Company record
Who leads security at Atlassian
The most recent move CISO Tribune has on record at Atlassian was announced in the week of February 3, 2025: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.
What Atlassian tells the SEC
Its fiscal 2026 Form 10-K, filed August 14, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer reporting to the CTrO, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since February 3, 2025 · 1 recorded move · every claim links to a sourced record · Updated
Where Atlassian appears on the record (2)
Every page on CISO Tribune and its network that carries this company, 2 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2026 · Item 1C, filed August 14, 2026
About Atlassian
CISO Tribune's Leadership Bench files Atlassian under Technology and Asia-Pacific. The SEC classifies it under standard industrial classification 7372, Services-prepackaged software, and EDGAR lists its ticker as TEAM. The Wire has one security-leadership move at Atlassian on record, announced in the week of February 3, 2025.
What Atlassian's 10-K says about security governance
Atlassian's fiscal 2026 Form 10-K, filed August 14, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Reporting line: the Chief Information Security Officer reports to the CTrO.
“Our Chief Information Security Officer ("CISO") reports to our CTrO and oversees the technical identification, assessment and management of cybersecurity risks relevant to our business.”
Board oversight: the Audit Committee.
“Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to its audit committee (the "Audit Committee") oversight of cybersecurity and other information technology risks.”
How often the board or committee hears about it: quarterly.
“Our CTrO and CISO provide updates on significant risks to the Audit Committee quarterly and also provide updates to the full board of directors at least biannually.”
Frameworks and standards the filing names: NIST Cybersecurity Framework, ISO/IEC 27001 and SOC 2.
Experience of the security leadership, as the filing states it:
“Our CISO has served in his role since December 2024 and also has experience in cybersecurity, including serving as Chief Information Security Officer of a large publicly-traded enterprise software company.”
Material incidents: the filing states none.
“We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, whether individually or in the aggregate, have materially affected or are reasonably likely to materially affect us , our business, and our results of operations in Part I, Item 1A in this Annual Report on Form 10-K, which disclosures are incorporated by reference herein.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
Security leaders of Atlassian on our record
David Cross: named Chief Information Security Officer, announced in the week of February 3, 2025 record
Moves by people who came from Atlassian
Security chiefs at other Technology organizations
Other organizations CISO Tribune files under Technology with a named security chief on record: those in Asia-Pacific first, in alphabetical order from Atlassian onward.
InMobi Group: Aditya Kumar, Chief Information Security Officer.
IREN Limited: Eric Hammersley, Chief Information Security Officer.
Netcore: Jayesh Bhatt, Chief Information Security Officer.
NTT DATA: Hiroshi Tomiyasu, CISO (Chief Information Security Officer).
AWS: Amy Herzog, Chief Information Security Officer (CISO).
Backstory: Victor Chang, Chief Information Security Officer.
Biz2X: Anupam Saha, Chief Information Security Officer (CISO).
Blue Mountain: Paul Adams, Chief Information Security Officer.
Questions CISOs ask about Atlassian
- Who are the security chiefs at other Technology organizations?
- On CISO Tribune's record they include Aditya Kumar at InMobi Group, Eric Hammersley at IREN Limited, Jayesh Bhatt at Netcore and Hiroshi Tomiyasu at NTT DATA.
- Who does the security chief of Atlassian report to?
- Atlassian's fiscal 2026 Form 10-K, filed August 14, 2026, says its Chief Information Security Officer reports to the CTrO.
- Which board body oversees cybersecurity at Atlassian?
- Atlassian's fiscal 2026 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.