Executive record
John Toney
Career profile: John Toney on CISO Spotlights ↗
John Toney is Chief Information Security Officer at State of Vermont. The appointment was announced on April 8, 2024, per Vermont Agency of Digital Services.
The seat was verified again on October 23, 2026, per State of Vermont Agency of Digital Services press release.
1 tracked move on the Wire · Updated
Career timeline
Every move the record holds for John Toney, newest first, with the earlier roles the announcements name.
The appointment
Announced April 8, 2024 · Source: Vermont Agency of Digital Services ↗ · Move record
The State of Vermont appointed John Toney as its Chief Information Security Officer, effective April 8, 2024. Toney previously served as a Special Agent with the US Secret Service, specializing in network intrusion crimes and critical systems protection. He also served as the first CISO of an enterprise spanning eight countries.
The Agency of Digital Services said the appointment was announced in Montpelier by Denise Reilly-Hughes, who was Secretary of the Agency of Digital Services and Vermont's Chief Information Officer at the time of the announcement. According to the State of Vermont, Toney's task is to develop strategies for bringing emerging technologies such as artificial intelligence into the digital services and operations of the state. Ready.vermont.gov listed Toney, as Chief Information Security Officer at the Agency of Digital Services, among members of the Cybersecurity Advisory Council at the time of the report, when the council's chair was Reilly-Hughes.
The State of Vermont reports that Toney was the first global chief information security officer at City Electric Supply, an electric wholesaler, where he was charged with safeguarding information for an international enterprise based in Dallas. The agency says his specialties in that post were security operations, threat intelligence and incident response. According to the release, Toney has architected and built global security teams on five continents. The State of Vermont reports that his service as a Secret Service special agent lasted 10 years. The agency says he also worked on multiple protection details at DHS Headquarters, the US Naval Observatory and The White House. According to the release, he received specialized onsite training through the Department of Homeland Security at the Idaho National Laboratory in protecting information and operations technology environments.
According to the State of Vermont, Toney joins the Agency of Digital Services at a time when more sophisticated cyberattacks on state and local governments are rising.
According to ready.vermont.gov, the council was formed by the state, led by the Agency of Digital Services, together with Vermont businesses that deliver critical services to Vermonters.
The company: State of Vermont
- Region
- North America
- Company record
- Who runs security at State of Vermont: 1 confirmed move on the record
Appointed in the same period
Other security chiefs in Government & Public Sector whose appointment was announced within 90 days of John Toney's, nearest first. The Government & Public Sector bench
Hemant Baidwan, Chief Information Security Officer at U.S. Department of Homeland Security
John Godfrey, Chief Information Security Officer at State of Kansas
Chris Pashley, Chief Information Security Officer at Advanced Research Projects Agency for Health (ARPA-H)
Record facts
- Time in the seat
- 2 years 7 months since the appointment was announced (April 8, 2024), as of November 2026
- Moves on the record
- 1 confirmed move, each with its source
- On the record since
- September 30, 2026
- Government & Public Sector in 2026
- 14 security-leadership appointments announced in the sector on the record
How these are counted. Time in the seat: Counted in whole months from the announcement of the appointment, the date the record holds; announcements rarely give a start date.
Questions about John Toney
- Who is the CISO of State of Vermont?
- John Toney is Chief Information Security Officer at State of Vermont. The appointment was announced on April 8, 2024, per Vermont Agency of Digital Services.
- When did John Toney become CISO of State of Vermont?
- The appointment was announced on April 8, 2024, per Vermont Agency of Digital Services. The record holds the announcement, not a start date.
Sources
- 1.Vermont Agency of Digital Services ↗: the appointment at State of Vermont, April 8, 2024
- 2.CISO Spotlights career profile ↗: a fuller career profile on a sister site
This record begins with CISO Tribune's tracking in 2026.
Related guides

CISO Podcasts: The Shows That Interview Sitting Security Leaders
Four active podcasts interview sitting CISOs: CISO Series Podcast, Defense in Depth, The New CISO and Risky Business Features. Hosts, cadence, sponsors.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.

How to Become a CISO: Career Path, Experience and Certifications
There is no CISO degree and no single route to the seat. What the certification bodies, career guides and CISO Tribune's own record show about the path: typical prior roles, the certifications that actually come up, and how long it takes.