Built to guide.

Built to last.

Our story starts in 2009. At the time, I was the Chief Information Security Officer (CISO) for a company in Vermont and was aspiring to be a respected company executive. I’ve always been enamored with information security, and I worked diligently to establish my place in the profession. I completed certifications and did everything I could to establish credibility. I wanted to prove I was worthy of this opportunity. I believed a security leadership role in a growing company would be the pinnacle of my career, and I had arrived.

As a new CISO, I quickly learned the job wasn’t all about security. There was a lot of politics. People stepped on others to advance their careers, and budget dollars were scarce. I learned my new job was to be the political face of the security team and to evangelize the need for security to internal business units.

In 2013, I had a small budget that was OpEx (operational expenditure), not CapEx (capital expenditure). I could hire consultants (OpEx) but couldn’t arm them with security tools (CapEx). So essentially, I had a bunch of farmers with pitchforks fighting an army with automated cybersecurity weapons. To make matters worse, I couldn’t find a single security company or partner to help me deliver my security program. I could find security partners to do security testing, but they couldn’t do any security engineering. I could find companies to help me implement Splunk, but they weren’t that good at Splunk and didn’t know anything about security. I could find incident responders, but they couldn’t do anything else security-related. I quickly realized that the security industry was, and still is, a very fragmented market full of niche vendors. The sum of these vendors didn’t equal a full security program.

It was around 2013 when I’d had enough. After all the years I spent evangelizing for budget and receiving half-baked solutions from a fragmented security vendor market, I was at a point where I was bad-mouthing an industry that I grew up loving. My watershed event came that same year when my management made me hire a Big Four company to do an ISO 27001 security assessment. That Big Four company charged me a lot for the assessment, but from the company management standpoint, it was the safe bet because no one can refute what the Big Four suggests. My question to management was: “Why are we having an accounting firm assess our security? You would never have an information security professional suggest an appropriate chart of accounts or do someone’s taxes!”

The short story is that the assessment was a disaster. That Big Four company sent me staff members fresh out of college. Their lead assessor had never done an ISO 27001 assessment. Having been an auditor in the past, I understood the auditee has an obligation to feed the auditor information to arrive at mutually beneficial recommendations, so I helped with the audit, as it was an opportunity to push the security agenda and highlight the issues I needed to be fixed for the management team. But for the big price tag, I expected the auditors to be practiced in the standard. I was, again, disappointed. I helped teach ISO 27001 to their organization. After helping my Big Four partner write the report and do the board presentation, I had transitioned to completely cynical.

In late 2013, I took two weeks off to reset my career. I traveled to Australia with my wife who was speaking at a conference. With the time zone change and alone time, I reflected with uninterrupted thoughts on the last few years. Completely cynical and hating security, I realized I had two options: I could complain and let the issue persist or I could take action. I chose action, and NuHarbor Security was born. When I returned from Australia, I quit my job as a CISO and began NuHarbor’s mission.

Today NuHarbor means “a new understanding of the harbor.” Harbor is a synonym for someplace safe. We do security differently – the right way, and the way it should be done. We’ve walked a hundred miles in your shoes. We’ve sat on your side of the table, we understand the challenges, we understand the frustrations. There’s a better way to do security. Today our mission is to be the absolute best national cybersecurity services firm in the industry. We provide end-to-end security services and are continually evaluating our portfolio to deliver relevant security services. We’ve developed a best-of-breed philosophy around security technology and deep industry expertise around those technologies. Our approach to security, our comprehensive offerings, and our client-first perspective make us a long-term security partner for our clients.

— Justin Fimlaid, CEO & Founder

Justin (he/him) is the founder and CEO of nuHarbor, where he continues to advance state-of-the-art integrated cybersecurity services. He has over 20 years of cybersecurity experience, much of it earned while leading security efforts for multinational corporations, most recently serving as global CISO at Keurig Green Mountain Coffee.

His technical skills span all levels of the cybersecurity stack and nuHarbor stands as one of the most rapidly growing managed cybersecurity firms in the U.S. Justin is also a managing partner at the newly formed Almanna Cyber Fund, an early-stage cybersecurity investment firm, and is fiercely competitive, both in his professional career and earlier as a semi-professional soccer player. Justin serves multiple local organizations in the public interest, including his board membership at Champlain College. Hear him weekly on the podcast Pwned, discuss trends and big questions in cybersecurity.

