Women In Security Magazine Issue 22

22

NOVEMBER • DECEMBER 2024

PHOENIX RISING: A PERSONAL TALE OF RESILIENCE AND RENEWAL P10 RISING LIKE A PHOENIX IN THE FACE OF CYBERSECURITY ADVERSITY P40 RESILIENCE AND INNOVATION: WOMEN’S RISING INFLUENCE IN CYBERSECURITY P46

Rising

PHOENIX

A TALE OF RESILIENCE AND RENEWAL

W W W. W O M E N I N S E C U R I T Y M A G A Z I N E . C O M

FROM THE PUBLISHER Phoenix rising: A tale of resilience and renewal in women’s cybersecurity

W

elcome back to another issue

journey, whether as an Olympic competitor or as a

of the Women in Security

role model in cybersecurity, illustrates her tenacity

magazine whose theme

and determination.

is phoenix rising, which symbolises for me resilience

Georgia Bell's story is one of someone who became

and renewal in women’s

a 'comeback queen' against all the odds. After a

cybersecurity.

college injury, she quit running before reaching her full potential. Mentally and physically exhausted, Bell

Many individuals in the industry have incredible

redirected her focus to cybersecurity. Five years later

stories of resilience and renewal, including myself.

her passion for running was rekindled. With the help

It's what we do best. It's why we never give up, even

of her former coach and champion of change, Trevor

when it seems we should. It's why we fight for our

Painter, she began combining rigorous training twice

dreams and the dreams of our children. For me, and

a day with her full-time job in cybersecurity.

for many others, giving up is never an option. We face challenges head-on and continue to push forward,

"I can get it done even when things are going wrong,"

ensuring a brighter future for all.

Bell told BBC.com.

I live by this quote:

Like many women in cybersecurity, she has had to continually prove her expertise by pushing

“Even on rough days when you feel like you can’t

against gender biases and stereotypes. Despite the

take any more, remind yourself that your track

challenges, she never gave up and never lost sight

record for surviving a shit storm is 100 percent.”

of her dreams. Georgia Bell's journey is a shining example of resilience that inspires women in both

THE JOURNEY OF RESILIENCE

athletics and cybersecurity to persist and thrive

Cybersecurity threats evolve every second and every

against all the odds.

minute of the day. The resilience and renewal of women in cybersecurity stand as a testament to the

Each year my team and I run the Australian Women

power of diversity and innovation: power beautifully

in Security Awards to celebrate such stories of

embodied by the leaders and rising stars who

resilience and excellence. These awards highlight

navigate and shape the cybersecurity landscape.

women who have made significant contributions to the cybersecurity field, recognise their relentless

As I write this during the Olympic season, it's fitting to

pursuit of innovation and their role in protecting our

draw parallels between the resilience seen in sports

digital world.

and the perseverance required in cybersecurity.

2

Consider European medal-winning track athlete

EMBRACING RENEWAL

and award-winning cybersecurity expert Georgia

An ability to embrace, and successfully navigate, a

Bell. Her story, much like that of many women in

process of renewal is essential for women working

the field, is a powerful example of resilience. Her

in cybersecurity. As the cybersecurity landscape

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Abigail Swabey

changes, so do the roles and opportunities for

Following my passion, like Georgia Bell, I aim to

women. The Australian Women in Security Network

travel the world, elevating and celebrating women in

(AWSN) plays a pivotal role in this renewal process.

security. There is much work to be done in this area,

By fostering a supportive community, AWSN

and awards like these can help shape the future and

helps women at all career stages find mentorship,

highlight those who are truly making our world a

resources and opportunities to grow.

safer place.

Globally, similar networks and initiatives are springing

LOOKING AHEAD

up, creating fertile ground for renewal and growth.

The future of women in cybersecurity continues

Organisations like Women in CyberSecurity (WiCyS)

to be one of resilience and renewal. With ongoing

and the Women’s Security Society (WSS) are leading

support from networks, government initiatives and

the charge, providing platforms for women to thrive

industry leaders, the opportunities for women in

and lead in cybersecurity.

this field are limitless. By embracing diversity and fostering an inclusive environment, we can ensure the

THE ROLE OF GOVERNMENT AND INDUSTRY

cybersecurity landscape remains not only secure, but

Government initiatives are also key to driving change.

also vibrant and dynamic.

In Australia the government has been proactive in promoting gender diversity in cybersecurity.

We must remember to be kind and always offer

For example, the Cyber Security Strategy 2020

mentoring, advice and career help whenever and

emphasised the importance of a diverse workforce

wherever we can. It's crucial to elevate those who

and promised funding to increase the participation of

contribute to initiatives and programs, to celebrate

women in cybersecurity.

a team's achievements, not just the leader's.

Acceptance and support are essential for everyone to

Similarly, companies across the globe are

thrive. By working together and uplifting one another

recognising the value of diversity. By implementing

we can create a more inclusive and empowered future

policies that promote gender equality and by

for women in cybersecurity.

providing opportunities for women to excel, these organisations are not only fostering a more inclusive

The phoenix of women’s cybersecurity is rising,

work environment but also driving innovation and

and its future is brighter than ever.

effectiveness in their cybersecurity measures.

CELEBRATING ACHIEVEMENTS The resilience and renewal of women in cybersecurity are not just about overcoming challenges; they are about celebrating achievements and paving the way for future generations. The Australian Women in Security Awards, for example, not only honour

Abigail Swabey PUBLISHER, and CEO of Source2Create

individual excellence, they also inspire young women to consider careers in cybersecurity. In 2025 my team and I plan to expand these awards internationally, so stay tuned—we may be coming to a country near you sooner than you think!

I S S U E 22

www.linkedin.com/in/abigail-swabey-95145312

aby@source2create.com.au

WOMEN IN SECURITY MAGAZINE

3

CONTENTS

2

FROM THE PUBLISHER

INDUSTRY PERSPECTIVES

COLUMN Resurgent adversaries challenge cybersecurity

12

Rising phoenix a tale of resilience and renewal 32

Information security resilience and renewal

36

Rising phoenix: a tale of resilience and renewal

38

Rising like a phoenix in the face of cybersecurity adversity

40

Resilience and innovation: women’s rising influence in cybersecurity 46 Ethical hacking: it’s a man’s world

10

PHOENIX RISING: A PERSONAL TALE OF RESILIENCE AND RENEWAL

WHAT’S HER JOURNEY? Naomi Emma Ekwealor

14

Moni-Ayo Saka

16

Thulasi Uppu

18

Serena Pillay

20

Nadja El Fertasi

22

Anmol Agarwal

24

Sailakshmi Metikota

26

Blessing Duru

28

Leila Assadi

30

104 THE LEARNING HUB 110 JOB BOARD

48

Why continuous security improvement for developers is the key to renewed resilience in the modern security program 52 Cybersecurity and Harry Potter: a phoenix rising from the ashes 54 Maximising your moment

56

Doing it with passion and honouring my father: from engineering graduate to senior cybersecurity executive

58

CAREER PERSPECTIVES Cyber accreditations - what does Australia really need?

64 Homing in on the customer: from financial UX consultant to cyber UX specialist 68 Rising phoenix: reinventing who you are 70

NOVEMBER • DECEMBER 2024

FOUNDER & EDITOR 2024

119 THE AUSTRALIAN WOMEN IN SECURITY AWARDS 2024 COVERAGE

Abigail Swabey

ADVERTISING Abigail Swabey

M A G A Z I N E C O O R D I N ATO R Jane Saafi

JOURNALISTS

98

SURFING THE NET 102

David Braue Stuart Corner

SUB-EDITOR Stuart Corner

DESIGNER Rachel Lee

TURN IT UP 108 Source2Create Pty Ltd is the publisher of this magazine and its website (www.womeninsecuritymagazine.com).

©Copyright 2024 Source2Create. All rights reserved.

Reproduction in whole or part in any form or medium without express written permission of Source2Create is prohibited.

STUDENT IN SECURITY SPOTLIGHT Pranidhi Handapangoda

76

Venuri Wicramasingha

80

Sithumi Abeywardhana

84

Charlotte Baines

88

Mridula Sharavanan

92

OFF THE SHELF 116

ASSOCIATIONS & GROUPS SUPPORTING THE WOMEN IN SECURITY MAGAZINE

Thank You

TO OUR SUPPORTING ASSOCIATIONS

08

MAY • JUNE

IN 2022, YOU CAN NO LONG ER TAKE SECU RITY WORK ERS FOR GRAN TED P10-13

20 22 W W W. W O

AS THE SECU RITY THREAT MORP DEFE NSIV E HS, TEAM S MUST CHAN GE TOO P76-79 IF YOU CAN’T YOUR WAY TO SPEND SECURITY THISGOOD TRY FOCU SINGYEAR, ON YOUR PEOP LE P94-97

YEAR OF THE SECURITY WORKER

MENINSE

WHO RUNS

CURITYM

AGAZINE.

COM

WORLD the

W W W. W O

MENINSE

CURITYM

AGAZINE.

COM

TO O U R M A

GAZINE

SUBSCRIBE

07

MARCH • APRIL

Never miss an edition again!

Subscribe to the magazine today for exclusive updates on upcoming events and future issues, along with bonus content.

SUBSCRIBE NOW

NEW ZEALAND WOMEN IN SECURITY AWARDS 2025

CALL FOR EXPRESSION OF INTEREST

BECOME A SPONSOR TODAY EVENT DATE: THURSDAY | 3 APRIL 2025

If you're part of an organisation dedicated to promoting diversity and inclusion, we'd love to discuss our 2025 Awards packages with you.

These packages are designed to further our shared mission of recruiting, retaining, and advancing women in the cybersecurity workforce.

CONTACT Aby@source2create.com.au

By becoming a sponsor and supporting our event, you'll visibly demonstrate your commitment to celebrating diversity and recognising accomplishments within the security industry.

PHOENIX RISING:

by Abigail Swabey

Life is a journey defined by resilience and renewal.

handle, and months when I worry if we’ll even make it

Each phase—childhood, adulthood, and everything in

through. It’s hard. It’s draining. But I persist because

between—comes with its unique set of challenges.

the alternative is to give up, and I’ve never been one

Yet, what binds us all is the power of perseverance,

to take the easy way out. The challenges have only

the unstoppable force that keeps us moving forward,

made me stronger and more resourceful.

even when the path ahead seems uncertain.

Adversity, however, is where resilience truly shows For me, perseverance has been the cornerstone of my

its power. My personal turning point came when I

personal and professional life. It’s not just a word—it’s

found myself pregnant at a young age, without the

the driving force behind everything I do, particularly

support of a partner, and in a Christian family where

the Australian Women in Security Awards. Every year,

such circumstances were anything but expected,

as the awards grow, so too does the criticism. People

even though they were very supportive, the fact I

question the way the awards are run, why we don’t

had disappointed them was too heavy to bear. It

have our original partner, who is recognised, and

was a pivotal moment in my life. I made the choice

whether we profit from them. But anyone who’s ever

to have my daughter and raise her on my own, and

organised large-scale events knows how much goes

that decision changed the course of everything.

into it, and financial gain is rarely part of the equation.

The early years were some of the hardest—moving

Yet, despite the scepticism, I keep going. Why?

from place to place, working around the clock just to

Because the positive impact the awards have on so

make ends meet, navigating the challenges of single

many women in security far outweighs the negativity.

motherhood while barely having time to be a young

The stories we celebrate, the connections we make,

adult myself. But through all the chaos, my daughter

and the doors we open for others—these are the

was my guiding light. She gave me purpose and kept

reasons I persevere, year after year.

me grounded. I discovered a strength within me I didn’t know existed, and it shaped me into the person

Perseverance doesn’t stop there, though. It’s the

I am today.

driving force behind running my own business, a daily

10

test of strength and determination. There are days

Adversity doesn’t stop at a single moment in life—it’s

when we have more work than a small team can

an ongoing test. One of the toughest lessons I’ve

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

learned was when I went into business with a friend,

As I reflect on my own journey, I’m reminded of the

and that venture nearly cost me everything. I could

many times I’ve had to rise again. I’ve faced my

have been consumed by the failure, but instead, I saw

share of challenges—overcoming bullying in school,

it as an opportunity. I learned more from that setback

navigating toxic workplaces, surviving abusive

than from any success I’ve ever had. It forced me to

relationships, managing chronic pain, and enduring

rebuild from the ashes, stronger and wiser, just like

the physical toll of back surgeries. I’ve dealt with

a phoenix rising after being burned to the ground. I

personal heartbreak and business setbacks that

realised that failure isn’t a dead end—it’s a stepping

could have broken my spirit. Yet, each of these trials

stone on the path to greater things.

has left me stronger, with a deeper sense of purpose and resilience, prepared to face whatever comes

Perseverance is rarely about smooth sailing. It’s about

next. I know I’m not alone in this—there are countless

embracing failure, using it to fuel future success,

others walking their own paths, overcoming their

and understanding that setbacks are part of the

own battles, and finding the strength to rise, time

process. It’s about finding the strength to rise again,

and again.

no matter how many times you fall. Every stumble has taught me to view challenges not as roadblocks

You see, we are all phoenixes. We rise. We transform.

but as opportunities to grow. As my father once told

We become stronger and more resilient with every

me, “Mountains are climbed one step at a time.” I see

challenge we face. And as we rise, we lead—not just

this truth reflected every year as I read through the

ourselves, but those around us—toward a future

nominations for the awards. The women we honor

where resilience is celebrated, and renewal is always

have all faced their own incredible obstacles, and

possible. Through every trial and triumph, we continue

their stories remind me why this work is so important.

to soar, reaching for new heights, and inspiring others

I’m here to celebrate their resilience, to amplify their

to do the same.

voices, and to lift them up so they can inspire others.

Resilience, though, isn’t just about pushing through every challenge. It’s also about knowing when to pause, to reflect, and to heal. Even the phoenix takes time before it rises again. For me, that time comes during my morning walks along the beach. Since moving two years ago, these walks have become a sacred part of my day. They give me space to breathe, to process, and to find clarity amid the constant whirlwind of life. I’m not sure how I managed without that time for myself before, but now, it’s essential.

It’s where I reconnect with my purpose and remind myself why I keep going, even on the hardest days.

This personal journey of resilience and perseverance is not mine alone. It’s something we all experience, in different forms and at different times. Every one of us has our own battles, our own moments where we’re tested to our limits. —our stories of rising from the ashes are what connect us. We are all phoenixes in our own way, transforming through the trials we face, emerging stronger, more determined, and more capable of soaring to new heights.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

11

AMANDA-JANE TURNER Cybercrime is big business, thanks to technical advancement and interconnectivity creating more opportunities. This regular column will explore various aspects of cybercrime in an easy-to-understand manner to help everyone become more cyber safe.

C O L U M N

Resurgent adversaries challenge cybersecurity Ever wonder why working in cybersecurity leads many to burnout? It is the never-ending pursuit of extremely resilient and robust cybercriminals and their affiliates and nation state threat actors Cybersecurity professionals are always on watch.

cryptocurrency addresses, the affiliate panel and

Cybercrime does not stop. Despite major international

stolen data.

cross-jurisdiction law enforcement initiatives that aim to disrupt their activities, these criminals keep

Less than a week later the RaaS group that operates

coming back.

LockBit was back. The group confirmed its systems had been compromised, but said only servers running

Those investigating cybersecurity threats and

PHP had been touched and it had multiple backups

defending against them need to remain resilient to

that remained unscathed.

successfully fight cybercrime. But the same qualities can be found in cyber-criminals and nation state

The group admitted responsibility for a lapse in

threat actors who stay resilient and keep bouncing

its security that had enabled disruption by law

back. Their operations may be temporarily disrupted

enforcement. It went into damage control mode,

by law enforcement, but they regroup and renew

reassuring its customers and affiliates that it was

their efforts. Like that multiheaded monster of Greek

tightening up security and was back in business.

mythology, the Hydra, as soon as one threat is neutralised another emerges.

Other cyber-criminal groups, including nation state sponsored threat actors that have been disrupted

An example is the ransomware-as-a-service (RaaS)

by law enforcement, may form new groups and

business model in which cybercriminals sell LockBit

collaborate with other groups, emerging stronger

ransomware. LockBit and its iterations and affiliates

than before.

have been, and continue to be, responsible for a large number of ransomware campaigns. LockBit, like

These criminal groups are resilient; a setback in their

many ransomware activities these days, tends to use

activities is met with a strategic renewal from which

a double extortion strategy under which the victim’s

they emerge stronger than before. As cybersecurity

data is both encrypted and exfiltrated. The criminals

professionals we also need to be resilient, to keep

hope that, even if a victim will not pay to restore their

going, keep renewing, and stay as strong as we can

files, they will pay to prevent their data being exposed.

be against cyber-based threats.

In early 2024 a law enforcement taskforce disrupted

www.linkedin.com/in/amandajane1

the computer infrastructure used by LockBit. Reports from the taskforce said its operation had taken

www.empressbat.com

down at least 32 servers owned by LockBit holding

12

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

WHAT’S HER JOURNEY?

Naomi Emma Ekwealor Cybersecurity Analyst in Nigeria

N

aomi Emma Ekwealor’s journey into

Working as a Governance, Risk, and Compliance

the world of cybersecurity was not

(GRC) analyst today, Naomi faces the constant

a conventional one. Growing up, she

challenge of keeping up with the ever-evolving threat

didn’t have a concrete vision of what

landscape. “Every day brings new vulnerabilities,

she wanted to become, but she always

attack vectors, and malicious actors,” she says.

knew she wanted to protect people—especially those

Artificial intelligence, in particular, poses a unique

who couldn’t fight for themselves. Initially, she had

challenge. Naomi admits that it can be overwhelming

aspirations of going into law, driven by a passion

to stay ahead of these developments, but her solution

for justice. But as life would have it, after university,

is rooted in continuous learning. Drawing inspiration

when she couldn’t complete law school, she found

from the words of Henry Ford—“Anyone who stops

herself on a different path. “I was determined to

learning is old, whether at twenty or eighty”—she

make a positive impact on society,” Naomi recalls.

remains steadfast in expanding her knowledge. She

It was at that pivotal moment that she stumbled

actively participates in cybersecurity communities

upon cybersecurity.

and stays connected with organisations like ISACA, sharing insights and collaborating with others to stay

For Naomi, cybersecurity and law shared a common

informed on emerging threats.

goal: protection. The allure of using technology to

14

build multi-layered defences, outsmart malicious

Naomi’s career path in cybersecurity wasn’t always

actors, and reduce risks drew her in. Her drive wasn’t

straightforward. While she didn’t experience moments

just fueled by the technical aspects; it was also about

of doubt, transitioning from a non-STEM background

making a difference. “It’s about continuous learning,

was far from easy. “I had to learn everything from

sharing knowledge, and having a sense of purpose,”

scratch,” she reflects, pointing out the steep learning

she explains. Her enthusiasm for learning propelled

curve she faced when she first started. But she found

her to delve into IT systems, networking, and the

clarity through faith, mentorship, and the invaluable

complex world of cyber threats and vulnerabilities.

support of her “Cyber Sisters,” a group of women

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

on a similar path in the CyberLearners community.

“I sought guidance and help from God and my mentors,” she explains, noting how this support system helped her overcome challenges and navigate

J O U R N E Y ?

"Remember your Ikigai— your reason for being."

unfamiliar waters.

Starting in cybersecurity without a clear vision, Naomi had to figure out her path step by step. “I was

These individuals offered invaluable advice, shared

confused when I first started,” she admits, but through

their experiences, and helped her navigate the field

reading about industry leaders and devouring free

with confidence.

resources like YouTube tutorials, she began to find her footing. Now, as she reflects on her journey, she

Her involvement in professional organisations like

encourages aspiring professionals to focus on their

ISACA and the Google Developers Group has also

passion, as it serves as an energy source that keeps

played a significant role in her growth. “Joining a

them going during moments of doubt.

professional organisation opens up opportunities to expand your network,” she observes, noting how

Looking ahead, Naomi is particularly concerned about

these affiliations gave her access to mentors and

emerging trends like the weaponization of AI and

global talent pools. She advises others to find local

machine learning by cybercriminals. She predicts

professional organisations that align with their

a rise in AI-based attacks and an increase in social

personal and career goals, emphasising how valuable

engineering threats, which already account for

these connections can be.

70% of successful cyber incidents. This awareness fuels her dedication to staying ahead of the curve,

For those transitioning into cybersecurity from other

keeping up with new technologies, and strengthening

fields, Naomi has simple but powerful advice: focus

her defences.

on your passion, develop your soft skills, and don’t overlook the basics. She stresses the importance of

When considering a career advancement, Naomi

celebrating small wins along the way, as they boost

doesn’t just focus on remuneration. She believes

morale and fuel further success. Naomi’s journey may

it’s essential to evaluate the organisation’s culture

have started without a clear direction, but today, she

and values. “Does it align with your personal values?

is a shining example of what determination, learning,

Where do you see yourself in five years?” she asks,

and mentorship can achieve in the ever-evolving world

highlighting the importance of opportunities for

of cybersecurity.

learning and growth. For her, these factors weigh just as heavily as salary when making career decisions.

“Remember your Ikigai—your reason for being,” she says, as she continues to inspire the next generation

Naomi credits much of her success to the support

of cybersecurity professionals in Nigeria and beyond.

and guidance she’s received along the way. She speaks fondly of her mother and sister, who encouraged her not to give up, as well as mentors like

www.linkedin.com/in/ekwealornaomi

Confidence Stavely, Mrs. Ireti Akerele, and others, who played crucial roles in shaping her career. “Having a

x.com/afrotechiee

mentor brings immeasurable benefits,” Naomi says.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

15

Moni-Ayo Saka Founder, CYFORTE

M

oni-Ayo Saka’s cybersecurity path

online platform where users can learn and practise

began with a simple but powerful

cybersecurity skills.

statement: “Every system has a vulnerability waiting to be exploited.”

What started as a search for vulnerabilities soon

While these weren’t the exact words

transformed into a broader vision. “My interest has

she read in an article, they captured the concept that

evolved from searching for vulnerabilities to training

sparked her curiosity and ignited a passion that would

people in this field and helping them secure jobs,”

define her career. Fascinated by the idea, Moni-Ayo

Moni-Ayo says. Today, she’s driven by the desire to

delved into research, which led her to explore key

prevent people from becoming trapped in endless

concepts like hacking, cybersecurity, and information

learning phases or remaining unemployed despite

security. This curiosity, gave her eagerness with a

acquiring certifications. Her mission now is to guide

hunger for knowledge, set her on a path to become

others in breaking into the cybersecurity industry,

not just a cybersecurity expert but a mentor and

making it clear that this field is about more than

leader in the field.

just filling roles; it’s about securing systems and fostering growth.

Her entry into the world of cybersecurity was

16

somewhat serendipitous. “Someone offered to share

Looking back at the early stages of her career, Moni-

free materials on cybersecurity through his WhatsApp

Ayo attributes her success to one crucial factor:

status,” she recalls. From there, Moni-Ayo made a

mentorship. “At every stage, there was someone

daily habit of studying these resources and gradually

guiding me,” she explains. Whether it was sharing

building a routine that matched her productivity

materials, providing internship opportunities,

patterns. She found that her early morning study

or sending words of encouragement after she

sessions were the most effective. To push herself

reached a milestone, mentors played a pivotal role

even further on days when motivation warned, she

in her development. Writing and passing the ISC²

would challenge herself with TryHackMe rooms—an

“Introduction to Cybersecurity” certification was a key

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

J O U R N E Y ?

turning point for Moni-Ayo. “Passing it assured me that I was ready and capable of handling professional tasks,” she reflects. Coupled with practical experience from solving challenges on Hack the Box and internships at organisations like Zuri, VTF, and CyberGirls, Moni-Ayo felt confident in her skills and her ability to contribute meaningfully to the field.

"My interest has evolved from searching for vulnerabilities to training people in this field and helping them secure jobs."

Despite her growing expertise, the road to success hasn’t been without its challenges. One of the most significant obstacles has been navigating the

actively participates in cybersecurity communities,

complexities of different work environments. When

such as the ISACA Abuja Chapter, Diary of Hackers,

contemplating new roles or career advancements,

and The Village. These affiliations provide her with

Moni-Ayo evaluates several factors beyond

valuable resources, learning opportunities, and

remuneration. “The work environment is critical,” she

connections to like-minded professionals. “These

emphasises. “I want to know if the company fosters

connections have been important in my growth, and

growth, values mental health, and offers professional

I’m grateful for the support and opportunities they’ve

development opportunities.” Flexibility in workload

brought my way,” she notes.

is also important to her, as she’s seen colleagues burn out or leave jobs due to unreasonable demands.

For those transitioning into cybersecurity from

Maintaining a healthy work-life balance, she believes,

other fields, Moni-Ayo offers practical advice: “Your

is essential for long-term success.

previous profession isn’t irrelevant. Find a connection between both and use that to determine where you’ll

“The most substantial influence on my career has

excel in cybersecurity.” She encourages individuals

been consistency and resilience,” Moni-Ayo says,

to embrace their backgrounds, ensuring that their

reflecting on her professional journey. “I show

transition is both meaningful and successful.

up every day, without excuses, and believe that

Furthermore, she stresses the importance of

there’s time for everything.” Whether it’s managing

showcasing skills on social media and optimising CVs

power outages, poor internet connectivity, or

to reflect their true potential.

hardware issues, Moni-Ayo remains steadfast in her determination to succeed. She recognizes that

As Moni-Ayo looks ahead, she anticipates that

setbacks are part of the process and stays focused

the next two years will bring both challenges and

on the “bright light” at the end of each challenge.

opportunities in the cybersecurity landscape.

However, her commitment to training the next

In her current role, Moni-Ayo finds the greatest

generation of professionals and securing systems

fulfilment in helping others succeed. “The opportunity

remains unwavering. Moni-Ayo Saka’s journey is a

to train individuals and watch them grow into

testament to the power of curiosity, resilience, and

professionals is the most rewarding aspect of

mentorship in shaping a career that not only protects

my work,” she says. The satisfaction of seeing

the digital world but also empowers those who step

her trainees break into the industry and thrive is a

into it.

testament to her impact. For Moni-Ayo, it’s not just about securing systems; it’s about empowering people to secure their futures.

www.linkedin.com/in/moniayosaka/

Moni-Ayo is also a firm believer in continuous learning

x.com/Megami__uno

and staying current in an ever-evolving field. She

I S S U E 22

WOMEN IN SECURITY MAGAZINE

17

Thulasi Uppu Identity Access Management Analyst at City of Gold Coast

T

hulasi Uppu, an Identity Access

Thulasi often reflects on the advice she would give

Management Analyst at the City of

her younger self, highlighting the importance of early

Gold Coast, has forged a remarkable

engagement in cybersecurity. “I would encourage

path in the cybersecurity field, driven

attending cybersecurity-related sessions and courses

by her passion for technology and a

to build foundational knowledge,” she emphasises.

commitment to continuous learning. Her journey

She believes that actively participating in networking

began with a strong foundation; she earned an IAM

events and pursuing relevant certifications are crucial

administration certification, which set her on the

steps for anyone looking to make their mark in this

right course. Thulasi immersed herself in a wealth of

field. For her, gaining practical, hands-on experience

knowledge, devouring articles and enrolling in courses

through traineeships or internships is invaluable.

related to Identity and Access Management (IAM).

This dedication ensured she stayed ahead of industry

Looking to the future, Thulasi is acutely aware of

trends and best practices.

the evolving landscape of cybersecurity threats.

“Identity theft and unauthorised access will remain

As she stepped into her current role, Thulasi

major threats,” she warns, noting that attackers

encountered challenges that tested her skills. One

are increasingly targeting personal and corporate

notable hurdle was an IAM tool implementation

identities. With the rise of cloud services and remote

project. “Finding resources related to development

work, the importance of robust security measures,

and customization was a significant challenge,” she

such as multi-factor authentication and strong

recalls. However, rather than be daunted, Thulasi took

identity verification, cannot be overstated. “Weak

the initiative to seek additional learning opportunities.

authentication methods will exacerbate these risks,

By attending relevant courses and collaborating with

making it critical to secure data against unauthorised

peers, she enhanced her understanding of the tool’s

access,” she adds.

functionalities, allowing her to address the unique needs of the implementation.

18

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

J O U R N E Y ?

As she contemplates career advancement, Thulasi

For those considering a transition into cybersecurity

considers various factors beyond salary. “I evaluate

from other fields, Thulasi has a clear message:

opportunities for skill development and certifications,

“Explore the various specialisations within the field

the company’s security culture, and the technology

and choose a path that aligns with your interests.” She

stack used in the role,” she explains. Team dynamics

values attending cybersecurity events and leveraging

and the potential for long-term career progression

government-funded programs for knowledge and

are equally important to her, ensuring she thrives in a

networking opportunities. “Pursuing certifications

collaborative environment.

specific to your chosen path will build credibility and enhance your learning journey,” she advises.

Thulasi is committed to her professional growth, with plans to pursue advanced certifications in IAM.

Thulasi’s insights not only inspire those aspiring

“These certifications will not only validate my current

to enter the field but also remind us that with

skills but also enhance my knowledge in emerging

determination and the right resources, a successful

technologies,” she shares, expressing her desire to

career in cybersecurity is well within reach. Through

boost her confidence and open up new opportunities

her dedication and passion, Thulasi is not just

in the IAM space.

navigating her own path but also paving the way for others in this vital industry.

Maintaining a work-life balance is crucial for Thulasi, especially in the demanding realm of cybersecurity.

