CISO Tribune

Executive record

John Toney

CISO Tribune executive record: John Toney, CISO at State of Vermont

Career profile: John Toney on CISO Spotlights ↗

John Toney is Chief Information Security Officer at State of Vermont. The appointment was announced on April 8, 2024, per Vermont Agency of Digital Services.

The seat was verified again on October 23, 2026, per State of Vermont Agency of Digital Services press release.

1 tracked move on the Wire · Updated

Career timeline

Every move the record holds for John Toney, newest first, with the earlier roles the announcements name.

  1. · Appointment

    Named Chief Information Security Officer at State of Vermont

    Source: Vermont Agency of Digital Services ↗ · Move record

The appointment

Announced April 8, 2024 · Source: Vermont Agency of Digital Services ↗ · Move record

The State of Vermont appointed John Toney as its Chief Information Security Officer, effective April 8, 2024. Toney previously served as a Special Agent with the US Secret Service, specializing in network intrusion crimes and critical systems protection. He also served as the first CISO of an enterprise spanning eight countries.

The Agency of Digital Services said the appointment was announced in Montpelier by Denise Reilly-Hughes, who was Secretary of the Agency of Digital Services and Vermont's Chief Information Officer at the time of the announcement. According to the State of Vermont, Toney's task is to develop strategies for bringing emerging technologies such as artificial intelligence into the digital services and operations of the state. Ready.vermont.gov listed Toney, as Chief Information Security Officer at the Agency of Digital Services, among members of the Cybersecurity Advisory Council at the time of the report, when the council's chair was Reilly-Hughes.

The State of Vermont reports that Toney was the first global chief information security officer at City Electric Supply, an electric wholesaler, where he was charged with safeguarding information for an international enterprise based in Dallas. The agency says his specialties in that post were security operations, threat intelligence and incident response. According to the release, Toney has architected and built global security teams on five continents. The State of Vermont reports that his service as a Secret Service special agent lasted 10 years. The agency says he also worked on multiple protection details at DHS Headquarters, the US Naval Observatory and The White House. According to the release, he received specialized onsite training through the Department of Homeland Security at the Idaho National Laboratory in protecting information and operations technology environments.

According to the State of Vermont, Toney joins the Agency of Digital Services at a time when more sophisticated cyberattacks on state and local governments are rising.

According to ready.vermont.gov, the council was formed by the state, led by the Agency of Digital Services, together with Vermont businesses that deliver critical services to Vermonters.

The company: State of Vermont

Company record
Who runs security at State of Vermont: 1 confirmed move on the record

Appointed in the same period

Other security chiefs in Government & Public Sector whose appointment was announced within 90 days of John Toney's, nearest first. The Government & Public Sector bench

Record facts

Time in the seat
2 years 7 months since the appointment was announced (April 8, 2024), as of November 2026
Moves on the record
1 confirmed move, each with its source
On the record since
September 30, 2026

How these are counted. Time in the seat: Counted in whole months from the announcement of the appointment, the date the record holds; announcements rarely give a start date.

Questions about John Toney

Who is the CISO of State of Vermont?
John Toney is Chief Information Security Officer at State of Vermont. The appointment was announced on April 8, 2024, per Vermont Agency of Digital Services.
When did John Toney become CISO of State of Vermont?
The appointment was announced on April 8, 2024, per Vermont Agency of Digital Services. The record holds the announcement, not a start date.

Sources

  1. 1.Vermont Agency of Digital Services ↗: the appointment at State of Vermont, April 8, 2024
  2. 2.CISO Spotlights career profile ↗: a fuller career profile on a sister site

This record begins with CISO Tribune's tracking in 2026.

Related guides