Sophos Appoints New CEO, CFO

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced that Joe Levy is now chief executive officer (CEO) of the company.

Levy has been acting CEO since Feb. 15. To drive a critical role in the execution of his strategy to shape the future of Sophos, Levy has named Jim Dildine Sophos’ new chief financial officer (CFO) and a member of his senior management team.

Levy is a nearly 30-year veteran of innovating and leading cybersecurity product development, services and companies.

During his nine-year tenure at Sophos, Levy drove the transformation of Sophos from a product-only vendor into the global cybersecurity giant it is today, including an incident response team and managed detection and response (MDR) service that defends more than 21,000 organizations worldwide.

Levy also created SophosAI and Sophos X-Ops, an operational threat intelligence unit that joins together more than 500 cross-departmental cybersecurity operators and threat intelligence experts.

Sophos X-Ops shares real-time and historical attack data with all of Sophos’ solutions, making them smarter and faster at defending customers from persistent cyberattacks.

Levy has in-depth experience working with the channel, including managed security providers (MSPs), throughout his career, which he started in the mid-1990s as a cybersecurity practitioner and product and service innovator at a value-added reseller.

As CEO, Levy plans to expand Sophos’ already strong customer base in the midmarket, which includes nearly 600,000 customers worldwide and generates more than $1.2 billion in annual revenue.

As a leading provider of cybersecurity solutions for the midmarket, Sophos has a unique ability to further scale its business and the business of its partners by helping organizations in dire need of basic and expanded defenses against opportunistic and targeted cyberattacks.

These organizations include the critical substrate, small- to mid-sized organizations that comprise the machines of the world’s economy and are just as susceptible to cyberattacks as major corporations.

In fact, the critical substrate, including smaller organizations within the classic 16 critical infrastructure verticals, are prime attacker targets, as evidenced by Sophos’ Active Adversary report and 2024 Threat Report. Both intelligence reports reveal how attackers are repeatedly abusing exposed Remote Desktop Protocol (RDP) access at midmarket organizations, as well as going after them for data theft, spying, ransomware payoffs, or supply chain attacks to gain entry to bigger prey.