How CTOs Are Navigating AI, Cybersecurity, and Growth Challenges By Anthony Sochan, Co-Founder, Think & Grow
The role of CTOs is evolving rapidly, driven by the transition to cloud-native SaaS solutions, the integration of AI, and increasing cybersecurity challenge.
Think & Grow’s CTO Report examines these transformative trends, focusing on how they’re reshaping leadership in post-pandemic shifts such as remote work and hybrid work.
These forces, along with fast-paced technological advances and notable security incidents, are redefining the priorities and strategies of technology leaders.
I had the pleasure of hosting our Think & Grow CTO Webinar that brought together experts to share insights on these trends and their impact.
Panelists included:
A live poll during the webinar revealed that cybersecurity and compliance topped the audience’s concerns, closely followed by the challenge of staying ahead of emerging technology trends. Below are highlights from the panel discussion.
Joseph noted Australia's rise as a target for cyberattacks, coupled with stricter regulations like OAIC, has heightened the focus on security. Boards are now hyper-focused, driving teams to resolve issues rapidly. AI-driven threats, such as bots capable of advanced data scraping and penetration, are transforming the landscape, increasing the urgency for robust security measures. Joseph emphasised tools like ASD’s cybersecurity programs as valuable resources for knowledge transfer and threat intelligence.
Pierre says balancing security with rapid growth is challenging, especially with AI’s complexities. Operating across multiple markets with varying regulations enables InDebted to test features in less-regulated regions first, minimising risks before broader deployment. This phased approach provides a competitive edge against firms in heavily regulated markets.
Rajini highlights concerns specific to AI, such as data pollution (where bad or corrupted data affects model performance) and hallucination (AI generating inaccurate or fabricated outputs), which are critical aspects of building safe and secure AI models. She underscores the importance of strong security practices like managing access controls, permissions, and token rotations to protect sensitive systems and data.
Rajini emphasises that security is not solely the responsibility of a specific team but a shared organisational responsibility, requiring contributions across all levels of the company.
Security concerns can limit tool adoption and new processes, but smaller organisations like Beforepay can act more nimbly. They leverage AI tools internally and make quick decisions, avoiding bureaucratic delays. In contrast, larger organisations face challenges navigating red tape, slowing their ability to stay competitive.
Key Takeaways:
Joseph emphasised the importance of keeping CreditorWatch’s developers motivated by minimising mundane tasks like bug fixing and security tickets through automation. This boosts productivity and satisfaction, enabling developers to focus on meaningful, innovative work. He highlighted the need for empathy and collaboration, ensuring developers understand the "why" behind projects to foster deeper engagement and innovation.
Pierre shared how InDebted navigated challenges during a difficult year, including layoffs and a shift to a profitability-focused model. This approach strengthened cross-functional collaboration between engineering, product, and other teams, resulting in tighter alignment and better outcomes. After regrouping, they successfully raised Series C funding and are deploying it with an ROI-driven strategy focusing on sustainable growth.
Rajini noted that engineering culture has matured, moving beyond silos to a collaborative approach involving product, design, and data teams. While Beforepay has cultivated a strong interdisciplinary culture, the current challenge lies in effectively integrating risk and compliance functions. She emphasised that creating successful products now requires holistic collaboration across all disciplines rather than focusing solely on engineering.
Rajini says Beforepay has shifted from long-term, transformational roadmaps to a quarterly OKR-based approach, aligning all teams, not just engineering, to shared business goals. Prioritisation is ruthless, focusing on what’s critical for the business and its customers, including cybersecurity and compliance. Weekly all-hands meetings ensure cross-functional alignment and progress tracking. Celebrating wins every quarter over 80-90% of the OKRs is a much better outcome than not achieving anything over a while.
Pierre shared that after significant restructuring, InDebted abandoned traditional tools and rebuilt its roadmap from scratch. Quarterly objectives drive focus while allocating resources for unplanned work to minimise costly context-switching. During M&A activities, integration strategies are phased, with a focus on collaboration and leveraging synergies between teams. Vetting new teams through pair programming helps assess fit and problem-solving approaches.
Joseph noted that board interactions revealed a surprising focus on operational oversight rather than strategy alone. Taking an AICD course helped Joseph understand the board’s priorities, which include compliance, metrics, and risk management, particularly in response to heightened regulatory scrutiny. Adjusting to working with external board members required a shift in communication style, as they lack the operational depth of internal stakeholders and rely on concise, data-driven insights.
I would like to express my gratitude to our panellists for sharing such valuable insights. You can explore these topics and other interesting reports in our reports section.
At Think & Grow, we are committed to supporting your growth journey—whether it’s scaling your team, entering new markets, or developing successful growth strategies. Let’s connect!