Jason Pufahl runs revenue at Vancord, which is a slightly unusual job for someone who spent the last 20 years in information security. He's also a partner and sits on the Board of Directors, so the growth of the company isn't an abstract goal for him. It's personal.
The path here wasn't accidental. Jason ran security at the University of Connecticut as their CISO, then joined Vancord to lead the security practice and help shape it into a full MSSP. Now he runs the revenue side, which sounds like a pivot until you talk to him for ten minutes. His view: selling security isn't really about selling. It's about understanding what an organization is actually exposed to, telling them the truth about it, and being honest about what it takes to fix. The companies that figure that out tend to grow. The ones that don't, don't.
He works with clients on the messy stuff: CMMC, NIST 800-171, HIPAA, FERPA, CJIS. The compliance frameworks that sound dry until you're three weeks from an audit. He holds a CISM and a Master's in Educational Technology from UConn.
You can hear him every week on CyberSound, Vancord's podcast, where he and the team talk about what's actually happening in cybersecurity without the vendor spin. He also speaks at industry events, usually about leadership, compliance, or what it really takes to defend a mid-sized organization in 2026.
When he's not working, he's mountain biking, running, skiing, or playing guitar. Probably not all on the same day.
