From Navy Sailor to Cybersecurity Chief: What Chris Wheeler Learned About Trust
Resilience CISO Chris Wheeler spent years in the Navy before moving into corporate security. His core lesson: the job is about earning trust, not just blocking attacks.
Key points
- Chris Wheeler, currently Chief Information Security Officer (CISO) at the cyber-insurance firm Resilience, built his security career after serving in the United States Navy.
- Wheeler told SecurityWeek that trust, not technology, is the central challenge of the CISO role.
- His career path reflects a wider pattern of military veterans moving into senior cybersecurity positions in the private sector.
- The CISO role has shifted from purely technical gatekeeper to a job that demands boardroom credibility and clear communication with non-technical leaders.
Chris Wheeler did not start out in a corner office. He started on a ship.
After his time in the Navy, Wheeler moved into corporate security and eventually became the CISO, meaning the executive in charge of protecting an organisation's information and systems, at Resilience, a company that sells cyber-insurance and security services to businesses.
Speaking to SecurityWeek, Wheeler described the central challenge of the role in plain terms: the job is trust. Not firewalls. Not threat reports. Trust.
What does a CISO actually do?
A CISO protects the whole organisation from digital attacks, but the role is as much about people as it is about technology. Wheeler's argument is that a CISO who cannot convince a company's board, its finance director, and its everyday staff to take security seriously will fail, however good the technical defences are.
That framing matters. Breaches happen frequently not because a company lacked the right software, but because someone clicked a bad link, skipped a software update, or shared a password. No tool fixes a culture where staff see security as someone else's problem.
Why does a Navy background help?
Military service builds exactly the habits that hard security work demands. Following strict procedures under pressure, communicating clearly in a crisis, and understanding that one weak link can sink the whole operation: these are Navy lessons that translate directly.
Wheeler is far from alone. A notable number of senior security executives in the United States came out of military or government intelligence roles, where the consequences of a lapse were measured in something more serious than downtime.
The move from uniformed service to the private sector is rarely seamless. Corporate culture, shareholder pressure, and the pace of product launches all push against the careful, process-first mindset that military training instils. Wheeler's path suggests that the friction can be productive.
What does this mean for ordinary employees?
For most workers, the CISO is an invisible figure until something goes wrong. Wheeler's framing is a reminder that security culture is everyone's shared responsibility, not a department buried in the IT floor.
If your company's security team feels approachable and communicates clearly why certain rules exist, that is probably deliberate. It is also genuinely protective: staff who understand the reason behind a policy are far more likely to follow it when it matters.
Common questions
What is a CISO and why does the role matter?
A Chief Information Security Officer is the senior executive responsible for keeping a company's data, systems, and networks safe from criminals and accidents. As digital attacks grow more common and costly, boards are paying closer attention to whoever fills that seat.
Can non-technical people become cybersecurity leaders?
Yes, increasingly so. The CISO role requires strong communication skills, business judgment, and the ability to build trust across an organisation. Technical depth helps, but leadership and clear thinking matter just as much.
