##### Chief Information Security Officer # Phil Ross * [](#) * [](https://www.linkedin.com/in/phil-ross-ab3a825/) * [](#) * [](#) * [](#) * [](#) Phil Ross is the Chief Information Security Officer (CISO) at UpGuard, leveraging decades of experience in information security and enterprise architecture. He is responsible for driving enterprise-wide security initiatives and governance frameworks. While Phil’s technology career began in the 1990s in network engineering, he has a multidisciplinary background that includes scientific research and animatronic engineering, allowing him to apply a broader perspective to challenges in information technology and cybersecurity. Outside of work, Phil and his family are avid sailors who spend as much time as possible on the water. They own a cruising catamaran named *Muse*, which they lived on for a year while exploring the South Pacific. **Fun fact: **Phil once lived on a traditional narrowboat on England's Grand Union Canal while working as an animatronic engineer for the Harry Potter films. ### Expertise Phil’s expertise is centered on leading enterprise security strategy across IT and OT - Operational Technology. As UpGuard’s CISO,  he is accountable for enterprise IT in addition to the organization's overall security posture, encompassing compliance and vendor-related security risks. ### Experience Prior to his current role as UpGuard’s CISO, Phil worked for eight years in one of Australia’s largest energy utilities.  During this period as an enterprise architect, he held portfolios across network and communications, contact center, cloud infrastructure, and cybersecurity before being appointed Head of Security Strategy and Architecture. Prior to that, he worked extensively as a cybersecurity architect in the banking, finance, and insurance sectors. ### Certifications * CISSP - issued 2007 * SABSA SCP - Chartered Security Architect - issued 2011 * CISM - issued 2012 * Forrester Zero Trust Strategist - issued November 2020 ### Education Phil attended Queen Mary College, University of London, completing a BSc with Honors, remaining there for an additional three years conducting research in electro-organic chemistry. ## Latest from Phil Ross Learn more about the latest issues in cybersecurity. [A CISO’s Guide to the DoW's New CSRMC Framework](/blog/a-cisos-guide-to-the-new-csrmc-framework) #### [A CISO’s Guide to the DoW's New CSRMC Framework](/blog/a-cisos-guide-to-the-new-csrmc-framework) The new CSRMC framework makes static security obsolete. This guide offers actionable steps to modernize your SOC with continuous assurance. [](/team/phil-ross) [Phil Ross](#) September 1, 2026 [Shai-Hulud's True Lesson for CISOs: A Crisis of Communication](/blog/shai-hulud-lesson-for-cisos) #### [Shai-Hulud's True Lesson for CISOs: A Crisis of Communication](/blog/shai-hulud-lesson-for-cisos) Shai-Hulud was driven by a communication crisis between security and engineering. Get a CISO's perspective on how to finally bridge this gap. [](/team/phil-ross) [Phil Ross](#) September 2, 2026 [What Is A CISO? Their Role and Responsibilities Clearly Explained](/blog/what-is-a-ciso) #### [What Is A CISO? Their Role and Responsibilities Clearly Explained](/blog/what-is-a-ciso) Learn the role and responsibilities of a CISO and align your cybersecurity progression pathway against these requirements. [](/team/phil-ross) [Phil Ross](#) December 10, 2025 ## Cybersecurity & Risk Management Blog Learn more about the latest issues in cybersecurity. #### [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure. [](/team/lance-turner) [Lance Turner](#) October 14, 2026 #### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) October 18, 2026 #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](#) October 11, 2026 #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 29, 2026 #### [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) Scan your domain to see just how exposed you are on the Dark Web. [](/team/lance-turner) [Lance Turner](#) October 11, 2026 [All blog posts](/blog) ## Cybersecurity & Risk Management Library The ultimate guide to attack surface and third-party risk management – actionable advice for security teams, managers, and executives. ### [Breaches](/breaches) Security research and global news about data breaches. Explore resources ### [Third-party risk management](/category/third-party-risk-management) Articles, news, and research on third-party risk management. Explore resources ### [Attack Surface Management](/category/attack-surface-management) Articles, news, and research on attack surface management. Explore resources ### [Cybersecurity](/category/cybersecurity) Articles, news, and research on cybersecurity. Explore resources Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)