In this episode, I have on Nate Lee, the Chief Information Security Officer at Tradeshift, a B2B SaaS platform specializing in digitizing supply chain financing. He talks about how to grow and establish a security program. Key takeaways: Preparing a security plan for your business. Avoid process for the sake of process Security program priorities Tools that you can use to help - SQL injections, static code analysis, vulnerability management When do you make your first security hire What you need to look for when hiring your security personnel. How to introduce a security person into your program. Benefits and value of having a “security champion” Dealing with security later will just cost more down the road About today’s guest:  Nate Lee is currently Chief Information Security Officer at Tradeshift, a B2B SaaS platform specializing in digitizing supply chain financing. With over 25 years in the tech industry, Nate has a wide variety of experience in engineering and management roles at startups, as a consultant, and in the Fortune 50. Nate led at various points platform operations, site reliability engineering, and IT. Subsequently, he started the security program at Tradeshift, building the security team from the ground up with a heavy focus on automation and driving business value through partnerships across internal business units. LinkedIn: https://www.linkedin.com/in/nate-lee-2179302/ ----- Thank you so much for checking out this episode of The Tech Trek, and we would appreciate it if you would take a minute to rate and review us on your favorite podcast player. Want to learn more about us? Head over at https://www.elevano.com Have questions or want to cover specific topics with our future guests? Please message me at  https://www.linkedin.com/in/amirbormand (Amir Bormand)