Magic, Mentalism, and the Modern CISO – with Gary Chan

The Professional CISO

Content provided by David Malicoat. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by David Malicoat or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

14d ago 44:22

MP3•Episode home

Episode Summary

In this episode, host David Malicoat sits down in St. Louis, Missouri with Gary Chan, Chief Information Security Officer at SSM Health — and a professional Security Mentalist. Gary blends his background in cybersecurity, engineering, and mentalism to bring a refreshingly human and creative approach to leadership, awareness, and influence in the world of cyber.

From performing mind-reading demonstrations to explaining how storytelling drives executive buy-in, Gary shows us how creativity and communication can transform a CISO’s impact inside and outside the organization.

They dive deep into how CISOs can become better leaders, storytellers, and advocates for security — and why selling the “why” is far more powerful than explaining the “how.”

Key Takeaways

🎩 Magic Meets Cybersecurity: How Gary uses mentalism and showmanship to make security awareness engaging and unforgettable.
🧭 The Future of the CISO: Why tomorrow’s security leaders must master storytelling, influence, and emotional intelligence — not just technology.
💼 Selling the Business Case: How to translate “reduce risk” into tangible stories that matter to the CFO, board, and business leaders.
🧠 Leadership Lessons from the Stage: What performing magic taught Gary about persuasion, empathy, and audience connection.
💡 From VAR to Healthcare CISO: Gary’s career journey through consulting, sales, and healthcare leadership — and the lessons he carried forward.

Notable Quotes

“When you’re a senior leader, it’s all about storytelling — people need to understand how security ties back to why the organization exists.”“Nobody cares about reducing risk. They care about the impact to them — their goals, their reputation, their mission.”
“Magic and cybersecurity aren’t that different — both are about understanding people’s perceptions and guiding them toward the right conclusion.”

Listener Benefits

Learn how to communicate cybersecurity’s value through stories, not stats
Discover practical ways to make security awareness fun and memorable
Gain insight into leadership and influence beyond the technical realm
Hear real-world lessons on career growth from consulting to the CISO seat

Call to Action

✅ Follow The Professional CISO Show on LinkedIn

🎧 Listen and Subscribe on Spotify or Apple Podcasts

🌐 Visit THPC.co for show updates and events

Guest Information

Gary Chan

Chief Information Security Officer, SSM Health

Security Mentalist & Speaker

🔗 Website: gschan2000.com

🔗 Search “Gary Chan Security Mentalist” for more information

Sponsors

This episode is made possible by:

Check Point – 2025 Workspace Security Insights Roadshow (www.checkpoint.com)
Armis – 2025 Cyber Warfare Report (www.armis.com)
GuidePoint Security – Trusted cybersecurity expertise across Fortune 500 and government agencies (www.guidepointsecurity.com)

Hashtags

#TheProfessionalCISO #CybersecurityLeadership #CISO #GaryChan #SecurityAwareness #CyberCulture #SecurityMentalist #LeadershipDevelopment #StorytellingInSecurity #CISOShow #THPCShow

89 episodes

#Tech #David Malicoat #MBA #Business #CISO #Cybersecurity #Information Security