CISO Tribune

CISO appointment

Bruce Jenkins named Chief Information Security Officer at Black Duck Software

By CISO Tribune Editorial · Published · Updated

Bruce Jenkins is the Chief Information Security Officer of Black Duck Software.

Records: Black Duck Software · Bruce Jenkins

PersonBruce Jenkins
New roleChief Information Security Officer
CompanyBlack Duck Software
Announcedweek of December 16, 2024
Added to the recordSeptember 26, 2026
SourceSecurityWeek Industry Moves (week of 2024-12-16)

Context from the record

Other Cybersecurity Vendors appointments in the fourth quarter of 2024

  • Esther Pinto, Chief Information Security Officer, Guardz
  • Sergej Epp, Chief Information Security Officer (CISO), Sysdig
  • Pauli Haikonen, Chief Information Security Officer, SSH Communications Security
  • Ian Thornton-Trump, Chief Information Security Officer, Inversion6
  • Lakshmi Hanspal, Chief Trust Officer, DigiCert
  • Randolph Barr, Chief Information Security Officer, Cequence Security
  • James Scobey, Chief Information Security Officer, Keeper Security

Who runs security in Cybersecurity Vendors.

What this move signals

Black Duck Software announced the appointment of Bruce Jenkins as Chief Information Security Officer. Jenkins was promoted internally at Black Duck, which was established as a newly independent company following acquisition by Clearlake Capital Group and Francisco Partners.

What the sources say

According to the release, Jenkins will lead every aspect of the cybersecurity strategy and program at Black Duck, covering cloud solutions, supply chain, IT infrastructure and on-premise products. SecurityWeek reports that Black Duck Software announced Ishpreet Singh as Chief Information Officer alongside Jenkins, with Singh joining the executive leadership team from Qualys.

The company says Jenkins brings close to 25 years of expertise in software, IT and physical security to the role. In his earlier role, Jenkins oversaw incident response, internal product security, and risk and compliance strategy at the Synopsys Software Integrity Group and during its transition to Black Duck, the company says. The company says Jenkins, who served 28 years in the U.S. Air Force, began his cybersecurity career after a 2005 systems breach in which personally identifiable information of 33,000 military officers was stolen. Before his time with Black Duck and the Synopsys Software Integrity Group, Jenkins led policy, best practices and product security strategy at Micro Focus, according to the release. According to the release, Jenkins was co-chair of the Cyber Supply Chain Committee at the National Defense Industrial Association at the time of the announcement.

The company says Black Duck offers a portfolio of application security solutions. According to the company, the former Synopsys Software Integrity Group rebranded as Black Duck Software, Inc., an application security company, in an announcement dated Oct 1, 2024.

Sources

  1. SecurityWeek Industry Moves (week of 2024-12-16)
  2. Black Duck Welcomes New CIO, CISO in Latest Executive Expansion Moves. Black Duck Software, published December 19, 2024.
  3. News Releases | Black Duck. Black Duck Software, read November 10, 2026.

The Briefing

Every verified CISO move of the week, in your inbox Friday.

Every verified CISO move and one piece of analysis, weekly.

Unsubscribe any time. See the privacy policy.