“I set clear boundaries between work and personal

www.linkedin.com/in/thulasi-uppu

time,” she says, highlighting her prioritisation of tasks and the importance of regular breaks. By focusing on organisation and efficiency, she manages her workload effectively while making time for hobbies and family, ensuring her overall well-being.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

19

Serena Pillay Senior Learning & Design Manager at Phriendly Phishing

S

erena Pillay’s entry into cybersecurity

Although Serena had some clarity at the beginning of

wasn’t conventional, but her journey

her career, her path unfolded organically. She initially

has been guided by a clear sense of

studied organisational psychology with the goal of

purpose and a passion for understanding

joining the initiative to support the transformation

human behaviour. “In the vast world of

of post-apartheid South Africa’s workforce, but her

cybersecurity, what interested me the most was the

dreams also included living in Australia at some point.

influence of psychology and behavioural science,”

After years in the corporate learning sector in South

Serena shares, explaining how her background in

Africa, she made the leap, moving across the globe. It

organisational psychology naturally evolved into a

was during this time that Damian Grace, the founder

career in cybersecurity awareness. By integrating

of Phriendly Phishing, took a chance on her. “7 years

human behaviour into security strategies, Serena is

later, and I am so grateful to be a part of this industry,”

shaping solutions that focus on the human element in

she says.

cyber defence.

For Serena, working in cybersecurity has been about Serena’s path, however, wasn’t without its challenges.

understanding the power of adaptability. “Do not get

She recalls the feelings of inadequacy and lack of

bound to the ideal version of yourself,” she would tell

confidence when she first entered the field, which was

her high school self. Her advice emphasises kindness,

dominated by tech specialists. She also grappled with

curiosity, and the belief in one’s uniqueness. “As you

the unspoken hierarchy that placed her support role

believe so you become. The power of your thoughts

as less significant. But her determination and survival

and your belief in yourself shapes your reality.”

instincts took precedence. “I was new to Australia, so

20

my goal to survive overshadowed my insecurities,”

Looking forward, Serena anticipates a shift towards

she reflects. The more she immersed herself in

human-centric security and a growing emphasis

learning, the more confidence she gained, eventually

on behavioural analytics in cybersecurity. “Despite

solidifying her place in the cybersecurity world.

advances in AI, human actions and decisions play

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

J O U R N E Y ?

a critical role in cybersecurity,” she notes. This

who feels more confident about cybersecurity or the

emphasis on human behaviour, both in preventing

tech-savvy individual who appreciates the simplicity

insider threats and enhancing security awareness, is

of their training, these stories give Serena purpose.

key to the future of cyber.

Her advice for those transitioning into cybersecurity?

Serena’s career has been shaped by several key

“Chances are you have already ventured outside your

figures, including Damian Grace and Karina Mansfield,

comfort zone,” Serena encourages, reminding others

the Managing Director at Phriendly Phishing. “Karina

to amplify their purpose louder than their fears. As

instilled in me the importance of confidence,” Serena

the cybersecurity industry grows, Serena believes

says, noting how her mentors encouraged her to

it is essential to stay focused on goals, despite the

express her opinions and challenged her creatively.

inevitable challenges. “May your choices reflect your

Additionally, her learning team inspires her daily with

hopes, not your fears,” she concludes, echoing the

their passion and dedication, driving her motivation to

wisdom of Nelson Mandela.

deliver exceptional outcomes.

Serena’s journey, from psychology to cybersecurity, is The most fulfilling aspect of her role comes from

a testament to the power of resilience, purpose, and

the impact her work has on learners and clients.

a deep understanding of human behaviour in shaping

“The work we do is not just work; it is a passion that

the future of cyber.

drives us forward,” she says, describing how she and her team create learning experiences that resonate

www.linkedin.com/in/serena-pillay-554473a6

deeply with their clients. Whether it’s the older learner

I S S U E 22

WOMEN IN SECURITY MAGAZINE

21

Nadja El Fertasi Founder of Thrive with EQ

This pivotal moment led to the creation of her innovative concept, Emotional Firewalls. “Security is no longer just about protecting systems; it’s about helping people develop a shield against emotional

N

manipulation,” she notes. adja El Fertasi stands at the forefront

Despite her groundbreaking vision, Nadja faced

of a transformative approach to

significant challenges in educating others about her

cybersecurity through her consultancy,

unique approach. “The most challenging aspect is

Thrive with EQ. Her journey into this

the educational component,” she admits. Traditional

vital field began during her tenure

perceptions of cybersecurity often overlook the vital

with the NATO Communications and Information

role of emotional intelligence. To address this, Nadja

Agency, where she served from its inception in 2012

employs creative teaching methods, making complex

until 2019. “Cybersecurity became one of our main

topics relatable by connecting them to individuals’

responsibilities,” she explains, reflecting on her role

values and perspectives. “When you speak their

as a customer relationship manager and strategic

language, the relevance of cybersecurity becomes

partnership lead. Working closely with cyber experts,

apparent,” she explains, emphasising that it’s about

Nadja found herself captivated by the intersection of

protecting our “nervous system in the digital age.”

technology and human behaviour, especially in the high-stakes environment of classified information.

Throughout her journey, moments of uncertainty

“That’s when the spark was lit for me,” she recalls.

have tested her resolve. “I faced a lot of resistance, ridicule, and closed doors,” she recalls. Yet,

As her career progressed, Nadja recognised the need

Nadja’s unwavering belief in her vision fueled her

to integrate emotional intelligence and resilience

perseverance. “I kept going because I felt motivated

into the cybersecurity landscape. “When I started

to leave the world a bit better than I found it,” she

my consultancy just before the pandemic, the focus

shares. Over time, her efforts have gained recognition,

was on security challenges based on my NATO

especially as the need for a human-centred approach

experience,” she shares. However, as the pandemic

to security has become more widely acknowledged.

triggered a 600% spike in social engineering attacks,

22

she realised the necessity of equipping individuals

While her path has been fraught with challenges,

with the emotional skills to counter such threats.

Nadja believes in the importance of growth through

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

failure. “I had a strong feeling I was meant to birth

relationship with technology, ensuring that humanity

something groundbreaking,” she says, reflecting on

does not become overly dependent on it.

the lessons learned along the way. “Life is about climbing mountains—when we reach the top of one,

Nadja’s commitment to empowering others is

we’re at the bottom of another.” This perspective has

evident in her role as a mentor for the Women4Cyber

shaped her understanding that the journey itself is as

foundation. “Giving back to the community is an

significant as the destination.

integral part of my fulfilment,” she states, highlighting the importance of lifting others as one ascends.

Looking back, Nadja offers poignant advice to her younger self. “You are enough as you are; don’t

Ultimately, Nadja El Fertasi’s is a testament to

feel the need to prove yourself to anyone,” she

the power of resilience, creativity, and emotional

emphasises. Her reminders encourage authenticity,

intelligence in a rapidly evolving field. Her innovative

continuous learning, and kindness—qualities she

approach serves as a beacon for aspiring

believes the cybersecurity field desperately needs.

cybersecurity professionals, showcasing that the heart of cybersecurity lies not only in technology but

As she gazes into the future, Nadja anticipates

also in understanding and nurturing the human spirit.

significant developments in cybersecurity, particularly

As she aptly puts it, “Cybersecurity is about protecting

the impact of generative AI and quantum computing.

our nervous system in the digital age.”

“These technologies will revolutionise our approach but also introduce new vulnerabilities,” she notes.

She stresses the importance of fostering a balanced

I S S U E 22

www.linkedin.com/in/nadja-elfertasi

WOMEN IN SECURITY MAGAZINE

23

Anmol Agarwal Senior Security Researcher

Despite the evolving nature of her career, Anmol admits that her path was not entirely clear from the beginning. “The cybersecurity field has so many different career paths,” she notes, highlighting how opportunities unfolded organically. Today, her role as a senior security researcher allows her to engage in

A

cutting-edge work that blends AI with cybersecurity.

“I enjoy brainstorming sessions with my colleagues,” nmol Agarwal’s world of cybersecurity

she shares, emphasising how these collaborative

began during her university days, where

efforts often lead to groundbreaking research papers

she first discovered her passion for the

and patents.

field while studying computer science and software engineering. “I enjoyed

Anmol’s advice to her younger self and to those just

the cybersecurity field,” she recalls, pointing to

entering the field is simple: “Follow what interests

courses in digital forensics, cloud security, and data

you.” She believes that passion should guide one’s

and application security that sparked her curiosity.

career choices, not external pressures or trends.

Networking with like-minded peers and joining

Her focus on staying true to what excites her is

student groups fueled her interest. It was through

a recurring theme, one that has shaped both her

these interactions that she realised cybersecurity was

professional and personal growth.

her calling.

Looking ahead, Anmol sees the future of cybersecurity Her career transformation started with building a

heavily influenced by emerging technologies like AI

cybersecurity portfolio, showcasing academic and

and quantum-resistant cryptographic algorithms. She

side projects. Attending conferences played a critical

anticipates significant developments in data privacy,

role in connecting her with industry professionals

especially as AI continues to require massive datasets

and exposing her to cutting-edge research. One

for model training. “There is a hesitation to share data

of Anmol pivotal moments came during the IEEE

due to privacy concerns,” she observes, suggesting

Symposium on Security & Privacy, where she was

that this area will become increasingly important over

introduced to adversarial machine learning—a field

the next few years.

that blended her passion for AI and cybersecurity.

24

This laid the foundation for her current role, where she

Anmol is also passionate about mentoring and

focuses on AI security and the protection of wireless

helping individuals transition into cybersecurity from

communication networks like 5G and 6G.

other fields. She acknowledges the fears many face

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

J O U R N E Y ?

about not being “technical” enough but reminds them

The most fulfilling aspect of her career? “Working

that the cybersecurity field requires diverse skill

with team members to create new ideas,” she says

sets. “Cybersecurity needs people from all different

with enthusiasm. Whether it’s proposing methods to

backgrounds because it’s useful to have different

secure wireless communications or brainstorming the

perspectives on solving problems,” she says. Her

next innovation in AI security, Anmol finds immense

mentoring philosophy is centred on the belief that

satisfaction in collaborative research efforts.

technical skills, like coding and scripting, can be

This intellectual camaraderie fuels her passion

learned with practice and should not deter anyone

for discovery and her drive to make meaningful

from pursuing the field.

contributions to the field.