Tim (he/him) is Chief Revenue Officer at nuHarbor. He is responsible for the company’s revenue and client growth strategy. Tim leads nuHarbor’s go-to-market functions including sales, marketing, and client success, with a focus on scaling the business in a way that is repeatable, predictable, and outcome driven.

With 30 years of experience in cybersecurity and enterprise software, Tim has a proven track record of growing revenue, expanding market share, and building high performing teams. His background includes business development, sales enablement, account management, customer success, and P&L ownership. He brings a deep understanding of how to align go-to-market strategy with client needs and long-term growth. 

Rupal (she/her) is the Chief Financial Officer at nuHarbor. She is responsible for leading the company’s financial strategy, including planning, budgeting, and financial partner relations. Rupal works closely with the leadership team to support nuHarbor’s continued success. 
 
With more than 20 years of financial leadership experience in high growth technology and cybersecurity companies, Rupal has built strong financial foundations and guided organizations through complex growth phases. Her background includes strategic planning, capital strategy, and operational transformation with a consistent focus on creating sustainable value.
 
Rupal is passionate about nuHarbor’s mission to make cybersecurity stronger and easier, especially for public sector organizations that serve the greater good. She is excited to help scale the company’s impact across the critical industries and communities it supports.

Jackie (she/her) is the Vice President of People & Culture at nuHarbor. She is responsible for aligning the people strategy with the business strategy and ensuring that nuHarbor’s culture reflects our values and our passion for making cybersecurity easier for our clients.

Prior to joining nuHarbor in 2021, Jackie spent 19 years at GE Healthcare, where she held several Human Resources roles, ranging from Global HR Business Partnership to Organization & Talent Development. Before her career at GE, Jackie held HR and manufacturing operations roles with Tropicana Beverages, Ocean Spray Cranberries, and Douglas Aircraft Company. She also owned a consulting business specializing in organizational and leadership development.

Alyssa (she/her) is the Vice President of Marketing at nuHarbor, where she oversees the strategic development and execution of marketing initiatives across the organization. She creates go-to-market strategies that support scalable organic and inorganic growth.

Before joining nuHarbor, she held executive roles at multiple public and private companies. Her experience in pipeline development, channel marketing, and content strategy has contributed to significant revenue growth across a diverse set of markets and channels. Alyssa is known for building, coaching, and retaining high-performing teams.

Alyssa is passionate about simplifying cybersecurity and is proud to support nuHarbor’s mission to strengthen security for the organizations and communities it serves.

Kyle (he/him) is the Vice President of GTM Strategy at nuHarbor. He leads the development and execution of strategic product initiatives, ensuring that nuHarbor’s solutions are aligned with the evolving needs of both public and private sector organizations. His expertise in driving data-driven techniques enables clients to stay ahead of emerging cybersecurity threats.

With over two decades in the cybersecurity industry, Kyle has held leadership roles across multiple domains, including security operations, network architecture, and product innovation. Prior to joining nuHarbor, he led cross-domain technology teams, spearheading security and systems initiatives to protect organizations from advanced threats. His work has helped safeguard hundreds of organizations with a combination of innovative approaches and operational excellence.

Kyle’s practical approach to technology and deep understanding of client challenges make him a trusted leader at nuHarbor. His passion for developing tailored security solutions ensures that clients receive expert guidance that drives meaningful outcomes.

Mark is the Vice President of Client Management at nuHarbor.  He is responsible for managing the Account General Managers (AGMs) who are the primary contacts for nuHarbor clients.  Mark and his team handle all escalated client requests and strategically complex collaborations to ensure that nuHarbor resources are aligned appropriately to maximize our value and impact for every client account. 

With nearly 20 years of cybersecurity experience, Mark brings proven expertise in client management, sales team development, and strategic account leadership. He excels at aligning the objectives of multiple stakeholders, translating complex needs into clear priorities, and helping teams stay focused on measurable results. His attention to detail and commitment to execution help ensure strong outcomes are not only planned, but consistently achieved.