Darktrace, a global leader in AI-powered cyber defense, has named Terry Doyle as its inaugural Chief Information Officer (CIO). The appointment marks a significant step in the company's maturation, signaling a focus on strengthening its internal enterprise technology infrastructure to support its ongoing expansion. Doyle, who brings extensive experience from CIO roles at Team Internet Group, RWS, and GroupM, will join the executive committee and report to CFO Suman Raju. His primary mandate is to unify the company's disparate technology services into a cohesive enterprise IT and data function, building the operational backbone required for a large, publicly traded company.
The creation of a CIO position at Darktrace is a strategic move driven by several factors:
Terry Doyle brings nearly three decades of experience in leading large-scale technology functions within global organizations. His background includes:
This experience in managing technology for large, multinational public companies makes him well-suited to build out the enterprise IT function at Darktrace.

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Help others stay informed about cybersecurity threats
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.