Reflecting on her own growth, Anmol cites

Anmol sees her career evolving alongside the rapid

consistency and curiosity as driving forces. Her

advancements in technology. With a focus on AI

commitment to staying updated with the latest

security and wireless communication networks, she

developments in cybersecurity is key to her success.

is poised to remain at the forefront of cybersecurity

“I regularly keep up to date with what is happening by

research.In Anmol’s words, “We are all different, and

checking the news, being involved in cybersecurity

it’s important to follow our own career journeys.”

groups, and reading the latest research articles,” she explains. For aspiring cybersecurity professionals, she recommends joining communities and attending

www.linkedin.com/in/anmolsagarwal

conferences to stay connected with peers and thought leaders.

I S S U E 22

x.com/anmolspeaker

WOMEN IN SECURITY MAGAZINE

25

Sailakshmi Metikota Cyber Security Engineer at Synapxe

S

ailakshmi Metikota’s path to becoming

Like many in the industry, Sailakshmi has faced

a cybersecurity engineer in Singapore

moments of doubt, particularly when confronted with

began with a curiosity that quickly grew

the rapid evolution of cyber threats. But her passion

into a passion for protecting the digital

for the field and the impact of her work kept her

world. “My interest in cybersecurity began

grounded. “I reminded myself why I was passionate

with a fascination for how technology could be both

about cybersecurity—protecting people and

empowering and vulnerable,” she reflects. As digital

businesses.” She credits a strong network of peers

threats became more sophisticated, she was drawn

and mentors for helping her stay motivated during

to the challenge of safeguarding data and systems.

challenging times, noting that these relationships

Over time, her focus evolved from a defensive stance

were essential in guiding her through moments

to building resilient infrastructures and educating

of uncertainty.

others on the importance of cybersecurity.

As her career progressed, Sailakshmi’s role unfolded The early stages of Sailakshmi’s career were pivotal

organically, allowing her to explore different areas

in shaping her professional journey. Determined to

within cybersecurity. “When I started, I didn’t have a

transition her interest into a career, she immersed

clear vision of specific roles. My path unfolded as I

herself in technical certifications and real-time

explored various aspects of the field, discovering what

training scenarios. “Networking with industry

excited me most.” This open-minded approach led

professionals and continuously learning about

her to roles that combined both technical expertise

emerging threats were key steps in turning my

and strategic thinking, where she found immense

interest into a professional path,” she notes. These

satisfaction in solving complex security challenges

efforts paid off, helping her build a strong foundation

and mentoring junior colleagues.

in an ever-changing field.

26

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

J O U R N E Y ?

“The most fulfilling part of my role is knowing that my work helps safeguard individuals and businesses from cyber threats,” she says. Collaboration, teamwork, and mentoring have been central to her experience, and she finds great joy in contributing to a culture of proactive security.

"The field of cybersecurity is constantly evolving, and staying curious is the key to success"

Sailakshmi’s foresight into the future of cybersecurity highlights the complexities that lie ahead. She anticipates the rise of artificial intelligence and

through continuous learning and embracing

machine learning as both a boon and a challenge

emerging technologies.

for the industry. “AI will enhance threat detection but will also introduce new risks as attackers

Her journey offers valuable advice to those

leverage these technologies.” The shift to remote

transitioning into cybersecurity from other fields.

work will also continue to strain traditional security

“Leverage your existing skills and be open to

models, pushing organisations toward zero-trust

continuous learning,” she advises. Transferable skills

architecture. Furthermore, increasing regulatory

such as problem-solving, analytical thinking, and

scrutiny will compel businesses to prioritise robust

communication are highly valued in the industry.

security measures.

She encourages practical experience and seeking mentorship, as hands-on learning is crucial in a field

In her current role, Sailakshmi is all too familiar with

as dynamic as cybersecurity.

the unpredictable nature of cyber threats. “One of the biggest challenges is the unpredictability of new cyber

Sailakshmi Metikota’s story is one of passion,

threats,” she acknowledges. Her solution is to foster

perseverance, and adaptability. From an initial

a proactive security culture, focusing on ongoing

fascination with technology’s vulnerabilities to

training, threat intelligence, and maintaining flexibility

becoming a leader in the field, her journey illustrates

to adapt to new risks. This emphasis on innovation

the importance of continuous learning, collaboration,

and preparedness ensures her team remains resilient

and a proactive approach to the ever-evolving world

in an ever-evolving landscape.

of cybersecurity. As she continues to shape her path, Sailakshmi remains dedicated to safeguarding the

Looking to the future, Sailakshmi plans to continue

digital future while inspiring others to do the same.

her professional development with advanced certifications such as CISSP (Certified Information

“The field of cybersecurity is constantly evolving, and

Systems Security Professional) and CCSP (Certified

staying curious is the key to success,” Sailakshmi

Cloud Security Professional). “These certifications

concludes, a testament to her lifelong commitment to

will deepen my expertise and prepare me for

growth and resilience in the face of cyber threats.

the increasing reliance on cloud infrastructure,” she explains. In a field that demands constant growth, Sailakshmi is committed to staying ahead

I S S U E 22

www.linkedin.com/in/sailakshmim

WOMEN IN SECURITY MAGAZINE

27

Blessing Duru Cybersecurity Consultant

needed for careers in cybersecurity. Through this program, Blessing not only found a supportive community but also a launchpad for her professional aspirations. “After landing my first job through the program, I found the field to be incredibly rewarding,” she reflects. The initial thrill of working

B

in cybersecurity was matched only by the joy of continuous learning. “I love how cybersecurity is lessing Duru is a skilled Cybersecurity

constantly evolving, pushing me to stay updated with

Consultant with certifications including

technological advancements,” she says, a spark in

CompTIA Security+, PECB LPT, and

her voice.

ISC2 Certified in Cybersecurity (CC).

Specialising in PCI DSS compliance,

In those early stages, Blessing immersed herself in

penetration testing, vulnerability assessments, and

learning. She turned to platforms like TryHackMe and

delivering information security awareness programs,

Coursera, diving deep into resources that would build

across multiple sectors, particularly in financial

her knowledge and confidence. “I practically lived on

institutions, Blessing excels at ensuring organisations

YouTube while preparing for interviews,” she chuckles,

remain secure and compliant.

recalling how essential it was to understand the material thoroughly. “There’s a certain assurance you

In the bustling city of Lagos, Nigeria, Blessing Duru

gain when you really understand what you’re talking

is carving a remarkable path as a cybersecurity

about,” she adds, emphasising the importance of

consultant. Her journey into this dynamic field began

preparation in overcoming challenges.

unexpectedly during a university class. When a speaker promoting the Cybergirls Fellowship arrived

As her career progressed, Blessing encountered the

in a lecture where the lecturer was absent, she

complexities of working in a field that often requires

couldn’t have known the impact this moment would

collaboration across diverse teams. “The most

have on her life. “I spent two weeks researching

challenging aspect of my work is dealing with people,”

what cybersecurity was all about before deciding

she admits. Navigating interpersonal dynamics has

to apply,” she recalls, her curiosity ignited by the

become a crucial skill. “People can be unpredictable,

possibilities ahead.

and it’s important to build high-quality relationships,” she explains. This commitment to maintaining

28

The Cybergirls Fellowship was a turning point,

connections reflects her understanding that

designed to empower young women with the skills

relationships are key to success in any profession.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

J O U R N E Y ?

Like many professionals, Blessing has faced

equip her for advanced roles in cybersecurity.

moments of uncertainty. Imposter syndrome loomed

Balancing the demands of her profession with

large in her early days in cybersecurity, leading her to

personal well-being is also a priority. “You have to be

doubt her skills and accomplishments. “Even when I

intentional about making time for the things you love,”

had small wins, I didn’t celebrate them,” she shares,

she stresses. For her, that includes enjoying movies

reflecting on the struggles she faced. Over time,

and unwinding with novels.

however, she learned the value of recognizing every achievement, no matter how small. “In five years,

To stay current in such a fast-paced industry, Blessing

you’ll be amazed at what you’ve accomplished,” she

dedicates herself to ongoing learning, participating

encourages others, reminding them of the importance

in courses, workshops, and webinars. “I read industry

of self-recognition.

publications and blogs to stay informed and updated,” she explains, underscoring her commitment to

Looking back on her journey, Blessing sees the value

professional growth.

of organic growth. “I would say dive into research, build connections, and expand your network,” she

Blessing Duru’s journey is a testament to the power of

advises young women considering a career in

perseverance, mentorship, and community in breaking

cybersecurity. The influence of strong mentors has

barriers. Her story is not just about personal success;

been pivotal in her life. Mrs. Confidence Staveley,

it is a beacon for other women in cybersecurity,

the founder of the Cybergirls program, stands out

showcasing that challenges can be stepping stones

as a transformative figure. “Her vision for Cybergirls

to greatness. “Celebrate every win,” she concludes,

transformed my life,” Blessing affirms, alongside the

embodying a spirit of progress and resilience that

impact of mentors like Dr. Iretioluwa Akerele and

continues to propel her forward in her dynamic career.

Simbiat Sadiq, who continue to inspire her.

As she gazes into the future, Blessing is eager to further her expertise. Certifications like CEH, CISA, and CISM are on her radar, tools she believes will

www.linkedin.com/in/blessing-duru-b77b23219/

x.com/the_MunaDuru

Interested In Working Together?

Data Admin Services

Content

Media

Advertising

Events

Custom

Special Special Offer!!

Offer!

New or New client returning data admin client 15% programs off your next 15% Off program

The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

We can execute anywhere in Australia, reach out today for an instant quote.

