The Future of Technology Leadership
The next great technology leaders will not be the best engineers. They will be the best connectors.
The next generation of technology leadership will be less about owning systems and more about connecting decisions. For most of my career, the org chart drew clean lines. Security here, infrastructure there, applications over there, data somewhere else. Those lines are dissolving. AI, cloud, cybersecurity, privacy, compliance, automation, and digital products are now part of one connected fabric, and a leader who can only see one thread of it will keep getting blindsided by the others.
The specialist ceiling is real
Deep expertise still matters. It is just no longer enough to lead. The future belongs to people who are technical enough to earn the room's respect and broad enough to connect what happens in that room to finance, operations, legal, and customers. The pure specialist will always have a job. They will rarely have the top job, because the top job is increasingly about translation across boundaries rather than mastery of one of them.
AI changes the leader's role, not just the tools
A lot of the AI conversation focuses on what the technology can do. The more interesting question for leaders is what it does to their own job. When systems can draft, analyze, and decide at scale, the human leader's value moves up the stack toward judgment, accountability, and the questions a machine cannot answer for you. What are we actually trying to achieve? What are we willing to risk? Who is responsible when this goes wrong? Those questions do not automate, and they are becoming the whole job.
The scarce skill of the next decade is not building the system. It is deciding, out loud and on the record, what the system should be allowed to do.
Risk is now a connected discipline
The old model treated risks as separate. A security risk, a privacy risk, a vendor risk, a model risk. In practice they are entangled. A flaw in a vendor's AI model is simultaneously a security, privacy, compliance, and reputational problem. Leaders who still manage these in silos will keep being surprised by how one failure cascades. The ones who manage risk as a connected system will see the cascade coming. I have written about pieces of this in vendor risk and AI governance.
The human skills stop being optional
As the technical work gets more automated and more connected, the differentiator becomes profoundly human. Can you build trust across teams that do not naturally cooperate? Can you make a hard call and own it? Can you explain a complex risk to a board, a regulator, and a frontline employee, in three different registers, without lying to any of them? These were once called soft skills, as if they were the easy part. They are the hard part, and they are the future of the role.
Where I think this lands
The technology leader of the next decade looks less like an engineer at the top of a tower and more like a translator standing at a crossroads. Comfortable with the machines, fluent with the people, and clear-headed about the decisions that connect them. That is the leader organizations will need, and it is the one I have spent twenty-five years trying to become.
How to Explain Cyber Risk to a Board (Without the Jargon)
If a director leaves your update unsure what to do next, the problem is the presentation, not the director.
Third-Party and Vendor Risk: The Quiet Way Companies Get Breached
Your security is now the average of every vendor you trust, and most companies have no idea what that average is.
The First 90 Days as a New CISO
The instinct in a new security role is to act fast. The better instinct is to understand first.