Rhys Campbell

Chief Information Security Officer at Strata Identity at Strata Identity

About:

Rhys Campbell is the Chief Information Security Officer at Strata Identity, where he leads the company’s security strategy, compliance programs, and cloud infrastructure security.

Before becoming CISO, Rhys served as Director of Security & Infrastructure at Strata, where he joined the early-stage startup to build security and platform development functions from scratch. Prior to Strata, he has held similar positions in IAM focused security companies.

Rhys started his security career securing mission-critical data feeds to the Department of Defense, Federal Highway Administration, and other federal entities. He has fifteen years of experience building security programs at high-growth startups and SMBs. His work has directly enabled multiple funding rounds by establishing the compliance posture and security maturity that enterprise customers and investors require. He has led organizations through SOC 2 Type 2, ISO 27001, and NIST 800-53 compliance initiatives at both Strata Identity and JumpCloud.

Specialization:

Rhys specializes in building investor-ready security programs from zero at high-growth startups, combining executive security leadership with hands-on technical contribution across cloud infrastructure security, DevSecOps, and compliance.

Education:

University of Birmingham, MSc Atmospheric Physics and Meteorology

Swansea University, BSc Economics and Geography

Accomplishments

Built security programs from zero that directly supported Series A and B funding rounds at Strata Identity

Achieved SOC 2 Type 2, ISO 27001, NIST 800-53, and FIPS compliance on startup timelines and budgets

Working group member developing the NTCIP (National Transportation Communications for ITS Protocol) program

The latest from Rhys Campbell

Agentic Identity

Your MCP Server Is a Resource Server Now. Act Like It.

TL;DR — Without an identity layer, AI agents accessing enterprise tools create real exposure: data exfiltration through unscoped access, audit failures when no one can trace...

Agentic Identity

Agentic AI Governance: How to Approach It

Simulators don’t just teach pilots how to fly the plane; they also teach judgment. When do you escalate? When do you hand off to air traffic control? When do you abort the mission? These are human decisions, trained under pressure, and just as critical as the technical flying itself.