# Nir Sofer

Nir Sofer is Chief Information Security Officer at SysAid, where the work includes securing AI-powered IT service management. Sofer’s posts focus on cybersecurity, identity, shadow IT, software visibility, and connecting security priorities with business goals.

- Profile: https://b2binfluencer.marketing/creators/nir-sofer/
- LinkedIn: https://www.linkedin.com/in/nirsofer
- LinkedIn followers: 1,765
- Topics: artificial-intelligence, leadership, cybersecurity, ai-governance
- Based on 10 dated posts, latest 2026-10-01

## Summary

Nir Sofer is most useful for practical cybersecurity content on shadow IT, identity, software visibility, and business goals.

- Best for: B2B SaaS security brands needing fractional CISO product security and thought leadership.
- Not for: Not for consumer identity protection or password manager sponsored content series with reach guarantees.
- Check first: Confirm whether Sofer accepts partnerships and request audience analytics by seniority and job function.

### Takeaways

- Compare identity-provider app list, OAuth grants by scope, and a year of SaaS card spending.
- Shadow IT is also a license-compliance problem, tied to SOC 2 and ISO 27001 requirements.
- Track a bounded, measured unknown rather than chase full visibility, which stalls the program.

## Main ideas

- **Shadow IT is now an identity and access problem**: Sofer argues that shadow IT has changed shape. The old example was an unsanctioned file-sharing tool; today, it is an AI assistant someone connected to a Microsoft 365 tenant through a delegated OAuth grant with read access to mail and files. The application sits inside the identity provider, so a firewall never sees it, off-boarding never revokes it, and it appears in no inventory because nobody bought it. Sofer cites SysAid's State of Service Management 2026 survey of 718 IT professionals, which found that only 9.9% of organizations have full visibility into their software ecosystem, with nearly half flagging poor software visibility as a security risk.
- **The same blind spot is a license-compliance problem**: Sofer treats shadow IT and software license compliance as one problem viewed from two directions. Every unauthorized tool is a potential compliance gap. Frameworks such as SOC 2 and ISO 27001 require an asset inventory and a vendor-risk process—neither can cover tools nobody knows exist. Sofer cites the same 9.9% visibility figure from the SysAid survey and argues that a vendor audit, rather than a breach, often provides the impetus to act.
- **Identity is a business control, not a technical project**: In a post based on an outside press analysis, Sofer endorses the argument that security is the backbone of business trust and scalability, not a technical department. The piece they share frames digital transformation as a convergence of AI, cybersecurity, and financial integrity, and describes leadership silos as a strategic liability. It sets out a CEO, CFO, and CISO triad in which strategy, value, and protection operate together. Identity and access management is presented as a foundational business control affecting revenue assurance and audit readiness, while AI governance is necessary because AI can accelerate errors and regulatory breaches as quickly as it accelerates insight.
- **Advice should be small and runnable this week**: Sofer's public reasoning tends to end with a short list of actions that require neither budget nor a new purchase. Across the posts, the pattern is consistent: open with a familiar line or a counterintuitive number, explain the mechanism in plain terms, then offer a few specific steps. The writing is first-person and argumentative rather than promotional, with longer blog or press pieces linked as supporting material rather than serving as the main event.
- **Security mission tied to the current employer's product**: Sofer's priorities reflect the role. Announcing the move to SysAid as Chief Information Security Officer after nearly four years at Align Technology protecting global innovation, they describe the service desk as the heart of every company and SysAid as transforming IT service management through AI-driven orchestration. Their stated mission is to ensure that innovation is built on trust and world-class security, securing AI-powered service management as the executive responsible for it.

## Work to read

- [Shadow IT has moved inside your identity provider](https://www.linkedin.com/posts/nirsofer_itsm-softwaremanagement-itleadership-activity-7497574644854460416-hx7z)
- [Why shadow IT is also a license-compliance problem](https://www.linkedin.com/posts/nirsofer_software-license-compliance-the-shadow-activity-7474724119444578304-a3VD)
- [The CEO, CFO, CISO power triad in the age of AI](https://www.linkedin.com/posts/nirsofer_cyber-digital-transformation-and-ai-convergence-activity-7441872057480458240-Ry-W)
- [Joining SysAid as Chief Information Security Officer](https://www.linkedin.com/posts/nirsofer_ciso-newbeginning-sysaid-activity-7450255642201669633-u_lF)

## Brand relationships

- **SysAid** (employment)
- **Align Technology** (employment)

## Partnerships

Nir Sofer's posts offer no documented sponsorship, paid partnership, or brand-collaboration opportunity. They cover cybersecurity, identity, shadow IT, and IT service management, and direct readers to blog posts on the SysAid website and a SysAid survey report, but do not specify a bookable commercial format, deliverables, pricing, or how to request one. Brands should ask whether Sofer accepts partnerships and, if so, about the format, cost, and booking process; expect to negotiate a custom arrangement rather than choose from a published package.

## Alternatives

- Lucas Hathaway: Choose Hathaway over Nir Sofer when the client's first-month deliverable is an AI governance program rather than an identity audit. The posts answer the question teams ask first — where to start — with a sequence: benchmark against the NIST AI Risk Management Framework or the financial-services framework from CRI, then build four things. First, written AI policies matched to how the team actually works, not copied from a template. Second, an AI risk assessment integrated into the company's existing risk process. Third, vendor security reviews extended with AI questions, examining a model, its data handling and its documentation alongside the vendor's SOC 2. Fourth, incident-response playbooks for a model acting on its own or reaching a customer with a confidently wrong answer. The vendor side is unusually practical: ask two triage questions per vendor — does it touch customer data, and does it make or influence a decision about a person? Then send a one-paragraph discovery email to critical and high vendors to build a review queue, and add a renewal clause requiring notice before a new AI feature is switched on. The dated record of what was asked, what the vendor said and what was decided is the artifact an examiner looks for. For a B2B SaaS security company whose board is asking for AI risk oversight, or whose own product ships AI features its customers must review, this maps more directly to an AI governance program than identity-perimeter work. The working session ends with a written benchmark and roadmap, a concrete week-one artifact.
- Sankarsan Biswas: Choose Biswas when the engagement calls for framework alignment and executive narrative rather than a hands-on discovery sprint. The writing works through the NIST Cybersecurity Framework functions — govern, identify, protect, detect, respond, recover — and argues that resilience is measured by how well an organization sustains trust during disruption, not by whether it prevents every incident. It describes stakeholders as expecting transparency in response, resilience in recovery, accountability in learning, and continued delivery of value. For a board-level story about governance, recovery and accountability, or a mapping of the client's controls onto NIST CSF, this is the register the creator works in. Biswas also announced a certification guide for ITIL Version 5, named a technical reviewer, and wrote about service management expanding to cover digital products, ecosystems, AI and automation, governance, risk and sustainability. The argument is that certification supplies knowledge, while value comes when it changes how people decide and collaborate. A client that sells service-management or ITSM software, or needs framework and certification education for its own practitioners and customers, gets an authored teaching credential on the framework side rather than another set of opinion posts.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/