I S S U E 22

aby@source2create.com.au

source2create.com.au

charlie@source2create.com.au

WOMEN IN SECURITY MAGAZINE

29

Leila Assadi Associate Director – Technology risk and cybersecurity

L

eila Assadi’s path into cybersecurity has

Like many professionals, Leila’s journey was not

been shaped by a natural curiosity for

without its doubts. Early on, there were moments

technology and a problem-solving mindset.

when she questioned if cybersecurity was the right

From the beginning, her fascination with

fit. But she pushed through, staying focused on her

understanding technological risks drew her

mission of securing technologies and understanding

into the field. “I think I have always been fascinated

how critical cybersecurity is to modern life.

by technology, especially in understanding the

“Cybersecurity is as crucial as physical security in

associated risks,” she recalls. This interest, combined

today’s world. If we aren’t aware of how to protect our

with her instincts to resolve complex challenges, set

information, the consequences can be severe,” Leila

the foundation for a rewarding career in cybersecurity.

says, reflecting on the broader impact of the work she does.

Leila’s careers moment came while working at a financial institution during the company’s initial

As an Associate Director in Technology Risk and

migration to cloud technology. Leila joined a

Cybersecurity, Leila finds that working with diverse

team tasked with securing the organisation’s

clients and industries brings a deep sense of

cloud services—a role that solidified her future

fulfilment. “The most satisfying part of my role

in cybersecurity. “Crafting cloud access policies

is achieving client satisfaction while gaining new

that balanced security and user needs was both

knowledge with each project. This continuous

challenging and rewarding. That experience was

learning keeps me motivated,” she shares. With new

the turning point in my career,” she explains. Her

engagement come new challenges, but for Leila, they

commitment to ensuring that security measures

are opportunities to grow and refine her expertise.

met evolving standards while also supporting users deepened her passion for the field.

30

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

W H A T ’ S

H E R

J O U R N E Y ?

Looking ahead, Leila anticipates significant shifts

trends, and don’t hesitate to pursue formal education

in the cybersecurity landscape. She believes that

if cybersecurity excites you. The learning curve may

the emergence of new threats, particularly in

be steep, but if you’re passionate about it, the rewards

Artificial Intelligence (AI) and cloud security, will be

are worth the effort.”

a critical focus in the coming years. To prepare for these changes, she stays updated on trends and

In contemplating her future, Leila looks forward to

regulations, using a combination of internal resources,

expanding her qualifications with certifications like

research papers, and mentorship. “Having a mentor

the Certified Information Security Manager (CISM),

who provides guidance based on their experiences

Certified Information Systems Security Professional

has been invaluable,” she notes, emphasising the

(CISSP) and Certified Cloud Security Professional

importance of ongoing learning.

(CCSP). As she continues her journey, her focus remains on contributing to the growth of the

Leila also strives to maintain a work-life balance,

cybersecurity field and supporting the next generation

a challenge many in her field face. “Working in

of professionals—especially women—through

cybersecurity can be demanding, but I make sure

mentorship and leadership.

to prioritise exercise, yoga, and meditation to stay balanced,” she says, recognizing the importance of

“There’s always more to learn, and I’m excited to see

well-being amidst a high-pressure environment.

how the field evolves. The future of cybersecurity is dynamic, and I’m ready to take on whatever

For those considering a career in cybersecurity, Leila’s

challenges come my way.”

advice is clear: start early, build a strong foundation, and stay curious. “Explore your interests, follow the

www.linkedin.com/in/leilaassadi

Reach out to Aby today to find out how your company can help support the Women in Security Magazine.

ABY@SOURCE2CREATE.COM.AU

I S S U E 22

WOMEN IN SECURITY MAGAZINE

31

KAREN STEPHENS Karen Stephens is the co-founder and CEO of BCyber. After more than 25 years in financial services, Karen moved into SME cybersecurity risk management.

She works with SMEs to protect and grow their businesses by demystifying the technical aspects of cybersecurity and helping them to identify and address cybersecurity and governance risk gaps. She was recently named inaugural Female Cyber Leader of the Year at the 2023 CyberSecurity Connect Awards in Canberra.

C O L U M N

Rising phoenix a tale of resilience and renewal

Don’t we all wish we had a phoenix, like the one in

What would your personal phoenix say to a newly

the Harry Potter books. Because, like Harry Potter,

minted cybersecurity risk management person?

we sometimes need someone to swoop in and save us. Sadly, there are no such magic fixes. And, if I

• Skills audit. The skills acquired in your business

have learnt anything since moving into cybersecurity,

or university life can be easily transferred to

it is that you need to build your own fortress to

new industries. In my case the exciting world

save yourself.

of cybersecurity was the industry calling my name. The ability to talk to people and make the

Regular readers may remember that, after spending

highly technical language of cyber palatable and

more than two decades in the financial services

understandable for clients is a much needed and

industry at some of Australia’s largest firms, I

rather rare skill set. Tech can be taught. Client

transitioned into cybersecurity risk management,

service skills are much, much harder if not nigh on

where I find I am often the phoenix for others: those

impossible to teach.

entertaining the idea of moving into cybersecurity

32

• Cyber is not just tech. Yes, there are lots of

and/or startups and who want to bake-in

highly technical roles. We are all familiar with

cybersecurity from the get-go.

‘sexy’ threat hunter roles (please refer to almost

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

any movie referencing cyber), but cybersecurity should not be about tech alone, it should be about the transference of knowledge. Within a business those holding the proverbial cheque book are not usually the heads of technology. Their ranks are more likely to include the CEO or head of risk: people who find themselves having to meet regulatory and legislative responsibilities that can have significant downsides if unmet. These are the key staff who need to understand that cybersecurity is a business risk with an immense downside if ignored or glossed over.

dotm.com.au/

• Be a translator. A sad but true fact is that technical jargon does not always carry over seamlessly between industries. For example,

Join Today for FREE

in cybersecurity ATO stands for Account Take Over and in financial services for the Australian Taxation Office. Both can strike fear into the hearts of a business, but for different reasons. So make sure you know your client’s language as well

To NETWORK with other like-minded people

as you do your cybersecurity language, and when in doubt spell it out!

• It takes a village. Finding community support was vital during my transition into cybersecurity risk management. I engaged mentors and joined groups like AWSN whose members have

To MEET prospective candidates for graduate programs

been incredibly generous with their time and insights. The challenge lies in seeking assistance when needed.

As I find myself settling into this amazing industry I want to pay it forward, and that is why I am always up

To MEET prospective employers of graduate programs

for a cybersecurity coffee chat and for (trying) to be a personal phoenix where I can. www.linkedin.com/in/karen-stephens-bcyber

www.bcyber.com.au

x.com/bcyber2

karen@bcyber.com.au

youtube.bcyber.com.au/2mux

I S S U E 22

The club is for security professionals (present, future and past)

WOMEN IN SECURITY MAGAZINE

33

Want to get matched with Lead Gen experts but dont know where to start?

Our solution experts can help you find the right supplier, Looking to streamline your B2B lead generation process?

Want to use multiple suppliers but dont have time to coordinate?

Need a consistent stream of leads coming into the sales team?

Looking to tap into new markets?

Need end-to-end lead nurture programs?

LET US HELP YOU OVERCOME YOUR LEAD GEN CHALLENGES REACH OUT TODAY FOR AN INSTANT QUOTE. The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

INDUSTRY PERSPECTIVES

MARISE ALPHONSO

INFORMATION SECURITY RESILIENCE AND RENEWAL

by Marise Alphonso, Information Security Professional

The theme for this issue is the phoenix, an immortal

Cyber Security Framework v2.0, the International

bird in Greek mythology that is reborn from the

Organization for Standardization’s ISO/IEC 27001

ashes of its own funeral pyre. Just as the phoenix

and the Secure Control Framework Council’s Secure

is resilient and capable of renewal, so too must be

Controls Framework incorporate the aforementioned

an organisational information security posture. This

multidimensional approaches to security controls

article focuses on what organisations should do to

across multiple categories (managerial, operational,

build and maintain security programs that embody

technical, physical) and types (directive, detective,

the attributes of resilience and renewal to support

deterrent, corrective, preventive).

business objectives.

RESILIENCE Resilience is defined as the quality of being able to withstand hardships or recover quickly from difficulties. It requires a multidimensional approach in the information security realm. Such an approach must have breadth and depth and encompass strategic and operational aspects of governing and managing information security.

One approach to ensuring that resilience is built into an information security program is to adopt and align with industry best practice standards. The National Institute of Standards and Technology’s (NIST)

36

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

Implementing varied controls to counter information

• Bringing the outside in: organisational

security risks facilitates a resilient information

information security teams must keep across

security program that enables the core principles of

innovation-driven developments in information

confidentiality, integrity and availability to be upheld.

security practices. The industry is currently

Indeed, ‘defence-in-depth’ as a guiding principle

abuzz with references to artificial intelligence (AI)

for information security embodies the concept of

changing the cybersecurity landscape in both a

resilience, where controls serve to strengthen posture

positive and negative sense from the perspective

or to act as compensating controls where others fail.

of the defender, whether through advances in network monitoring, the improved quality of

RENEWAL

personalised phishing emails or deep fakes and

When one thinks of the word ‘renewal’ in security,

malicious code creation. An understanding of

perhaps renewal of consultancy services, outsourced

the shifts in security practices resulting from

information security services or cyber insurance

technology advances, changes in the cyber

come to mind. While these may all be important to the

threat landscape or in regulatory requirements is

maintenance of an acceptable security risk posture

essential to understanding how these shifts can

and an effective organisational information security

improve an organisation’s security posture.

program, ‘renewal’ is synonymous with ‘continuation’

• Fostering a learning culture: When organisations

or ‘re-establishment’. Through the lens of ISO/IEC

adopt a learning culture as opposed to a blame

27001 (The international standard for information

culture a sense of ‘we’re all in this together’ is

security, cybersecurity and privacy protection) those

built into the fabric of the organisational ethos.

definitions are akin to continual improvement, which

This mindset is necessary to cultivate required

is key to maintaining a robust information security

security behaviours and grow security champions

management system.

outside of the core security team. Executives and senior leaders play a key role in setting the tone

Foundational ways to uphold the principle of

and adopting organisational values that embody

renewal or improvement in information security and

the necessary security behaviours. Rewards

continue the journey of protecting and defending the

and recognition can also encourage desired

organisations that comprise our economy include:

behaviours across the employee base.

