From Empathy To Purpose: A Leader Built On Protecting People | Sandro Bucchianeri, NAB | EP 371

Key Concepts

• Cybersecurity & Physical Security: Protecting assets, systems, and people from both digital and physical threats.
• Geographically Dispersed Teams: Managing and leveraging talent across multiple locations (Vietnam, Australia, India).
• Talent Development: Nurturing local tech talent, particularly in cybersecurity, through programs like “Star Camp.”
• Enabling Security: Viewing security not as a roadblock, but as a foundation for innovation and business growth.
• Cultural Diversity: Recognizing the value of diverse perspectives in problem-solving and innovation.
• Generative AI & Agentic AI: Emerging technologies and their implications for security.
• Trust & Customer Centricity: Building and maintaining customer trust through robust security measures.
• Continuous Learning: The importance of adaptability and lifelong learning in a rapidly evolving technological landscape.

NAB Innovation Center & Security Team in Vietnam

NAB (National Australia Bank) has a significant technology presence in Vietnam, with teams in Ho Chi Minh City and Hanoi comprising over 2,000 engineers and technology builders. The Group Security team in Vietnam has experienced exponential growth, increasing from 45 people 18 months ago to over 130 currently. This team is a crucial part of Sandro Bukaneri’s global security function, which also includes teams in Australia and India. NAB aims to be the most customer-centric company in Australia and New Zealand, and Group Security plays a vital role in achieving this by providing an “invisible force field” of protection for customers. Future projections suggest the Vietnam team could grow into the hundreds.

Sandro Bukaneri’s Career & Motivation

Sandro Bukaneri is the Group Chief Security Officer of NAB, responsible for both physical and cyber security globally. His motivation stems from a childhood experience where his uncle was robbed, instilling in him a lifelong desire to protect others. He dislikes bullying and views security as a means of safeguarding communities and livelihoods. He emphasizes that security isn’t about restriction, but about enabling trust and building a foundation for innovation. His leadership philosophy centers on building trust and helping others understand that security is integral to all aspects of work and life, akin to looking both ways before crossing the street.

The Role of a CSO in Today’s World

The role of a Chief Security Officer (CSO) has evolved beyond simply protecting systems. It now encompasses a deeper understanding of protecting people and their livelihoods. While system security remains important, the focus has shifted to safeguarding individuals, such as protecting a grandmother from scams. The CSO’s primary responsibility is building and maintaining customer trust. Bukaneri highlights the importance of the “human connection” in security, emphasizing empathy and understanding the impact of security breaches on individuals.

Security as a Growth Enabler

Bukaneri stresses that security should not be perceived as a gatekeeper but as an enabler of business growth. He argues that security is a foundational element, present in everyday actions, and should be seamlessly integrated into all processes. The goal is to provide “frictionless security” – protection that is effective without hindering the customer experience. He believes security teams should empower businesses to protect customers better, rather than simply saying “no” to new initiatives.

Recruiting & Developing Talent in Vietnam

Vietnam is viewed as a strategic location for NAB’s security team due to the tenacity, curiosity, and hunger for learning exhibited by Vietnamese talent. The cybersecurity market in Vietnam is relatively young (12-15 years old), meaning a lack of seasoned professionals. NAB addresses this by focusing on recruiting young talent with strong potential and providing them with comprehensive training through programs like the “Star Camp.” This program identifies eager learners who quickly acquire skills and contribute to the team’s success. The company values the adaptability and eagerness to learn demonstrated by Vietnamese engineers. The recruitment process focuses on identifying individuals who ask “why” and “how,” fostering a culture of continuous improvement.

Managing Geographically Diverse Teams

Managing teams across multiple geographies (Vietnam, Australia, India) requires embracing cultural diversity and leveraging the unique strengths of each location. Cultural differences are seen as a benefit, fostering diverse perspectives and innovative solutions. Time zone differences are utilized to extend working hours and provide broader coverage. Bukaneri emphasizes the importance of understanding and respecting cultural nuances, referencing the “Culture Map” by Erin Meyer as a valuable resource for navigating these differences. He highlights the value of diverse thought and the importance of challenging established practices.

Future Trends & Continuous Learning

Bukaneri identifies data, AI (specifically generative and agentic AI), and physical AI as key areas of future focus. He emphasizes the importance of continuous learning and adaptability in a rapidly evolving technological landscape. He personally is learning prompt engineering to improve efficiency and prioritizes “focus time” for creative thinking. He advocates for a mindset of embracing failure as a learning opportunity. He believes that the ability to adapt and learn is crucial for success in the cybersecurity field.

Notable Quotes

• “Security is not about saying no. It's about exactly that, being an enabler to the business, to the wider organization so we can better protect our customers.” – Sandro Bukaneri
• “I love protecting people.” – Sandro Bukaneri, explaining his career motivation.
• “Education is the most powerful weapon you can use to change the world.” – Nelson Mandela (quoted by Sandro Bukaneri)
• “If you don't fail, you don't learn and you don't grow.” – Sandro Bukaneri

Technical Terms & Concepts

• Generative AI: Artificial intelligence capable of generating new content, such as text, images, or code.
• Agentic AI: A more advanced form of AI that can autonomously perform tasks and make decisions.
• Physical AI: The integration of AI into physical robots and systems.
• Multifactor Authentication (MFA): A security system that requires multiple forms of verification to access an account.
• Penetration Testing (Pen Testing): A simulated cyberattack used to identify vulnerabilities in a system.
• Star Camp: NAB’s internal program for identifying and developing young talent in Vietnam.

Synthesis & Conclusion

The interview with Sandro Bukaneri underscores the evolving nature of cybersecurity and its critical role in enabling business growth and building customer trust. NAB’s investment in Vietnam highlights the country’s potential as a hub for tech talent, particularly in cybersecurity. The emphasis on continuous learning, cultural diversity, and a proactive approach to emerging technologies like AI are key takeaways for individuals and organizations alike. Bukaneri’s personal story and leadership philosophy emphasize the importance of empathy, purpose, and a commitment to protecting people and their livelihoods. The conversation reinforces the idea that security is not merely a technical function, but a fundamental aspect of building a secure and trustworthy digital world.