About Rock Lambros

I've spent nearly three decades in technology and security, most of it with the pager on. I was the most senior information security leader at MarkWest through its ~$20 billion combination with MPLX and Marathon, and that is where I learned what security looks like when the stakes are a real company and a real balance sheet.

These days I advise. Boards and executive teams bring me in when AI risk stops being theoretical and starts showing up in their diligence, their audits, and their customers' security questionnaires. I help them see which risks threaten the business and build the governance that holds. When the work needs someone in the seat, I take the virtual CISO or fractional Chief AI Officer role, and the deliverable is the same either way: judgment a board can act on.

I help write the standards the field uses. I co-lead the OWASP Top 10 for LLMs, I sit on the core team of the OWASP Agentic Security Initiative, and I co-led the 2026 State of Agentic AI Security and Governance report. I'm a named author on the AAGATE and LAAF papers, and I co-wrote The CISO Evolution with Matthew K. Sharp. The record is the point: the governance I recommend comes from someone who has had to answer for it.

On the technical side, I'm finishing a master's in Applied Data Science and Artificial Intelligence at the University of Denver, expected December 2026, because I would rather understand how the models fail than take a vendor's word for it. I'm a Distinguished Fellow of the Enterprise Risk Quantification Institute, and I hold the CISSP, CCSP, AIGP, and QTE credentials. Home base is Denver.