Gary Harbison

I am a global Technology, Cybersecurity, Digital Trust, Risk, and Resilience executive passionate about helping organizations innovate with confidence by building trust, managing risk, and strengthening resilience in an increasingly connected world.As Global Chief Information Security Officer (CISO) at Johnson & Johnson, I lead the Information Security & Risk Management organization with responsibility for cybersecurity, cyber defense, IT risk management, governance, cyber compliance, product security, operational technology (OT) security, and cyber resilience. My focus is on enabling business growth and innovation while protecting critical assets, operations, products, and data.  Across the 30 years of my career, I have led global programs across healthcare, life sciences, agriculture, consumer products, and government.  This spans across executive leadership roles at Johnson & Johnson, Bayer, Monsanto, Anheuser-Busch, and the U.S. Department of Defense. I have built and transformed organizations, developed enterprise security and risk strategies, advised executive leadership teams and boards of directors, and led teams through significant business and technology transformation while building high-performing teams across multiple continents.My leadership philosophy is grounded in a simple belief: trust is a business enabler. Organizations that manage risk effectively and demonstrate resilience are better positioned to innovate, grow, and fulfill their mission. Throughout my career, I have focused on building integrated approaches that bring together cybersecurity, enterprise risk management, business continuity management, privacy, product security, and operational resilience to create sustainable business value and strengthen stakeholder confidence.Beyond my corporate responsibilities, I am passionate about developing future leaders and advancing the cybersecurity profession. I serve as an adjunct professor, mentor security practitioners and executives, advise emerging technology companies, support innovation within the security ecosystem, and contribute to industry initiatives that strengthen resilience and digital trust.As organizations navigate AI, digital transformation, connected products, evolving threats, and increasing stakeholder expectations, I believe the next generation of leadership will be defined not only by securing technology, but by creating trusted, resilient, and responsible organizations. My passion lies at the intersection of technology, risk, resilience, trust, and people.