Overview
Brenan Duffy serves as Chief Information Security Officer at ACLU [1][3]. Duffy is a cybersecurity executive with 17+ years of experience leading security programs for critical infrastructure, Fortune 100 companies, private equity portfolios, and non-profits [2]. Prior roles include Executive Director of Offensive Security at Boston Consulting Group [4], Chief Audit Executive for IT & Cyber Assurance at GE [5], Head of Information Security at Dorilton [6], and Sr. Director of Cyber Security Assurance at Comcast [7]. Duffy also taught adjunct courses in cybersecurity at Temple University from 2017 to 2020 [7] and at Wilmington University from 2012 to 2017 [9]. Duffy holds a Master of Science in Computer Information Systems from Boston University [11] and a Bachelor of Science in Computer & Network Security from Wilmington University [12].
Profile introduction
Global cybersecurity executive and CISO with 17+ years leading security for critical infrastructure, Fortune 100 companies, private equity portfolios, and high-profile non-profits. I specialize in taking fragmented, high-risk environments and building mature, intelligence-driven programs that blend offensive insight with resilient operations. Known for materially reducing real-world attack paths and blast radius while giving Boards and executives a clear, grounded view of cyber risk, tradeoffs, and the investments that move the needle.
Career history
- Chief Information Security OfficerSep 2024 to presentACLU
- Executive Director, Offensive Security2023 to 2024Boston Consulting Group (BCG)
- Chief Audit Executive, IT & Cyber AssuranceJan 2021 to Dec 2023GE
- Head of Information Security2019 to 2021Dorilton
- Adjunct Instructor, Cyber SecurityJan 2017 to Mar 2020Temple University
- Sr. Director, Cyber Security Assurance2014 to 2019Comcast
- Adjunct Instructor, Computer & Network SecurityMay 2012 to May 2017Wilmington University
- System & Data Security Specialist2012 to 2014Bank of America
Education
Master of Science - MS, Computer Information Systems2014 - 2017Boston University
- Bachelor of Science - BS, Computer & Network Security2011 - 2012Wilmington University
Associate of Science - AS, Information Technology2009 - 2011Community College of the Air Force
This page shows public professional information only, each fact cited. Is this you? send a correction, or ask for removal within 24 hours, no questions asked.