• Resource replenishment: The organisational

• Celebration of successes: the world of

budget must include allocation for the continuity

information/cybersecurity is filled with security

of the information security program, including

incidents and data breach stories. Company X

funding for employee roles, security tooling

was compromised. Customers of product/service

and consultancy or outsourced services that

Y were impacted. Data was stolen creating the

supplement the organisational security program.

potential for identity theft and other data breach

The amount of funds allocated will depend upon

issues for company X. Sound familiar? The reality

the industry in which the organisation operates

is, if things are going well, we don’t hear about

and internal requirements such as market

information security. Information security teams

positioning and competitive advantage, or external

must focus on and celebrate the small wins

requirements such as compliance obligations.

that happen on a regular basis. Positive audit findings demonstrating adherence to security

Resilience and renewal are key concepts in a

policies, remediation of vulnerabilities identified by

successful information security program that

penetration testing, successful tabletop incident

supports and enables organisational objectives

response exercises, improvements in information

enabling organisations to secure their operations and

security awareness scores produced by employee

the data they hold.

training. All these deserve kudos and celebration. www. linkedin.com/in/marisealphonso

I S S U E 22

WOMEN IN SECURITY MAGAZINE

37

VIRAJ GANDHI

RISING PHOENIX: A TALE OF RESILIENCE AND RENEWAL

by Viraj Gandhi, Product Security Leader

Maintaining a robust AppSec program can seem

First, her team re-evaluated priorities, focusing on

daunting in the face of budget cuts and economic

high-impact activities that drove the greatest value.

downturns. However, organisations can survive and

They leveraged automation and implemented cost-

thrive with resilience and a commitment to renewal.

effective tools that streamlined processes. Next, they upskilled and reskilled team members, ensuring they

Here’s a tale of continuous progress and maturation

could take on additional responsibilities. Collaboration

in AppSec in challenging times.

with other teams intensified: knowledge and resources were shared. The team leader established

A thriving mid-size tech company had recently

a metrics-driven approach, tracking progress and

established an AppSec program, which was running

communicating the value of AppSec initiatives to

successfully. The team, led by a visionary female

stakeholders. She embraced open source solutions

security practitioner, had established a robust security

and fostered innovation and community engagement.

posture which had been recognised as an industry

38

benchmark. Then, faced with an economic downturn,

Through continuous improvement the AppSec

the company implemented significant budget cuts.

program adapted and matured. The company’s

The AppSec team was reduced and resources

security posture remained robust, even in the face of

dwindled. The once thriving program was on the brink

adversity. As the economy recovered, the company

of collapse, but the head of AppSec refused to give

emerged stronger with a renewed AppSec program

up. She called on her team’s resilience and rallied

that had not only survived, but had thrived. The team’s

team members around a new strategy. “Pivot, don’t

resilience and the team head’s leadership had turned

pause,” she declared.

a potential setback into a remarkable tale of renewal.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

This story serves as a beacon for organisations facing similar challenges. Pivoting and strategizing can enable AppSec programs to progress and mature, even in the darkest of times. Remember, resilience and renewal are the keys to unlocking a brighter future. www.linkedin.com/in/virajg

ABOUT THE AUTHOR Viraj Gandhi, a visionary Product Security Leader, has pioneered transformative 'Shift-to-left' initiatives, revolutionizing security programs to address open-source software and application security challenges at leading companies like ServiceNow and SailPoint, with a solid academic foundation in computer science (Masters and Bachelors) and numerous professional certifications. Her thought leadership is evident in her contribution to the esteemed book "97 Things Every Application Security Professional Should Know" (Oreilly). As a dedicated advocate for workplace equity, Viraj actively promotes diversity and inclusion in cybersecurity through her involvement in various communities and initiatives, empowering women to succeed in the industry.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

39

LISA VENTURA

RISING LIKE A PHOENIX IN THE FACE OF CYBERSECURITY ADVERSITY

by Lisa Ventura MBE, Founder – Cyber Security Unity

In mythology the phoenix is a symbol of rebirth,

Just as this mythical bird rises from the ashes,

regeneration and immortality. There are variations of

organisations today must often undergo similar

the myth in many culture: Greek, Egyptian, Persian.

regenerations to overcome cybersecurity challenges, especially if they have been hit by a cyber attack or

THE PHOENIX: A SYMBOL OF REBIRTH AND RENEWAL

data breach. Resilience and renewal in cybersecurity

The mythical phoenix is a majestic bird, radiant and

attacks. They demonstrate the enduring strength

beautiful, with a fiery aura. According to the myths,

of human ingenuity, strategic foresight and the

the phoenix lives for several hundred years before

relentless pursuit of better defences.

represent more than the ability to recover from cyber

burning itself on a pyre of its own making. From the ashes, a new phoenix emerges, reborn and renewed, continuing the cycle of life, death and rebirth.

THE FALL: CYBER SECURITY ATTACKS AND THEIR CONSEQUENCES Cyber attacks are becoming increasingly

The symbolism of the phoenix is rich and profound,

sophisticated and frequent, targeting organisations

representing themes of resurrection, immortality and

of all sizes and in all sectors. These attacks can

the eternal cycle of life and death. It embodies the

range from data breaches, ransomware and phishing

idea that from destruction comes new life, strength

to advanced persistent threats (APTs) and zero-day

and vitality. This imagery has resonated throughout

exploits. The consequences are often severe. They

history, influencing art, literature and modern thought.

can include financial loss, reputational damage,

It is often invoked as a metaphor for overcoming

regulatory penalties and erosion of customer trust.

great challenges or disasters and emerging stronger:

40

something an organisation must do if it has been

Take the ransomware attack that struck several

impacted by a cyber-attack or data breach.

major hospitals in London in June 2024, creating

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

widespread disruption across the city’s healthcare

attack on London’s hospitals serves as a reminder

services. The attack primarily targeted Synnovis, a

of the growing cyber threats facing healthcare

pathology service provider partnering with facilities

systems worldwide.

like Guy’s, St Thomas’, King’s College and other as it severely impacted clinical operations, particularly

THE ASHES: UNDERSTANDING THE DAMAGE AND ROOT CAUSES

blood transfusions and pathology services.

Recovery from a cyber attack requires a clear

hospitals. This attack was declared a ‘critical incident,’

understanding of the incident’s impact and the factors It forced hospitals to cancel or postpone numerous

that led to the breach. This involves a thorough

elective procedures and outpatient appointments

investigation to identify how the attack occurred,

as they struggled to access vital medical data and

what vulnerabilities were exploited, and the extent

laboratory results. The disruption was substantial,

of the damage. It is essential to assess both the

with over 6,000 outpatient appointments and nearly

technical aspects (such as compromised systems

1,500 elective procedures postponed within the

and stolen data) and the broader organisational

first month. This also put additional pressure on

impacts (such as disrupted operations and shaken

emergency services, which remained operational but

stakeholder confidence).

under strain due to increased reliance on universal blood types like O Negative and O Positive.

A critical component of this phase is conducting a post-mortem analysis. This involves not just

The incident highlighted vulnerabilities within the UK

identifying technical failures, but also examining

healthcare sector’s IT infrastructure and the critical

procedural and organisational shortcomings that

need for strong cybersecurity measures. Despite prior

may have contributed to the breach. Was there a lack

investments in security, Synnovis and its partners

of adequate security training? Were critical patches

found themselves grappling with the aftermath of the

not applied in time? Did the organisation have an

attack,. They worked closely with the National Cyber

appropriate incident response plan? Addressing these

Security Centre and other cyber operations teams to

questions helps to form a comprehensive picture of

mitigate the damage and restore services. This cyber

the incident and lays the groundwork for recovery.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

41

THE REBIRTH: BUILDING RESILIENCE

with the knowledge and tools to recognise and

Resilience in cybersecurity is about more than just

respond to security threats. Additionally, clear

recovery; it’s about emerging stronger and better

communication and policies regarding data

prepared for future challenges. This process involves

protection and incident reporting are essential.

several key steps:

4.

Enhancing incident response capabilities: an effective incident response plan is critical for

1.

Strengthening defence mechanisms: post

minimising the impact of cyber incidents. This

incident, organisations should reassess and

plan should include predefined procedures

enhance their security infrastructure. This

for different types of attacks, roles and

includes deploying advanced threat detection

responsibilities, communication strategies and

and prevention systems, strengthening

steps for containment and recovery. Regular

network defences and implementing robust

drills and simulations can help ensure the

encryption protocols. Regular security audits and

response team is well-prepared to handle real

penetration testing are also crucial to identify and

incidents swiftly and efficiently.

rectify vulnerabilities before they can be exploited.

2.

monitoring is vital to detect and respond to

THE ASCENDANCY: RENEWAL AND INNOVATION

threats in real-time. This involves using security

Phoenix-like rebirth in the cybersecurity industry is

information and event management (SIEM)

not just about recovery; it’s about transformation and

systems which aggregate and analyse data from

innovation. Organisations must not only rebuild: they

various sources to provide a comprehensive

must also innovate to stay ahead of evolving threats.

view of the organisation’s security posture.

This involves:

Implementing proactive monitoring: continuous

By identifying anomalous activities early organisations can mitigate potential breaches 3.

42

1.

Adopting emerging technologies: new

before they escalate.

technologies such as artificial intelligence (AI)

Fostering a culture of security: cybersecurity is

and machine learning can significantly enhance

not solely the responsibility of the IT department;

cybersecurity defences. These technologies can

it requires a holistic organisational approach.

help in predicting and identifying threats faster,

This means cultivating a culture where security

automating responses and even anticipating

is prioritised at all levels. Regular training and

potential vulnerabilities based on patterns

awareness programs can equip employees

and trends.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

2.

