Executive record
James Sipe
Career profile: James Sipe on CISO Spotlights ↗
James Sipe was named Chief Information Security Officer at Commonwealth of Pennsylvania. The appointment was announced on November 3, 2023, per Pennsylvania Office of Administration.
Before the appointment: Cybersecurity leader at Amazon Web Services, per the same source.
The newest appointment at Commonwealth of Pennsylvania on the record is Andy Ritter, Chief Information Security Officer, announced in March 2026.
1 tracked move on the Wire · Updated
Career timeline
Every move the record holds for James Sipe, newest first, with the earlier roles the announcements name.
· Appointment
Named Chief Information Security Officer at Commonwealth of Pennsylvania
Source: Pennsylvania Office of Administration ↗ · Move record
Before November 2023· Earlier role
Cybersecurity leader at Amazon Web Services
Named in the announcement of the Commonwealth of Pennsylvania appointment · Source: Pennsylvania Office of Administration ↗
The appointment
Announced November 3, 2023 · Source: Pennsylvania Office of Administration ↗ · Move record
The Pennsylvania Office of Administration announced that James Sipe was selected as the Commonwealth's next Chief Information Security Officer. Sipe was set to start in the role on November 27, coming from Amazon Web Services, where he oversaw cybersecurity for the company's largest global customers.
The Office of Administration says the CISO maintains cybersecurity strategy, standards and posture for agencies under the Governor's jurisdiction, and leads the team defending Commonwealth IT systems and data from cyber-attacks. According to the release, the CISO's office also oversees incident management, threat and vulnerability management, risk management, monitoring and compliance, auditing and cybersecurity governance.
The Office of Administration says Sipe has more than 20 years of cybersecurity experience, advising and working for companies in diverse industries. Before Amazon, Sipe worked as an IT security executive at MessageBird, which the release describes as a digital communications and marketing company with more than 29,000 customers worldwide. The release says he has also led cybersecurity and compliance at global firms in engineered materials, building technology, accounting, management consulting, weather and environmental monitoring, and hospitality and entertainment. According to the release, Sipe's past employers with headquarters or offices in Pennsylvania include Johnson Controls, Glatfelter and Hershey Entertainment and Resorts Company. Sipe holds a Bachelor of Science in English Language and Literature/Letters from Millersville University, according to pa.gov.
The Office of Administration says the CISO's office works with local governments, offering shared services such as network intrusion monitoring, vulnerability testing, anti-phishing exercises and security awareness training. According to the release, the office is working with the Pennsylvania Emergency Management Agency, the Governor's Office of Homeland Security, other state agencies and local government associations to expand its services through the State and Local Government Cybersecurity Grant Program.
According to pa.gov, his CISO duties covered enterprise-wide management of the Commonwealth's cybersecurity programs, with data privacy and risk management among them. According to pa.gov, in February 2026 Sipe was appointed Executive Deputy Chief Information Officer for the Commonwealth. In that post, according to pa.gov, he is responsible for planning, implementing and overseeing enterprise security, network, infrastructure and related technology services.
The seat before and after
Who the record names in the same seat before and after James Sipe. Only what a dated record states.
Commonwealth of Pennsylvania
After
- Andy Ritter: named Chief Information Security Officer, announced in March 2026 · record
The company: Commonwealth of Pennsylvania
- Region
- North America
- Company record
- Who runs security at Commonwealth of Pennsylvania: 3 confirmed moves on the record
Record facts
- Moves on the record
- 1 confirmed move, each with its source
- On the record since
- September 30, 2026
- Government & Public Sector in 2026
- 14 security-leadership appointments announced in the sector on the record
Questions about James Sipe
- When did James Sipe become CISO of Commonwealth of Pennsylvania?
- The appointment was announced on November 3, 2023, per Pennsylvania Office of Administration. The record holds the announcement, not a start date.
- Who holds the seat at Commonwealth of Pennsylvania now?
- The newest appointment at Commonwealth of Pennsylvania on the record is Andy Ritter, Chief Information Security Officer, announced in March 2026.
- Where did James Sipe work before Commonwealth of Pennsylvania?
- Before the appointment, James Sipe was Cybersecurity leader at Amazon Web Services, according to the announcement (Pennsylvania Office of Administration).
Sources
- 1.Pennsylvania Office of Administration ↗: the appointment at Commonwealth of Pennsylvania, November 3, 2023
- 2.CISO Spotlights career profile ↗: a fuller career profile on a sister site
This record begins with CISO Tribune's tracking in 2026.
Related guides

CISO Podcasts: The Shows That Interview Sitting Security Leaders
Four active podcasts interview sitting CISOs: CISO Series Podcast, Defense in Depth, The New CISO and Risky Business Features. Hosts, cadence, sponsors.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.

How to Become a CISO: Career Path, Experience and Certifications
There is no CISO degree and no single route to the seat. What the certification bodies, career guides and CISO Tribune's own record show about the path: typical prior roles, the certifications that actually come up, and how long it takes.