Key takeaways
- This directory lists the chief information security officer for 48 of the 51 jurisdictions (50 states and DC), plus each state's AI contact where one is listed.
- Most CISOs sit inside the state's central IT agency and report to the state CIO.
- A growing number of states have named a chief AI officer or AI director, including Illinois, Montana, New York and Vermont.
- Names change often, so confirm with each state's NASCIO profile before outreach.
State CISOs set security standards, run security operations and often approve the security tools agencies can buy. This directory pairs each state's CISO with the person it lists as its AI contact.
State CISOs and AI contacts
| State | State CISO | AI contact |
|---|---|---|
| Alabama | Chadwick SmithChief Information Security Officer | Aaron WrightChief Artificial Intelligence Officer |
| Alaska | Dan MonarchCISO | Chris LettermanChief Technology Officer |
| Arizona | Ryan MurrayState CISO | Randy WheatonDirector, Cloud & Data Center Infrastructure |
| Arkansas | Gary VanceCISO | — |
| California | Mike MarshallState Chief Information Security Officer | — |
| Colorado | Jill FraserChief Information Security Officer | Jane YangPrincipal Director, AI Architecture |
| Connecticut | Gene MeltserChief Information Security Officer | David LabbadiaDirector, Enterprise Architecture and Strategy |
| Delaware | Aashish PatelChief Security Officer | — |
| District of Columbia | Suneel CherukuriChief Information Security Officer | Richard LivingstoneAssociate Chief Technology Officer for Customer Experience |
| Florida | Jason WalkerState Chief Information Security Officer | Eric GrahamAI Officer and State Chief Data Officer |
| Georgia | Steve HodgesState Chief Information Security Officer | Nikhil DeshpandeChief Digital Officer |
| Hawaii | Vincent HoangChief Information Security Officer | Jussi SipolaSenior IT Enterprise Architect |
| Idaho | Jerred EdgarCISO | James PalmerEnterprise Architecture |
| Illinois | Jason BowenStatewide Chief Information Security Officer | Tamara RoustChief Artificial Intelligence Officer |
| Indiana | Hemant JainChief Information Security Officer | Scott MaitlandDirector of Enterprise Solutions |
| Iowa | Shane DwyerChief Information Security Officer | Ben AndersonAI Enterprise Service Owner |
| Kansas | John GodfreyChief Information Security Officer | Andrew EichingerCITA |
| Kentucky | Bob BrooksCISO | — |
| Louisiana | Chase HymelChief Information Security Officer | — |
| Maine | Charles RoteActing Chief Information Security Officer | Victor ChakravartyDirector, Digital Services |
| Maryland | James SaundersActing State Chief Information Security Officer | Ray BellAI/ML Product Director |
| Massachusetts | Anthony O'NeillChief Risk Officer and Commonwealth CISO | Audrey ChenDeputy CTO, AI and Emerging Technologies |
| Michigan | Rex MenoldChief Security Officer | Suzanne PauleyDirector, eMichigan |
| Minnesota | John IsraelState CISO | Ted GoesslingDirector of Artificial Intelligence |
| Mississippi | Jay WhiteChief Information Security Officer | Shelley ThompsonBusiness and Enterprise Architecture Lead |
| Missouri | Shawn IvyCISO | Timothy MarczewskiAI Integration Manager |
| Montana | Chris SantucciChief Information Security Officer | Christopher TarabochiaChief Artificial Intelligence Officer |
| Nebraska | Bryce BaileyState Deputy CIO and Chief Information Security Officer | — |
| Nevada | Deron DahlDeputy CISO | — |
| New Hampshire | Pamela McLeodCISO | — |
| New Jersey | Michael GeraghtyDirector, NJ Cybersecurity & Communications Integration Cell | John SeithManager |
| New Mexico | Raja SambandamState CISO | — |
| New York | Chris DeSainChief Information Security Officer | Eleonore Fournier-TombsChief AI Officer |
| North Carolina | Bernice Russell-BondState Chief Information Security Officer | I-sah HsiehDeputy Secretary for AI & Policy |
| North Dakota | Christopher GergenChief Information Security Officer | Jason AndersonData Insights & AI Manager |
| Ohio | Matthew HemkerInterim State Chief Information Security Officer | Vanitha ZachariasHead of Technology Governance & Chief AI Strategist |
| Oklahoma | Daniel LangleyState Chief Information Security Officer | Tai PhanState Chief AI & Technology Officer |
| Oregon | Ben GherezgiherState Chief Information Security Officer and Director of Cyber Security Services | Nik BlosserChief Artificial Intelligence Strategist |
| Pennsylvania | Andy RitterState Chief Information Security Officer | Jim SipeExecutive Deputy Chief Information Officer |
| Rhode Island | Nathan LouraChief Information Security Officer | Scott GauslandChief Data and Analytics Officer |
| South Carolina | Ben WillisCISO | Rich HeimannDirector of Artificial Intelligence |
| South Dakota | Johnathan HampeCISO | Harold BruceChief Technology Officer |
| Tennessee | Curtis ClanChief Information Security Officer | — |
| Texas | See NASCIO profile | Amy KelleyChief Information Officer |
| Utah | Phil BatesChief Information Security Officer | Christian NapierIT Director, AI |
| Vermont | Steven RoqueChief Information Security Officer | Josiah RaicheChief Data and Artificial Intelligence Officer |
| Virginia | See NASCIO profile | Priya SaldanhaDeputy Chief of Enterprise and Intelligent Solutions, Director of AI and Cloud |
| Washington | See NASCIO profile | Gretchen PeriState Chief Technology Officer |
| West Virginia | James AmosChief Information Security Officer | Christopher PriceAI Director |
| Wisconsin | William BrinkelyState CISO | — |
| Wyoming | Miguel PenarandaCISO | Drew DillyChief Data and AI Officer |
Source: National Association of State Chief Information Officers (NASCIO) member directory, state profiles checked Nov. 8, 2026. "AI contact" is the person each state lists in NASCIO's AI officer field, which is not always a chief AI officer. Where NASCIO's CISO entry was missing or unclear, we link the state profile instead. Titles are as listed by NASCIO.
What state CISOs control
- Security standards. CISOs write the policies and controls agencies must meet, which shape what products qualify.
- Enterprise tools. Many states buy security tools centrally for executive agencies, so the CISO's office is often the decision point.
- Local support. Many CISOs also run whole-of-state programs that extend services to counties, cities and school districts.
- AI governance. Security and AI leaders increasingly review AI tools together before agencies can adopt them; see our state AI policy tracker.
Selling security to states
Pair CISO outreach with the state CIO and procurement office; see our state CIO directory, guide to selling cybersecurity to government and state government guides.
How KSG helps
Kensington Sales Group's SDRs book meetings with public agencies across Federal, SLED, K-12 & Higher Ed, Healthcare, Tribal, Special Districts and Utilities. We get security and AI vendors in front of state CISOs, their deputies and agency security leads. See how our state and local sales development works.
Found a broken link or something inaccurate? We keep this page up to date. If a link doesn't work or any information here is wrong or out of date, report it by email to research@kensingtonsalesgroup.com and we'll fix it.