#580 Security vs Speed: Ben Wilcox on AI Development, DevSecOps, and Modern CTO Leadership

As AI rapidly reshapes how software is built, technology leaders face a growing tension between speed and security. Development cycles are accelerating thanks to generative AI tools, while cybersecurity teams are struggling to keep pace with new risks introduced by AI-generated code, autonomous agents, and evolving cloud architectures.In this episode, Mehmet speaks with Ben Wilcox, CTO and CISO at ProArch, about how modern technology leaders balance innovation with risk management. The conversation explores the convergence of engineering and security leadership, the maturity gap in DevSecOps adoption, the implications of AI-assisted development, and the governance challenges organizations must address as AI becomes embedded in enterprise applications.Ben also shares insights on secure-by-design engineering practices, the changing role of CTOs, and why AI governance and visibility will become critical priorities in the near future.⸻About the GuestBen Wilcox is the Chief Technology Officer and Chief Information Security Officer at ProArch, where he leads technology strategy, cybersecurity initiatives, and enterprise architecture efforts. With more than two decades of experience across infrastructure, cloud technologies, and software development, Ben has built a career at the intersection of engineering and security.Over the years, he has helped organizations modernize their technology stacks while maintaining strong security and governance practices. His work focuses on secure cloud architectures, DevSecOps transformation, and helping businesses safely adopt emerging technologies such as AI.Connect with Ben on LinkedIn:https://www.linkedin.com/in/ben-wilcox/Learn more about ProArch:https://www.proarch.com⸻Key Takeaways• The traditional divide between engineering and security teams is fading as organizations increasingly merge CTO and CISO responsibilities.• AI-assisted development is dramatically increasing the speed of software creation, creating new challenges for security teams.• DevSecOps adoption remains immature in many organizations despite widespread awareness of the concept.• Secure-by-design engineering requires clear guardrails and well-defined development pathways for teams.• AI-generated code should be treated like work produced by a junior developer or intern and still requires human review.• AI governance and visibility will become a major priority as organizations deploy AI agents across business processes.• CTOs must develop both technical foresight and strong business alignment to guide organizations through rapid technological change.⸻What You Will LearnIn this episode:• How organizations can balance rapid development with cybersecurity requirements• Why DevSecOps still struggles to deliver on its promise• The risks and realities of AI-generated code in modern development• How secure-by-design engineering works in practice• The architectural considerations when integrating AI into enterprise applications• The governance challenges created by AI agents and evolving LLM ecosystems• The skills future CTOs need to remain relevant in an AI-driven technology landscapeTimestamps00:00 Introduction and guest welcome01:00 Ben Wilcox’s background and career journey03:00 The challenge of combining CTO and CISO responsibilities06:00 Balancing development speed with cybersecurity risk07:30 AI-driven development and the new security challenges10:00 What “secure by design” really means in engineering14:30 DevSecOps adoption and maturity challenges18:00 AI adoption in organizations: productivity vs product integration22:00 AI-generated code, intellectual property, and governance risks27:00 Architecture considerations for AI-driven systems32:00 Data sovereignty, cloud strategy, and AI infrastructure34:00 Skills the next generation of CTOs must develop40:00 Emerging trends in AI governance and security45:00 Where to connect with Ben Wilcox