Show Notes
In this episode of the TPRM Podcast — Threats, Pitfalls & Risk Myths — host Nate Lee talks with Aaron Stanley, VP of Security at dbt Labs and former Head of Cybersecurity at Twilio, about what it really takes to scale security without slowing down your teams or your business.
Aaron shares his approach to building security programs that keep up with growth — balancing innovation, risk management, and developer velocity. Together, they unpack what “secure by design” actually means in a fast-moving SaaS environment.
They discuss:
- How to align security goals with business outcomes
- The trade-offs between speed and control
- How to reduce friction between security and engineering
- Building trust through automation and shared ownership
- What modern security leaders need to prioritize in 2025
This episode offers clear, real-world insight for CISOs, security leaders, and SaaS founders looking to turn security into a growth enabler instead of a blocker.
Listen and Subscribe
Spotify → https://open.spotify.com/show/7JvPsyMJPgVLOKuJhkKfxA?si=80c2ae161f034833
Apple Podcasts → https://podcasts.apple.com/us/podcast/the-tprm-podcast-threats-pitfalls-and-risk-myths/id1848217699
YouTube → @TPRMPodcast
About the Host
Nate Lee is a B2B Scaleup CISO and Founder of Cloudsec.ai, helping SaaS companies build business-aligned security programs that increase developer velocity and strengthen trust.
About the Show
The TPRM Podcast explores real-world conversations with security leaders reshaping how we think about risk — uncovering the threats, pitfalls, and myths behind today’s cybersecurity challenges.
Connect with Us
LinkedIn → https://www.linkedin.com/in/natetrustmind/
Website → tprmpodcast.com
Instagram → @TPRMPodcast
TikTok →@tprmpodcast
#CyberSecurity #TPRMPodcast #AaronStanley #dbtLabs #NateLee #SecurityLeadership #RiskManagement #DeveloperVelocity #CISO #SaaS #SecurityCulture #Trust #StartupSecurity #BusinessSecurity #SecurityPodcast
More from The TPRM Podcast
What if some of the things we call “security best practices” aren't actually reducing risk?
AI is accelerating cyberattacks to machine speed. But most security programs were built for a world where attackers moved at human speed.
AI isn't just changing how we write software.
Most conversations about AI focus on one question:
Most conversations about AI and cybersecurity focus on a simple question: