About InfoGuard
15+ years of senior cybersecurity expertise
Founded in Silicon Valley in 2009.
Led by practitioners, not checklist consultants.
Led by practitioners, not checklist consultants.
Cybersecurity is what we do. Compliance is how we help you demonstrate it.
Our story
Here since the early days of cybersecurity
When InfoGuard was founded in Silicon Valley in 2009, few organizations had a security team and cybersecurity rarely reached the boardroom. We set out to give companies senior expertise without the cost and rigidity of a large firm, or the habit of handing the work to junior staff.
Since then, we have helped technology companies, defense contractors, healthcare providers, and government organizations across the country secure their systems and earn the certifications their customers require. Information security is our only business. It is not an add-on to an accounting or IT practice.
More than 15 years later, we are still senior-led, hands-on, and focused only on cybersecurity.
What we do
One partner for security and compliance
Our mission is to help organizations reduce security risk, earn customer trust, and meet their compliance obligations, with the precision and attention larger firms cannot match. Our expertise extends to AI, cloud, applications, infrastructure, identity and access, networks, data protection, governance, and risk.
Compliance
Certifications buyers ask for
SOC 2, CMMC, FedRAMP, DoD Impact Levels, ISO 27001, HIPAA, and PCI DSS, from gap assessment through audit.
Virtual CISO
Executive security leader
A seasoned CISO on your team for strategy, board reporting, and program oversight, without a full-time hire.
Security engineering
Defenses that actually work
Architecture reviews, cloud and network security, risk assessments, and vendor risk management.
AI governance
Responsible, secure AI
ISO 42001 and NIST AI RMF programs that govern how you build, buy, and use AI.
How we work
What sets InfoGuard apart
Senior practitioners
Faster results and fewer surprises
Experienced experts get it right the first time, so you avoid rework, failed audits, and delays.
Experienced experts get it right the first time, so you avoid rework, failed audits, and delays.
Executive oversight
Your budget goes to your highest security risks first
We prioritize spending on the risks that matter most to your business, instead of spreading it thin across generic security projects.
We prioritize spending on the risks that matter most to your business, instead of spreading it thin across generic security projects.
Customized, not templated
Real security, not a checkbox
Controls built for your environment and risks reduce your actual exposure, not just audit findings.
Controls built for your environment and risks reduce your actual exposure, not just audit findings.
GRC platforms
Get full value from your current GRC tools
Keep the platforms you already use. We fill the gaps automation cannot, so you reach certification faster.
Keep the platforms you already use. We fill the gaps automation cannot, so you reach certification faster.
Knowledge transfer
Your team gets stronger, not dependent
We train your people throughout, so the capability stays with you after the engagement.
We train your people throughout, so the capability stays with you after the engagement.
Long-term partnership
An advisor who already knows you
No re-explaining your environment each year. We keep your program current as you grow.
No re-explaining your environment each year. We keep your program current as you grow.
Leadership
The people behind your engagement
Dr. Robert Roohparvar
Chief Information Security Officer
Experience
A Silicon Valley cybersecurity executive with more than 30 years of hands-on leadership across information, network, and cloud security, risk management, and compliance.
Certifications
CISSP, CISA, CISM, CTPRP, and ISO 27001 Lead Implementer.
Federal and defense
Former FedRAMP 3PAO assessor and CMMC instructor.
Prior roles
IBM Internet Security Systems, Symantec, Alcatel, eBay, Oracle, Sun Microsystems, FishNet Security, and FICO.
Clients served
NASA, the Department of Defense, Lawrence Livermore National Laboratory, Travis Air Force Base, Fujitsu, Xerox PARC, Stanford University, and eBay, among many others.
Academic
Former professor of computer science at California State University and the University of Nebraska at Omaha. PhD ABD in computer science, Western Michigan University.
Steve Walsh
Vice President of Sales
Experience
A veteran security and network sales executive with 35 years of experience building and leading sales, technical presales, and channel teams.
At InfoGuard
Steve leads client relationships, account management, and engagement planning, making sure every client reaches the business outcome they came for.
Our offices
Based in California, serving clients nationwide
San Jose (HQ)
333 W. Santa Clara St, Suite 920, San Jose, CA 95113
Irvine
19800 MacArthur Blvd, Irvine, CA
InfoGuard in practice
Senior expertise on every engagement
You work directly with the practitioners who do the work, not a rotating junior team.
Next step
Tell us where you stand
Tell us what you’re trying to accomplish. We’ll reply with next steps, whether that’s a compliance assessment, a security review, or a conversation about virtual CISO support.