Skip to content

About me

I came to security through people and stayed for the systems.

I’m Coco Bloom, founder of Entelechy Security. I help security and GRC leaders turn complex evidence into defensible decisions, and build the programs and tools that put those decisions into practice.

Coco Bloom, founder of Entelechy Security
Coco BloomFounder, Entelechy Security

Security programs should make good decisions easier.

Too often, the people responsible for risk are asked to work through fragmented evidence, inflexible tools, and processes that create more administration than insight. The result is a great deal of activity without enough clarity.

I founded Entelechy Security to help change that.

My work sits where governance, operations, and technology meet. I help organizations understand what matters, build workflows around real decisions, and create security programs that remain useful after the initial project is finished.

I look beyond the control to the system around it.

A control can appear sound on paper and still fail in practice. Responsibilities may be unclear. Evidence may arrive too late. A workflow may technically exist but be difficult enough that people quietly work around it.

That is why I begin with how the work actually happens: who makes the decision, what they need to know, where the process slows down, and what must be defensible afterward.

The goal is not complexity for its own sake. It is a program people can understand, operate, and trust.

I’ve worked inside the problems I now help organizations solve.

My experience spans managed service providers, GRC platforms, and international organizations with dozens of subsidiaries and acquisitions. I have built and operated third-party risk processes at scale, worked directly with business and technology teams, and seen what happens when governance does or does not fit the reality of an organization.

That experience shaped my approach: practical enough for daily operations, structured enough for scrutiny, and flexible enough to evolve.

Experience
5 years in cybersecurity and GRC
Perspective
Security, psychology, and workflow design
Scale
600+ vendor portfolio supporting 3,000 users

Good governance is designed for human beings.

My first degree is in psychology, and it continues to influence how I approach security work.

The wording of a question changes the quality of the answer. A workflow that conflicts with how people actually work will eventually be bypassed. A control that no one understands may technically exist while failing in practice.

Psychology taught me to pay attention to behavior, incentives, communication, and context. In security, those details often determine whether a program becomes part of the organization or remains a document no one uses.

Thoughtful, direct, and close to the work.

Entelechy is intentionally founder-led. When we work together, you work directly with me, from understanding the problem through designing and implementing the solution.

I ask detailed questions, explain my reasoning, and care about whether the final result works for the people who will inherit it. I will challenge unnecessary complexity, but I will never simplify away the accountability your organization needs.

If the background fits the problem, let’s talk about the problem.

Tell me what is creating friction, what decision you are trying to make, or what your current process is not giving you. We can start there.

Discuss a project