Dan Sorensen
About

About Dan

I've spent 22+ years in cybersecurity, from U.S. Air Force and Air National Guard cyber operations to building security programs for organizations that can't afford to get it wrong. Today I'm a fractional vCISO and AI governance advisor and the founder of Nexus Security Advisors, serving small and mid-sized businesses in every industry.

Key areas of expertise

  • Fractional vCISO & AI governance: security strategy, risk management and compliance programs built on NIST CSF 2.0, NIST AI RMF, ISO/IEC 27001, ISO/IEC 42001, CMMC, HIPAA and the EU AI Act.
  • Cybersecurity leadership: building security programs and leading defense teams that protect critical assets, and translating cyber risk into boardroom decisions.
  • Cybersecurity engineering: System Security Engineering (SSE) for aerospace projects, RMF processes and secure systems integration.
  • Cyber intelligence leadership: led strategic planning and budgeting, managed a multi-million-dollar budget and built teams of cyber defenders and threat emulators.
  • Cyber threat intelligence: co-author of Advanced Cyber Threat Intelligence and Hunting and an editor of the Geneva Manual on Cyber Threat Intelligence.

Education & research

  • PhD candidate in Cybersecurity Leadership at Capitol Technology University, researching the return on investment of incident response in aerospace.
  • The University of Texas at Austin; Defense Language Institute.

Community & knowledge sharing

  • OWASP AI Exchange core team member, helping shape open AI security guidance for the global community.
  • Forbes Technology Council contributor and co-author of The AI Mindset.
  • Speaker and trainer on cybersecurity, threat intelligence and AI governance.
  • Mentor to veterans and newcomers starting careers in cybersecurity.

Beyond work

Certified personal trainer, nutrition coach, bodybuilding specialist and Pilates instructor (ISSA Elite Trainer), and a PADI Advanced Open Water Diver.

Featured work

Speaking & keynotes

AI governance, AI security, threat intelligence and the vCISO model.

Training & workshops

Standards-based training and tabletop exercises for leadership and technical teams.

Writing

Forbes Technology Council, Fast Company and articles here.