Michigan’s Security Chief Has More to Do Than Cybersecurity

Source Domain: www.govtech.com

Rex Menold was named to the chief security officer (CSO) position in Michigan in January 2026. The appointment followed nearly three decades of service to the state, during which he held a variety of roles, including in application development, enterprise services and infrastructure. Most recently, he was the state’s chief technology officer before stepping into the CSO role.

There is a lot of common ground among Menold and his counterparts across the country. The vast majority hold the title of chief information security officer (CISO), though a couple have an explicit mention of “risk” in their titles: North Carolina’s CISO equivalent is Chief Risk Officer Torry Crass, while Massachusetts’ Tony O’Neill is both CISO and chief risk officer. Michigan’s approach, however, is seemingly unique.

We met Menold at last month’s National Association of State Chief Information Officers conference, where he talked about his security background and his domain as chief security officer, which extends beyond the realm of cyber to include physical infrastructure.

Video Transcript:
I’ve been in security for maybe 13 or 14 years. I started in with CMS and Medicaid, doing a lot of the compliance and security for Medicaid systems. And I’ve kind of stayed with it, with identity and things like that. But the quick change of it fits me personally. I’m better with chaos, like, I’m the guy that you want when everything is falling apart because, I don’t know, it focuses me or something. But I love how much change there is in cyber. So everyone’s like ‘Oh man, we have to worry a lot.’ I was like ‘Yeah, that’s what makes it great.’ We get to do all the really, like if something really intense is happening, it’s probably in cyber and that means we get to do something exciting and we really get to have a huge impact on the whole state.

The…

Source