Marisa T.

I am passionate about the intersection of Information Security and User Experience. I believe Security Awareness and Human Risk Management is more than regular phishing simulations; it requires sound adult learning theory and an effective educational strategy. A huge part of Human Risk Management is supporting the transformation of business processes and policy to incorporate security best practices while balancing business needs. Human risk is a unique aspect of Information Security that cannot be solutioned away with technology, and the risks have only gotten worse with the explosion of artificial intelligence (AI). I am an Information Security Professional with almost 10 years of experience, specializing in managing human-related risk through developing and implementing comprehensive security training programs, conducting security assessments, and establishing best practices and policies for data security and privacy. With a strong foundation in security awareness, security operations, and cybersecurity project leadership, I have significantly enhanced the organization's security posture and human risk management, and fostered a culture of continuous learning and improvement. I have also supported the evolution of cybersecurity governance and risk management as it relates to AI. I hold a bachelor’s in information security, a master’s in education, and a professional certificate in governance, risk, and compliance (GRC).