25+ years in cybersecurity. 18 years securing industrial control systems at Siemens Energy. Former KnowBe4 CISO Advisor. Now helping organizations turn their biggest vulnerability — people — into their strongest defense.
Trusted by & affiliated with
"Ironically, attack methods have remained unchanged over the past twenty years. The difference? Now they have AI."
— James McQuiggan, CISSP · Advisory CISO, Apparent Security
Whether you need a fractional CISO, a keynote speaker, or a team that finally understands why your employees keep clicking phishing links — there's a right-sized engagement for every organization.
Strategy should come before tools. James works directly with security teams to assess your current posture, identify gaps in your human risk program, and build a prioritized roadmap — including emerging AI-driven threats your current framework likely isn't ready for.
Start a Conversation →The weakest link isn't your employees — it's the training that bores them into ignoring it. Drawing on his KnowBe4 experience, James designs HRM programs that shift behavior by treating people as your first line of defense, not your biggest liability. Measurable outcomes, not compliance checkboxes.
Upgrade Your Training →You need a CISO-level mind in the room — just not a full-time CISO salary on the books. As a fractional CISO, James gives growing businesses access to the same strategic oversight Fortune 500s rely on: policy development, vendor due diligence, incident response planning, and board-level reporting that translates risk into language executives understand.
Schedule a vCISO Consultation →James has spoken at ISC2 Security Congress, Wild West Hackin' Fest, SecureWorld, BSides Las Vegas, and conferences across the US and Europe. His "edutainer" approach — built on a background in musical theatre — means audiences lean in, stay engaged, and actually remember what they heard.
View Speaking Profile →There's no shortage of cybersecurity consultants. There's a real shortage of ones who've spent 25 years in the field, secured industrial control systems, advised Fortune 500 boards, and can still hold an audience's attention for 60 minutes.
While others are still debating whether AI is a threat, James is already presenting on agentic AI attacks and polymorphic phishing at national conferences. He's not chasing the trend — he's helping organizations get ahead of it.
A background in musical theatre sounds like an odd credential for a cybersecurity advisor — until you watch him work. James's storytelling ability means clients remember his recommendations, and conference audiences actually stay awake.
18 years securing industrial control systems at Siemens Energy gives James a perspective on operational technology risk that most security consultants simply don't have. Built on NERC CIP regulations, real OT environments, and actual stakes.
Most security professionals talk about protecting systems. James McQuiggan spent 18 years actually doing it — for industrial control systems at Siemens Energy, where a misconfiguration isn't a data breach headline; it's a power grid outage. That foundation shaped everything: how he thinks about risk, how he talks to boards, and how he refuses to oversimplify the things that actually matter.
"The biggest threat in most organizations isn't the hacker in the hoodie. It's the employee who got a convincing email at 4:57 on a Friday."
After Siemens, James joined KnowBe4 as a CISO Advisor and Security Awareness Advocate — the world's largest security awareness training company — where he drove thought leadership through speaking, content, and media across the globe. That experience confirmed what he already suspected: most organizations don't have a technology problem. They have a human risk problem.
Today, as founder of Apparent Security, James helps organizations evolve from checkbox compliance training into genuine Human Risk Management programs — ones that actually change behavior and show measurable results. He's also one of the few advisors already preparing clients for the next wave: agentic AI systems that act autonomously and polymorphic attacks that look different every single time.
Here's the part that surprises people: James has a background in musical theatre. It sounds unrelated until you watch him deliver a keynote on deepfakes and notice that nobody in the room is looking at their phone. As a CISSP since 2008, eight-year ISC2 Central Florida Chapter President, adjunct instructor at Full Sail University (Cyber Threat Intelligence), and author for GovInfoSecurity and Infosecurity Magazine — the depth is real. The delivery just happens to be exceptional.
James doesn't read from slides. He builds sessions around the questions your audience is already losing sleep over — then answers them in a way that's technically credible, immediately applicable, and genuinely entertaining. Attendees leave with frameworks they can use Monday morning.
What happens when AI doesn't just assist attackers — it acts for them. Built for security conferences, enterprise all-hands, and tech leadership events.
Video is no longer proof. Audio is no longer reliable. This session shows audiences how to verify — and build organizations that don't assume.
Why compliance-based awareness training fails — and what a behavior-focused HRM program actually looks like. Ideal for HR leaders and security teams.
For industrial, energy, and critical infrastructure audiences. Built on 18 real years of doing this work at scale — not theory.
Public speaking skills for security professionals. Co-presented with Erich Kron at BSides Las Vegas 2025. For practitioners who want to grow their platform.
Contributor to leading industry outlets and a recurring guest across cybersecurity's most trusted podcasts and media.
Articles, podcast episodes, and takes on what's actually happening in cybersecurity — at jamesmcquiggan.com
Recent Topics
Whether you're exploring a vCISO engagement, want to book James for your next event, or need a second opinion on your security strategy — the conversation starts here.
Conference organizer?
For fastest response on speaking availability,
submit your request on Sessionize →
Serving clients nationwide · Available for travel worldwide