Choice Cyber Restructures for New Era of Cyber Regulation
- 2026: CISA's Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) takes effect, mandating 72-hour incident reporting for organizations.
- October 2024: EU's NIS2 Directive enforcement deadline broadens cybersecurity requirements for critical sectors.
- January 2025: EU's Digital Operational Resilience Act (DORA) imposes ICT risk management rules on the financial industry.
Experts agree that Choice Cyber Solutions' restructuring positions it as a strategic partner for organizations navigating an increasingly complex regulatory landscape, emphasizing operational discipline and compliance as critical components of cybersecurity.
Choice Cyber Restructures for New Era of Cyber Regulation
BALTIMORE, MD – February 11, 2026 – As organizations worldwide face an unprecedented wave of stringent cybersecurity regulations, Baltimore-based Choice Cyber Solutions has announced a significant formalization of its leadership team. The move, which elevates former Chief Operating Officer Alex Spigel to Chief Executive Officer, is being positioned not as a simple executive shuffle, but as a strategic realignment designed to navigate the increasingly complex and high-stakes world of digital compliance and security.
The restructuring reflects a broader industry trend where cybersecurity firms are evolving beyond technical break-fix solutions to become strategic partners in governance, risk, and compliance. By clarifying roles and reinforcing its executive team, Choice Cyber Solutions is preparing for a future where regulatory adherence is as critical as threat detection.
A Strategic Response to a Shifting Regulatory Tsunami
The timing of the leadership evolution is no coincidence. It comes as a cascade of new and updated regulations are set to take effect globally, placing immense pressure on businesses and the Managed Service Providers (MSPs) that support them. This new regulatory environment demands a higher level of operational discipline and strategic foresight from compliance service providers.
In the United States, the landscape is being reshaped by several key initiatives. The Cybersecurity and Infrastructure Security Agency's (CISA) Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), expected to become effective in 2026, will mandate that a wide range of organizations report significant cyber incidents within 72 hours. Simultaneously, the recent update to the NIST Cybersecurity Framework (CSF 2.0) expands its focus to all businesses and places a new emphasis on governance and supply chain risk—a change that directly impacts the MSP community. These are compounded by new SEC disclosure rules and stricter FTC Safeguards, which increase accountability and shorten reporting timelines.
Across the Atlantic, European regulations are adding another layer of complexity. The EU's NIS2 Directive, with its October 2024 enforcement deadline, broadens the scope of cybersecurity requirements for critical sectors, while the Digital Operational Resilience Act (DORA) imposes specific ICT risk management rules on the financial industry by January 2025. This regulatory tightening underscores the need for expert guidance and robust compliance frameworks.
It is within this challenging context that Choice Cyber Solutions has acted. "As regulatory expectations continue to rise, it's essential that we operate with clear ownership, strong alignment, and disciplined execution," said Alex Spigel, the newly appointed CEO. "This structure allows us to scale responsibly while maintaining the white-glove experience and trusted relationships our clients and partners rely on."
New Leadership for a New Challenge
Leading the firm's charge is Alex Spigel, who steps into the CEO role after serving as Chief Operating Officer. A recognized industry leader and a CompTIA Member of the Year, Spigel is known for her focus on the "human side of cybersecurity" and her advocacy for making compliance a competitive advantage rather than a burdensome cost center. Her promotion signals a commitment to a client-centric strategy grounded in deep industry expertise and clear communication.
Co-founder Steve Rutkovitz will continue to shape the company's long-term trajectory as President, focusing on company strategy and vision. With over 30 years of industry experience across more than 20 regulatory frameworks, Rutkovitz provides the foundational guidance that has defined the company since its inception.
The new structure is bolstered by two other key appointments. Jess Schroder takes the helm as Chief Information Officer, where she is responsible for the firm's internal systems, information security, and overall technical strategy. Her role is critical for ensuring the integrity and security of the very services the company provides to its clients. Rounding out the team is Martin Hengst as Director of Operations. With a focus on execution, process improvement, and delivery consistency, Hengst is tasked with ensuring the firm can scale its high-touch service model without sacrificing quality.
The New Frontier: Operational Excellence in Compliance
Choice Cyber Solutions' leadership formalization highlights a critical evolution in the cybersecurity services market: the pivot toward operational excellence as a core differentiator. As threats become more sophisticated and regulations more punitive, the ability to deliver consistent, auditable, and efficient compliance services is paramount.
The cybersecurity industry is grappling with a severe talent shortage, with millions of positions remaining unfilled globally. This makes operational efficiency not just a business goal, but a strategic necessity. By creating a structure with clear accountability—from Spigel's strategic oversight to Hengst's focus on delivery—the firm aims to maximize the impact of its expert team and streamline decision-making. This internal discipline is the backbone required to deliver on its promise of a "white-glove experience" for clients navigating complex frameworks like CMMC or HIPAA.
This focus on a robust internal framework allows the company to more effectively execute its core "Assess. Address. Maintain.®" methodology. The structure is designed to ensure that from the initial risk assessment to the implementation of security controls and ongoing maintenance, every step is handled with consistency and precision. For clients, this translates into greater confidence that their compliance and security posture is not only being achieved but is also sustainable and defensible under regulatory scrutiny.
By formalizing these leadership roles, Choice Cyber Solutions is building an organizational engine capable of meeting the market's growing demands. The move suggests a mature understanding that in the modern security landscape, strong internal governance is a prerequisite for providing effective external guidance, ensuring the firm is well-positioned to serve as a long-term partner for organizations navigating an era of heightened digital risk.
