Jason Lam

Senior InstructorConsulting Practice Director at World Wide Technology

Specialities

Cloud Security, Cybersecurity Leadership

Connect with Jason

Jump to:

Profile
Student Reviews
Courses
Webcasts
Resources

About Jason Lam

Jason Lam is a Senior Instructor at the SANS Institute and seasoned global cybersecurity leader, currently applying his experience as a consulting practice director at World Wide Technology while teaching and authoring key courses. Previously Jason served as the regional CISO and cybersecurity head at MetLife and Head of Global Management at RBC. He is the author and instructor of LDR520: Emerging Trends for Cyber Leaders: AI and Cloud and SEC522: Application Security: Securing Web Apps, APIs, and Microservices, where he combines executive-level strategy with hands-on application security and cloud leadership.

Jason’s journey into cybersecurity began when, early in his career at an Internet service provider, he volunteered to assist after a major security incident, turning a moment of crisis into a lifelong dedication to defense. As he progressed into roles that spanned intrusion detection, penetration testing, incident response and global security programs, he previously served as manager of global threat operations in a regulated industry across 30+ countries. These experiences directly inform the labs in the course where students pivot from threat hunting to cloud-native architecture and business-aligned leadership decisions.

Jason holds significant credentials (publicly listed) including GIAC Certified Web Application Defender (GWEB) and other GIAC certifications. In addition to his course authorship, he created the widely used “CISO Scorecard and Cloud Security Maturity Model” poster and participates in community thought-leadership on cloud-security strategy. He is also a faculty member of the SANS Technology Institute, which has been designated an NSA Center of Academic Excellence in Cyber Defense and is a multi-year winner of the National Cyber League competition.

In his classroom, Jason emphasizes the dual pillars of “protect the business” and “enable innovation.” Students describe his teaching as energetic, practical and rich with war-stories, saying that the labs didn’t just teach “what” to do but “why” and “how.” Outside the classroom, Jason loves cooking and drawing a metaphor between fine-tuned recipes and crafting secure systems. He brings that same mix of precision and creativity into his instruction, reminding practitioners that cybersecurity leadership is as much about mindset as it is about architecture.

Qualifications Summary

Senior Instructor and Author/Co-Author, SANS Institute; global cybersecurity leader at a major financial institution.
Key achievements: Led a global security defense and response programs for 30+ countries; volunteered early-career in major incident response; authored LDR520 and SEC522.
Publications and tools: Creator of the “CISO Scorecard and Cloud Security Maturity Model” poster; frequent cloud-security thought-leader and presenter.
Courses taught/authored: LDR520: Emerging Trends for Cyber Leaders: AI and Cloud; SEC522: Application Security: Securing Web Apps, APIs, and Microservices.
Community/other roles: Faculty member, SANS Technology Institute; speaker at RSA Conference and cloud-security events.

Press & Media

Students Say

Slide 1 of 3
Jason Lam has taught sans courses I have attended in the past. He's always very informative and knowledgeable and presents material in a way that makes sense.
Brian W.U.S. Military
Slide 2 of 3
Jason was very informative and passionate about the material.
Daniel MataTMRS
Slide 3 of 3
Jason is the best teacher I have ever had. Amazing that he could keep it interesting for 7 hours.
Tuva DybedokkenErnst & Young