After more than 15 years at the Department of Homeland Security, Chief Information Security Officer (CISO) Hemant Baidwan is stepping away from the agency, closing out a career that spanned multiple senior cybersecurity roles across DHS.
Baidwan most recently served as DHS CISO, a role he held since 2024, where he oversaw cybersecurity operations for a vast network of critical systems and led efforts to strengthen the department’s overall security posture. During his tenure, he directed a large team and managed significant resources tied to protecting national security systems and sensitive data.
His work focused on modernizing DHS cybersecurity strategy, including the development of a multi-year strategic plan and updates to governance structures aimed at improving accountability and operational efficiency. He also led the introduction of new policies and frameworks, including guidance related to artificial intelligence in cybersecurity and a secure software attestation process.
Before becoming CISO, Baidwan served as Deputy CISO from 2020 to 2024, where he was responsible for enterprise-wide information security programs, risk management, and compliance across DHS systems. In that role, he worked closely with component agencies and federal partners on initiatives involving cloud security, zero trust architecture, supply chain risk management, and other emerging technologies.
Earlier roles at DHS included Director of Cybersecurity Risk Management and Compliance and Director of Information Security Governance, where he led enterprise security programs affecting more than 400,000 personnel across DHS components.
Baidwan, a Homeland Security Today Trailblazer, held cybersecurity and technology leadership roles in both government and the private sector, including at U.S. Immigration and Customs Enforcement and as president of a global IT solutions company.
In a LinkedIn post announcing his departure, Baidwan reflected on his time in public service, describing it as “not just a job. It is a responsibility and it has been a privilege to work alongside people who show up every day to protect something bigger than themselves.” He also highlighted efforts to shift DHS cybersecurity from a compliance-driven model toward a more risk-focused and operational approach.
(AI was used in part to facilitate this article.)
