CYBEX

Mark Gurevich

Mark Gurevich is Head of IT Security and Infrastructure at CYBEX in Germany. He leads global information security, compliance, and IT infrastructure, managing security operations, risk, and application automation strategies. He has extensive experience in cybersecurity, risk management, and IT architecture with certifications like CISSP and CISM.

In an exclusive interview with CIOReview Europe, he shared invaluable insights on balancing innovation with security, making cybersecurity a true enabler of sustainable digital growth.

Cybersecurity as the Catalyst for Digital Growth

In my role as Head of IT Infrastructure and Security I carry a double responsibility of keeping the core information systems of the company running smoothly, while protecting them from an ever-growing list of cyber threats. On one side, I’m constantly asked to bring in new technology, improve availability, and make services as seamless as possible for employees. On the other, I have to apply numerous protections which might be slowing the progress at the first glance.

Looking for the balance between innovation, usability and security is a challenge that never ends. For many CIOs and IT leaders, this is the new reality. Digitalization is not optional anymore - it’s the way companies grow, acquire customers, and reinvent how they work.

Same applies to security and digitalizing your workflows presents an earning opportunity for hacking groups, whose revenue is growing tremendously year after year. In this situation, the real art is not to slow things down with endless security controls but to make security an enabler of safe and sustainable growth.

Why security matters for digital growth:

Customers will not adopt digital services if they doubt the security of their data. Regulators are enforcing stricter compliance regimes, from GDPR and NIS2 to the Cyber Resilience Act.

Investors increasingly view Cybersecurity as a must have condition for business resilience.

Without strong security, the risk of downtime, reputational damage, and financial loss can derail even the most ambitious transformation program. Security is not a barrier to digital growth, it is its foundation.

To lay this foundation, it is required to work on all company’s levels. Starting from the top it is important to decide, at board level, how much risk the company is ready to accept.

CIOs need to translate that into clear guardrails: which workloads belong in the cloud, how to use AI responsibly, what thirdparty access is allowed. Once a risk appetite is clear, innovation moves faster because the rules are set.

Then, Security has to be taken across the organization. It needs to be part of every project from day one. Practices like DevSecOps, identity-first controls, and secure cloud blueprints avoid painful redesigns and delays later. Done right, “security by design” actually shortens project timelines, because trust is already built in. Technology on its own cannot secure digital growth. Successful CIOs invest into governance and culture to assure progress.

- Governance means building a framework to align security initiatives with regulatory expectations, internal risk appetite, and business objectives and to assure oversight that the security program brings required outcomes.

- Culture means creating shared responsibility for security. Product teams, developers, and business leaders must view security as part of their daily goals and not someone else’s job.

In the end, digital trust is earned through a blend of technology, governance, and culture working in harmony.

The CIO’s Playbook for Secure Growth

1. Connect to business goals – prioritize securing what drives growth.

2. Set risk appetite with the board – align on how much risk is acceptable.

3. Build security into projects early – avoid late-stage blockers.

4. Invest in modern enablers – Zero Trust, automation, AI, resilience.

5. Strengthen governance and culture – align policies with business rules, and make security part of everyone’s responsibility, not just IT’s.

Eventually, the misbelief that security slows down digitalization must be retired. Done right, Cybersecurity is not a tax on innovation, it is the accelerator that enables enterprises to scale digital services with confidence.

As CIOs and IT leaders, our mission is clear: we must find the right balance between innovation and risk, allowing the company to grow boldly while staying safe. This balance is not only tactically important, it is key to strategic success of the digitalization journey.