Using Data to Overcome Business Resistance to Security Champions
Like many companies, Swisscom had a Security Champion Program that was formally defined but far from successful. Each Solution Train handled the Champion Program differently.
About Collin Geisser
Collin is a Lead Security Architect and Solution Security Architect CISSP-certified, with deep expertise in Application Security, Secure Software Development Lifecycle, incident response, regulatory frameworks such as GDPR and former FullStack Engineer.
Collin helps other teams and organizations build a strong and scalable Security Organization.
He serves as the single point of contact for all security-related topics within DevOps@Software, a Software Development Department at Swisscom, driving strategic security planning, managing security risk backlogs, leading communities of practice, organizing security trainings, security events, and aligning organizational OKRs with security goals.
With experience as an Ethical Hacker and Bug Bounty Hunter, Collin brings a practical, offensive-security perspective into architectural decision-making, ensuring that resilience and security are embedded in the design and delivery of complex systems. Beyond his architectural responsibilities, he is passionate about training and mentoring, empowering teams to adopt DevOps security practices, and creating innovative formats to deepen product teams’ security mindset.
Collin also focuses on the secure integration of AI/LLM into enterprise applications, specializing in implementation security rather than LLM model development. His interests span zero trust architecture, storytelling in security communication, and exploring new ways to strengthen systems by combining strategic architecture with hands-on adversarial testing.
In his own words: “I see security as a fabric woven into every part of technology and collaboration. My mission is to help teams not just ‘do’ security, but to live it as part of their daily delivery.”