Ray Massari, Director of IT and Cyber Security, Jacuzzi Group
Embark on a technology-driven path
My IT career began in 2011 when I took my first steps as a Desktop Support Technician. That same month, driven by a lifelong fascination with technology, I began studying for a bachelor’s degree in IT Security. Over the years, I have worked as a systems engineer, security engineer, architect, and currently as Director of IT and Cybersecurity. My career development is a testament to my innate ambition and insatiable curiosity about the world of technology. Now, as I pursue a PhD in IT with a focus on cybersecurity, my commitment to learning continues.
Facing the Internet Security Giant
Today’s enterprise security landscape is fraught with challenges. The obstacles are many, from budget cuts and staff shortages to security vendors’ claims that their solutions can solve all network problems. My role requires me to be as creative as possible to integrate business goals with cyber risk and financial realities. It’s a balancing act between strategic balance and practical vision.
The evolution of enterprise security
Over the past 13 years, I have witnessed significant shifts in enterprise security. What was once a subset of IT has now earned its rightful place as an independent department, often represented on the board of directors by a chief information security officer (CISO). This evolution reflects the increasing importance and complexity of protecting our digital infrastructure.
Develop a strategy to deal with cyber threats
To mitigate the risks associated with cyber threats, I learned that an accurate inventory of IT assets and clear visibility into the environment is critical. In the past, I have used tools such as Tanium to build accurate asset databases, which has been instrumental in my ability to protect against cyberattacks. This is a basic principle: You can’t protect what you don’t knowmaking visibility the first line of defense in the cybersecurity battlefield.
Emerging technologies and their impact
I firmly believe that generative AI will greatly impact enterprise security. This revolutionary technology is changing the game, empowering not only defenders but also adversaries. Therefore, having a good understanding and education about generative AI has become an important part of my approach to enterprise security.
NumberWhat was once a subset of IT has now earned its rightful place as an independent department, often represented on the board of directors by a chief information security officer (CISO). 
Stay informed in an ever-changing landscape
In this rapidly evolving field, I keep myself updated by indulging in various cybersecurity podcasts (such as Cyberwire, SANS Internet Stormcast, and Life of a CISO) and participating in discussions with peers in the IT community. Staying current also includes studying for certification renewals and attending educational webinars. This combination of learning and community interaction ensures that I stay at the forefront of cybersecurity developments.
Plan the future course
As Director, I take the helm and navigate the complex and choppy seas of corporate security. My story is one of constant growth and adaptation, with an unwavering commitment to protecting and serving in the digital age, facing every challenge. This is about equipping those who follow in my footsteps with the knowledge and vision needed to continue this important work. To those embarking on this journey, my advice is to remain vigilant, embrace continuous learning, and be ready to evolve with the ever-changing trends in technology and security threats.
About the author:
Ray Malmassari is a seasoned cybersecurity expert with nearly 15 years of experience and currently serves as Director of IT and Cybersecurity for Jacuzzi® Group. Ray holds an advanced degree from Western Governors University and is currently in the final stages of completing a PhD in IT from Capella University with a focus on cybersecurity. His certification portfolio includes CISSP, CCISO, CNDA and PMP. Ray passionately shares his wealth of knowledge to the benefit of enthusiasts and professionals alike through his YouTube channels @TheCyberUpdate and @CyberSageRay and his Medium blog @TheCyberUpdate.
