Travis Lapolla

As the Senior Manager of Information Security at JMP, Travis Lapolla is responsible for safeguarding JMP and its customers’ data by strategically overseeing the DevSecOps pipeline, ensuring product security throughout its lifecycle, and implementing industry-leading best practices and frameworks. This role focuses on mitigating risk proactively, maintaining a robust security posture, and fostering a culture of security awareness across development and operations to protect sensitive information and maintain trust.

Lapolla is a seasoned cybersecurity leader with more than 15 years of experience securing enterprise systems, leading compliance initiatives, and architecting resilient IT infrastructures across federal and commercial sectors. Before joining JMP, he served as the Director of Information Security at CoVar LLC, where he led enterprisewide compliance efforts with NIST SP 800-53, as well as NIST SP 800-171; he also spearheaded the company’s certification efforts under the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC).

His background also includes deep technical expertise in patch management, virtualization, directory services, and automated configuration tools. With a foundation rooted in both strategic leadership and hands-on engineering, Lapolla brings a unique ability to bridge executive vision with technical execution, ensuring that JMP not only meets but exceeds security and compliance goals in complex, regulated environments.