John Bates
Senior Manager, Assurance - Technology Risk, Ernst & Young LLP
With over 15 years of leadership, John Bates offers a unique dual perspective as a CISO and in-house attorney for global SaaS and technology firms. He specializes in translating complex regulations—including CCPA, GDPR, NIS2, DORA, and AI Governance—into actionable, business-driven strategies. He has built enterprise security programs from the ground up, integrating security-by-design into product lifecycles, and providing hands-on legal counsel during incident response. As a partner to boards and C-suites, he has helped Fortune 500 corporations navigate complex frameworks such as CMMC and NYDFS. By blending technical rigor with pragmatic legal guidance, he helps organizations mitigate emerging risks and harness Responsible AI for sustainable growth.