Loading story…
Prominent women leaders across the cybersecurity industry are being recognized for their transformative impact on security culture, technical innovation, and inclusion. Alex Spigel of Choice Cyber Solutions has focused on bridging the gap between compliance and organizational culture, emphasizing the human element in security leadership and helping managed service providers elevate their security standards. Mea Clift at Liberty Mutual has leveraged her early experiences with cyber threats to drive governance, risk, and compliance initiatives, integrating frameworks like Zero Trust and NIST into enterprise strategies while mentoring the next generation of professionals. Joyce Brocaglia, founder of the Executive Women’s Forum, has spent decades building a global community to advance women in cybersecurity, risk management, and privacy, hosting numerous events and fostering leadership pipelines. Inna Vasilyeva of HUMAN Security has contributed to major cybercrime disruptions through technical analysis and threat intelligence, while also mentoring future defenders and advocating for resilience over perfection. Frances Zelazny, CEO of Anonybit, has pioneered privacy-preserving biometric infrastructure, demonstrating that privacy and biometrics can be complementary and shaping responsible-use guidelines that influence modern data protection laws. Charlotte Wylie at Okta has championed a human-centered approach to security, leading initiatives like the Okta Secure Identity Commitment to combat identity-based attacks and foster a culture of shared responsibility. Rebecca Taylor of Sophos has built inclusive communities for women in cyber, co-founding the Cyber Agony Aunts to provide support and reduce isolation, and being recognized as Cybersecurity Woman of the Year. Priyanka Aash, co-founder of FireCompass, has leveraged AI to emulate real-world attacks and close the gap between attacker speed and defender response, while also building large communities for security leaders. Mary Carmichael of Momentum Technology has bridged the worlds of finance and cybersecurity, applying governance and risk management principles from accounting to digital trust and AI oversight. These leaders have not only advanced technical and operational security but have also prioritized mentorship, community-building, and the integration of diverse perspectives. Their collective efforts are shaping a more resilient, inclusive, and innovative cybersecurity landscape, demonstrating that leadership in this field requires both technical acumen and a commitment to empowering others. Through their work, they are redefining what it means to lead in cybersecurity, ensuring that the industry evolves to meet both current and future challenges.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
SC Media published a feature profiling Mary Carmichael of Momentum Technology, highlighting her transition from accounting into cybersecurity and AI governance, and her work connecting finance, governance, and cyber risk.
See what this changes for your reporting obligations and which controls it puts on the clock.
9 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcescworld.com
Open sourcescworld.com
Open sourcescworld.com
Open sourcescworld.com
Open sourcescworld.com
Open sourcescworld.com
Open sourcescworld.com
Open sourcescworld.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A range of cybersecurity job openings are currently available across multiple organizations, including roles such as Cybersecurity Threat Intelligence Analyst, Application Security Engineer, BISO, and Cloud Security Engineer. These positions emphasize responsibilities like vulnerability scanning, incident analysis, risk assessment, and the implementation of security controls in diverse environments such as IT, OT, DeFi, Web3, and cloud infrastructures. Employers are seeking candidates with skills in threat intelligence, application security, risk management, and cloud security, with some roles highlighting the integration of AI tools and collaboration with business units to enhance security posture. In addition to job opportunities, cybersecurity leadership is evolving to prioritize empathy, curiosity, and continuous learning. Myke Lyons, CISO at Cribl, exemplifies this trend by drawing on his unconventional background in the culinary industry to foster a security culture that values mentorship, learning from diverse experiences, and using empathy to guide incident response and team development. This approach underscores the importance of hiring for potential and adaptability, rather than solely technical credentials, and encourages a supportive environment where security incidents are treated as learning opportunities rather than failures.
Jul 12, 2026
Cybersecurity professionals are facing increasing challenges related to workplace inclusion, mental health, and evolving leadership roles. Individuals with disabilities or neurodivergence continue to encounter significant barriers to career progression and workplace acceptance, as highlighted by research from the UK’s National Cyber Security Centre and KPMG UK, as well as Deloitte’s global survey. Despite these obstacles, some professionals have leveraged their experiences to advocate for greater inclusivity and redefine what it means to succeed in cybersecurity. At the same time, CISOs are experiencing high levels of stress and burnout, prompting discussions about the importance of health, wellness, and the need for new support structures such as Business Information Security Officers (BISOs) to help scale security efforts and maintain resilience. The landscape of cybersecurity leadership is also shifting with the emergence of the Chief Trust Officer (CTrO) role, which focuses on safeguarding organizational credibility and trust in addition to traditional security responsibilities. This new position is gaining traction, particularly in technology and software companies, as organizations respond to heightened concerns around privacy, compliance, and AI. The evolving relationship between CISOs and CTrOs raises questions about the future of security leadership and the potential for CISOs to transition into broader trust-focused roles. These developments underscore the need for both structural and cultural changes to support the well-being and career advancement of cybersecurity professionals while adapting to new business imperatives.
Jun 29, 2026
The cybersecurity industry continues to grapple with a persistent talent gap, with organizations struggling to fill critical roles due to a combination of hiring practices and perceived skills shortages. Carol Lee Hobson, CISO at PayNearMe, highlights that the issue is not solely a lack of qualified candidates but also stems from misaligned compensation structures and limited entry-level opportunities. She emphasizes the importance of creating clear pathways for newcomers, including internships and junior roles, to help bridge the gap between education and employment. Retention is another significant challenge, with many professionals leaving due to inadequate professional development, inflexible work environments, and insufficient support from leadership. Hobson notes that fostering a culture of mentorship and continuous learning is essential for building a robust pipeline of future security leaders. Diversity in the cybersecurity workforce is gradually improving, and this trend is seen as a positive force for innovation and resilience within teams. In parallel, industry experts argue that the most effective entry into cybersecurity is not through specialized roles like red teaming but by developing a strong understanding of risk management and business fundamentals. Security Operations Center (SOC) roles and foundational security positions are often more accessible and provide a broader perspective on organizational security needs. The misconception that red teaming is the primary or most prestigious entry point can deter candidates from pursuing other valuable career paths. Understanding how businesses operate and what assets need protection is considered more critical than technical prowess in offensive security for those starting out. Podcasts and industry discussions reinforce the message that a well-rounded skill set, including communication and risk assessment, is highly sought after by employers. The evolving landscape of cyber threats requires professionals who can adapt and think strategically, not just technically. Organizations are encouraged to rethink their hiring criteria, focusing on potential and aptitude rather than rigid experience requirements. By aligning compensation, offering flexible work arrangements, and investing in employee growth, companies can better attract and retain top talent. The collective insights from industry leaders and practitioners underscore the need for a holistic approach to cybersecurity career development, balancing technical skills with business acumen and people-centric strategies. As the field matures, the emphasis is shifting toward building sustainable, diverse, and adaptable teams capable of meeting the complex challenges of modern cyber risk.
Jun 29, 2026