Some roads you don't travel alone.

Ophir Cyber is fractional CISO leadership focused on one thing: bringing your teams together and finding the path forward. It's built on trust earned by someone who's traveled this ground before and knows where the real challenges are.

One core engagement. Nine focus areas beneath it.

Ophir Cyber's primary offering is Fractional CISO Leadership — a guide who's on the route with you, not a report that gets left at basecamp. Assessments, board reporting, compliance, AI governance, and more all happen inside it, brought in exactly when your business needs them.

Core Offering

Fractional CISO Leadership

Ongoing, embedded executive security leadership — scaled to fit your budget and your stage, without the full-time executive price tag or the year it takes to hire one.

  • Direct ownership of security strategy, architecture, and roadmap
  • Board and executive risk reporting in business terms
  • Vendor, budget, and team oversight — as much or as little as you need
  • A single accountable owner, not a rotating cast of consultants
Explore Fractional CISO Leadership
Assessment

Program Assessment & Roadmap

A clear-eyed read on where your security program actually stands, and a prioritized roadmap tied to business risk — not a 40-page checklist audit.

Board Reporting

Executive & Board Risk Reporting

Security metrics translated into the language your board and CFO already use: exposure, return, and tradeoffs — not CVE counts.

Compliance

Privacy & Compliance Alignment

PCI DSS, GDPR, CCPA, and framework alignment (NIST CSF, ISO) handled as a business function, coordinated with legal — not bolted on separately.

Emerging

AI Governance & Enablement

A practical governance framework that clears the path for AI adoption instead of blocking it — the same approach used to stand up an enterprise AI Governance Board from scratch and get teams building safely, faster.

Risk

Risk Assessments

A clear, prioritized view of where your actual exposure sits — technical, operational, and third-party — sized to business impact, not just severity scores.

Performance

OKR & KPI Development

Turning security priorities into measurable goals your team can actually execute against — and your leadership can actually track.

Strategy

Strategy Development

A multi-year security and technology strategy tied to business objectives — not a framework checklist, but a plan your team can actually execute and your leadership can actually fund.

Transformation

Digital Transformation

Fractional CIO/CTO leadership for the technology transformation itself — and the people who'll run it after I leave.

Mentoring

CISO | CIO Mentoring

Confidential one-on-one advisory for the executive carrying the role.

Alternative Path

Custom Security Advisory

Not ready for an ongoing retainer? A scoped-to-you engagement that closes whatever specific gap brought you to the table, with an advisor on call afterward.

Each focus area also has its own detail page. See the full engagement model →

Built through two decades at brands that couldn't afford to get this wrong.

Specialized Bicycle ComponentsFounding CISO → Deputy CIO
2019 – Present
Vail ResortsDirector, Information Security, Risk & Compliance
2014 – 2019
Connect for Health ColoradoFounding Privacy & Security Officer
2014
Ball Aerospace and TechnologiesEnterprise Security Analyst
2011 – 2014
IBMProgressive Security & Compliance Leadership
2001 – 2011

A guide, not a vendor.

Ophir Cyber is a fractional CISO practice founded on one idea: you shouldn't need Fortune 500 headcount to get Fortune 500-caliber security leadership.

Ryan S. Dunn, Founder of Ophir Cyber
Ryan S. Dunn
Founder, Ophir Cyber
CISSP · CISA · CRISC
CIPP/US · Associate C|CISO
Broomfield, CO
Security and IT leadership across Consumer goods · Resort & hospitality
Aerospace & defense · Health insurance
Founder

Ryan spent 25 years in cybersecurity leadership before deliberately stepping into a broader business technology role — Deputy CIO, leading Product & Supply Chain Technology, and Data & Analytics — to close a gap he'd watched play out for over a decade: security that operates apart from the business it's supposed to protect. He founded Ophir Cyber to close that gap directly: security leadership that starts with the business, not the tech stack.

Off the clock, he's usually somewhere above treeline — which is exactly where the firm's name comes from.

Why "Ophir."

Ophir Pass sits above 11,000 feet in Colorado's San Juan Mountains, near Ouray and Telluride — a narrow, exposed shelf road cut into the mountainside in 1881 to reach the mining camps below. It's still one of the more demanding routes in the state: short, technical, and unforgiving of a wrong line.

It's also where I've spent a lot of the time that isn't devoted to security programs and board decks. The mountains are where I go to think clearly, and Ophir Pass in particular has become a kind of personal marker — a route worth respecting, not fearing, once you know it.

The name of the pass itself traces back further, to Ophir, the legendary biblical land of gold — the same reason gold-mining towns across the American West borrowed the name. That layered meaning is exactly the point: a route built to protect something valuable, that takes real experience to navigate well.

That's the job. No organization needs someone shouting about every exposed ledge on the mountain. It needs someone who's made the crossing, knows where the real drop-offs are, and can get the business through to the other side — without unnecessary detours, and without misjudging the line.

Let's talk about what you're protecting.

A first conversation is free, and it's a fit check — for you and for us. If it's not the right match, you'll leave with a clearer picture of where your program stands either way.

Opens your email client with the details filled in — nothing is stored or sent anywhere else.