Illumia names Sean Bruton as chief security officer

Illumia has appointed Sean Bruton as Chief Information Security Officer, putting a security executive with more than 25 years of experience in charge of its cybersecurity programme.

Bruton will lead information security strategy and oversee security and compliance programmes across the business. He will work with teams in technology, product, legal, compliance, IT and cloud operations, and report to Taran Lent, Chief Technology Officer.

The appointment comes as Illumia broadens its use of artificial intelligence across its operations. Bruton's background includes building compliance technology, leading managed security services and applying AI in security operations.

Illumia provides software for payments, identity, commerce and foodservice operations. More than 10,000 institutions in higher education, healthcare and senior living use its systems, in sectors where service disruption and data security are closely watched.

Career background

Before joining Illumia, Bruton was Chief Technology Officer at managed security services provider Zyston, where he re-architected the company's security operations around AI.

He also co-founded Complyify, a compliance automation platform designed to support PCI, NIST, HIPAA, HITRUST and SOC 2 programmes. Zyston later acquired the company.

Earlier in his career, Bruton built and delivered managed security and compliance services at NeoSpire and Hosting.com. That mix of product, service and compliance work gives him experience across both operational security and audit-focused environments.

Lent tied the appointment to customer trust and the company's long-term product development, noting that the business handles important workflows and data for institutional customers that depend on continuity.

"Security is fundamental to the trust our customers place in us. They hand us their mission critical workflows, their data, and the insights that run their institutions, and they're trusting us to carry that responsibility not just today but through the next decade of service innovation," said Taran Lent, Chief Technology Officer, Illumia.

Lent also pointed to Bruton's experience working with customers and in regulated environments.

"Sean has spent his career thinking about security from the customer's perspective. He brings a valuable combination of technical depth and customer insight, having built security tools, managed compliance programs through audits, and worked directly with organizations that depend on security services to support their own businesses. That perspective will be valuable as our security program continues to evolve alongside our business and the needs of the institutions we serve," Lent said.

AI and compliance

The choice of a security leader with AI experience reflects a broader shift among software companies as they add generative AI and automation tools to internal processes and customer-facing products. Those changes have pushed cybersecurity leaders to address data governance, model use, supplier risk and regulatory compliance at the same time.

For companies serving education and healthcare organisations, those questions can be especially acute because customer environments often combine sensitive personal data, ageing infrastructure and strict audit requirements. Illumia's business spans payments, access, credentialing and foodservice systems, placing security and compliance at the centre of day-to-day operations rather than at the edge of the product set.

Bruton said his approach is to integrate security earlier in product and operating decisions.

"Strong security should give teams and customers confidence to move faster. That starts with building security into products and decisions early, understanding what customers are being asked to prove, and making those requirements easier to navigate. I'm excited to help Illumia keep security closely connected to how we build, operate, and serve our customers," said Sean Bruton, Chief Information Security Officer, Illumia.

Illumia was formed from Transact and CBORD and sits within Roper Technologies. It is continuing to strengthen its security and compliance programmes as it expands the use of AI across the business.