security and compliance services at Hosting.com. In 2016 he founded compliance posture assessment company Complyify, leading it for seven years until its acquisition by Zyston. At Zyston, a managed security services provider, he went on to serve as Chief Technology Officer, where he re-architected the company's security operations around AI. From that role he moved to Illumia as CISO.

Remit and public statements

At Illumia, a business unit of Roper Technologies that provides payments, access, foodservice and credentialing systems to higher education, healthcare and senior living institutions, Bruton is responsible for information security strategy and compliance oversight. Illumia's announcement described him as bringing more than 25 years of experience building and leading cybersecurity programs, including compliance technology, managed security services, and the use of AI to modernize security operations. On taking the role, Bruton said, "Strong security should give teams and customers confidence to move faster," framing his approach around building security into products and decisions early and making compliance requirements easier for customers to navigate.

Published work

Earlier in his career, while at NeoSpire, Bruton authored The ABCs on PCI, published August 23, 2011, examining the financial and reputational costs of security breaches and citing Ponemon Institute research on customer attrition following data breaches.

Sources

  1. 1.
    EDUCAUSEeducause.edu · undated page · checked 26 October 2026 · tier A
  2. 2.
    The Wall Street Journalwsj.com · published 3 September 2026 · checked 26 October 2026 · tier B
  3. 3.
    securitymagazine.comsecuritymagazine.com · undated page · checked 26 October 2026 · tier B
  4. 4.
    CSO Onlinecsoonline.com · undated page · checked 26 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.