Draft Security
Principal · Fractional CISO & CIO
Security and technology leadership, with investor and startup advisory.
About Avi
Executive judgment.
Technical depth.
I believe you can govern technology better when you understand how it works—and explain it in language people can use.
The biography
Making Cybersecurity Accessible.
I’m Avishai (Avi) Avivi, a CISO and CIO with more than 30 years in cybersecurity. My work brings cybersecurity, privacy, and AI governance together through a practical view of business risk.
My background spans financial services, telecommunications, and cybersecurity SaaS, including leadership roles at E*TRADE, Tax Credit Co. / Experian Employer Services, SafeBreach, and BCM One, as well as earlier experience at Wells Fargo.
I have built security programs from the ground up, led enterprise security and privacy functions, and translated technical exposure into decisions for executives and boards. My approach connects strategy, budgets, people, governance, and the day-to-day work of protecting an organization.
Today, I provide fractional CISO and CIO leadership through Draft Security and advise on security architecture, product strategy, and investment due diligence. I’m also open to executive leadership opportunities with meaningful operational ownership.
View my professional background on LinkedIn ↗Selected leadership experience
BCM One
Chief Information Security Officer & Head of IT
Cybersecurity and enterprise IT leadership in regulated telecommunications, including board-level risk reporting and AI governance.
SafeBreach
Chief Information Security Officer & Chief Privacy Officer
Built the security program and led privacy, assurance, and security investment rationalization for a global cybersecurity SaaS business.
Tax Credit Co. / Experian Employer Services
Chief Information Security & Privacy Officer
Enterprise security and privacy ownership, certification programs, and acquisition due diligence.
E*TRADE
VP, Information Security · Deputy CISO
Second-line cybersecurity leadership, executive risk reporting, and vulnerability management.
A conversation is a good place to start