P E R S P E C T I V E S

Investing in research and development:

normal business operations severely disrupted. This

continuous investment in research and

phase represents the ‘burning’ aspect of the phoenix

development is crucial for staying ahead of

myth, where the organisation undergoes a destructive

cyber threats. Organisations should invest in

experience, much like the phoenix engulfed in flames.

exploring new security technologies, developing data protection techniques. Collaboration with

RISING FROM THE ASHES: RECOVERY AND RESILIENCE

academia, industry consortia and security

Just as the phoenix rises anew, organisations can

researchers can also provide valuable insights

recover and rebuild themselves after a cyber attack.

and innovations.

This process is not merely about restoring systems

Promoting cybersecurity governance:

to their former state but involves learning from

establishing robust cybersecurity governance

the incident to strengthen cyber defences against

structures is vital for ensuring security practices

future threats. The key aspects of this recovery and

are aligned with business objectives. This

resilience in cybersecurity include:

advanced encryption methods and improving

3.

includes defining clear policies, standards and controls as well as regularly reviewing and

4.

1.

Assessment and analysis: after a breach

updating them to keep pace with the changing

organisations should launch a thorough

threat landscape. Additionally, involving senior

investigation to understand the root causes

leadership in cybersecurity decision-making

and the extent of the damage. This assessment

can help ensure security considerations are

is essential for identifying vulnerabilities and

integrated into all aspects of the business.

preventing future incidents. It mirrors the

Engaging with the cybersecurity community:

introspection and learning process that follows

Collaboration is a key aspect of resilience and

the phoenix’s death, leading to a renewed sense

renewal. Engaging with the wider cybersecurity

of purpose and strength.

community through information sharing,

2.

Rebuilding and strengthening: in the aftermath of

partnerships and participation in threat

a cyber attack, companies often need to overhaul

intelligence networks can provide valuable

their cybersecurity measures. This may involve

insights and enhance an organisation’s ability to

updating software, improving network defences,

respond to threats. Collective defence strategies

implementing stronger encryption methods and

and shared knowledge can significantly improve

enhancing monitoring systems. The rebuilding

the overall security posture.

process is akin to the phoenix’s rebirth, where the organisation emerges stronger and more secure.

PHOENIX RISING FROM THE ASHES: A METAPHOR IN CYBERSECURITY

3.

Developing an incident response plan: just as the phoenix prepares for its cycle of rebirth,

The concept of the phoenix rising from the ashes

organisations should develop and refine their

serves as a powerful metaphor for resilience and

incident response plans. These plans ensure

recovery following a cyber incident. Cybersecurity

that, in the event of a future attack, there is

threats, such as hacking, data breaches, ransomware

a clear, efficient and effective response to

attacks and other malicious activities, can severely impact organisations. These incidents often result in

minimise damage and facilitate swift recovery.

4.

Promoting a strong culture of security: cyber

significant data loss, financial damage and a massive

resilience is not just about technical defences

amount of reputational harm, akin to the metaphorical

but also about fostering a culture of security

‘death’ faced by the phoenix.

awareness and vigilance within the organisation.

Training employees, promoting best practices

A cyber attack can be a cataclysmic event for the

and creating a security-conscious environment

affected organisation. Critical systems may be

are all necessary for preventing incidents and

compromised, sensitive data stolen or corrupted and

ensuring a quick response when they do occur.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

43

THE ETERNAL CYCLE: CONTINUOUS IMPROVEMENT

ABOUT LISA VENTURA MBE

The concept of the phoenix’s cycle of death and

Lisa Ventura MBE is an award-winning

rebirth emphasises the importance of continuous

cybersecurity specialist, published writer/

renewal and improvement. In cybersecurity this

author and keynote speaker. She is the founder

translates to an ongoing commitment to enhancing

of Cyber Security Unity, a global community

security measures, staying informed about new

organisation dedicated to bringing together

threats and adapting strategies accordingly. As the

individuals and organisations who actively work

threat landscape evolves, so too must the defences

in cybersecurity to help combat the growing

and strategies employed by organisations.

cyber threat. As a consultant Lisa also works with cybersecurity leadership teams to help them

Just as the phoenix is reborn stronger and wiser,

work together more effectively. She provides

organisations can use the lessons learned from

cybersecurity awareness and culture training and

cyber incidents to build more robust systems

training on the benefits of hiring those who are

and processes. This continuous improvement

neurodiverse. She has specialist knowledge in the

cycle is essential in an environment where cyber

human factors of cybersecurity, cyberpsychology,

threats are constantly changing and becoming

neurodiversity and AI in cyber, and is also a

more sophisticated.

cofounder of International Imposter Syndrome Awareness Day. More information about Lisa

FINAL THOUGHTS

can be found on www.lisaventura.co.uk or

In cybersecurity an ongoing cycle of assessment,

www.csu.org.uk.

adaptation and innovation mirrors the death and rebirth of the phoenix. As threats evolve the strategies and technologies designed to combat them should also evolve. Organisations that embrace resilience

LISA ON SOCIAL MEDIA

and renewal not only recover from setbacks but also emerge stronger, more agile and better equipped

x.com/cybergeekgirl

to face future challenges. Just as the phoenix rises from its ashes, so too can organisations hit by

www.linkedin.com/in/lisasventura

cyber attacks. www.facebook.com/lisasventurauk

www.instagram.com/lsventurauk

www.youtube.com/@CyberSecurityLisa

CYBER SECURITY UNITY'S CHANNELS www.linkedin.com/company/csunity

x.com/CyberSecUnity

www.facebook.com/CyberSecUnityUK

44

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

JO STEWART-RATTRAY

RESILIENCE AND INNOVATION: WOMEN’S RISING INFLUENCE IN CYBERSECURITY

by Jo Stewart-Rattray, Oceania Ambassador, ISACA

Cybersecurity presents both challenges and

What I find most inspiring is that these stories of

opportunities for women. No doubt gender bias still

persistence are not just about personal achievements,

exists. No doubt women remain under-represented

but also about the push for greater equality in a field

and under-paid. No doubt women in the industry

long dominated by men. As more women break into

find it hard to return to work after maternity leave,

cybersecurity they are also breaking down barriers,

experiencing various barriers to re-entry.

not only for themselves but for future generations of women in tech. I am witnessing a collective effort to

But there are positives to build upon. There are

bring about change.

insufficient workers globally, and organisations are increasingly realising the advantages women bring

RESILIENCE IN ACTION

to cybersecurity. These include diverse problem-

The journeys of women in cybersecurity are filled with

solving skills, a strong sense of ethics, innovation and

examples of resilience that inspire others and drive

enhanced team dynamics. And there are financial

change. At the 2023 United Nations Commission

rewards to be gained by having more women in the

on the Status of Women I hosted a conversation

workforce. We know that companies where women

circle with the National Rural Women’s Coalition in

occupy 30 percent or more of executive roles are

which 12 countries were represented. We discussed

seeing a 15 percent boost in profitability.

the affordability and accessibility of technology.

What struck me most was the innovation displayed

46

I am witnessing examples where the determination of

by these incredible women; innovation driven

women is slowly but surely reshaping cybersecurity.

by necessity.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

A female IT leader in Ghana shared her struggles

At the heart of SheLeadsTech is a commitment to

to gain internet access in some of the more remote

building a supportive network where women can

villages she had to travel to for work. Her solution

connect, share experiences and support each other.

came from a child who—from the top of a tree—saw

Having strong female mentors and role models not

her frustration and told her that sometimes he was

only helps women break into the tech industry but

able to get internet coverage when at the highest

also empowers them to excel. This kind of support

point of the tree! So, to report back to head office, she

creates a culture of belonging, where women are

typed her message and sent the willing young boy

equipped with the skills, confidence and resources to

back up the tree with her phone to hit send. Now, she

thrive in any role they pursue.

is a welcome visitor to these villages, reimbursing the children for helping her gain internet access!

Every woman who overcomes obstacles and succeeds in cybersecurity is not only achieving

In Nigeria we learnt that mobile phones are a

her own goals, she is creating a pathway for future

status symbol, and people would rather give up

generations. This growing legacy of leadership is

necessities like a meal or transportation than give up

inspiring more women to see cybersecurity not only

their phones.

as a career, but as a more inclusive and forwardthinking industry in which they can lead and excel.

Closer to home, women in cybersecurity and technology encounter daily obstacles and manage the demands of their roles while navigating

ABOUT THE AUTHOR

biases and gender stereotypes along with societal

Jo Stewart-Rattray has over 25 years’ experience

expectations. While their challenges may differ from

in the security industry. She consults on risk and

those of their peers in Ghana or Nigeria, they share

technology issues with a particular emphasis

a common thread of resilience and innovation in

on governance and IT security in businesses

difficult situations.

as a director with BRM Advisory. She regularly provides strategic advice and consulting to

Whether it’s being overlooked for promotions, earning

the banking and finance, utilities, healthcare,

less than their male counterparts or needing to

manufacturing, tertiary education, retail and

send a phone up a tree for a signal, these women

government sectors.

consistently demonstrate resourcefulness. Their perseverance is gradually driving progress and setting a powerful example for others in the field.

www.linkedin.com/in/jo-stewart-rattray-4991a12

SUPPORT NETWORKS AND MENTORSHIP In my own career I’ve frequently been the only woman in the boardroom or at client meetings where I have learnt how crucial it is to build strong networks, both locally and globally, to drive lasting change.

Initiatives like ISACA’s SheLeadsTech program are not only critical in addressing the issues facing women in cybersecurity, they also provide a central hub for those with a shared mission. They offer more than just educational resources, fostering a sense of community and mentorship that’s crucial for career growth.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

47

STUART CORNER

ETHICAL HACKING: IT’S A MAN’S WORLD

by Stuart Corner

In Australia, women account of about 17 percent

Sajeeb Lohani, Bugcrowd’s global technical

the cybersecurity workforce. Globally, the figure is

information security officer and senior director

somewhere between 20 and 25 percent, according

cyber, says getting more women into cybersecurity

to ICS2. But there is one important sector of

is crucial not only for promoting gender equality

cybersecurity that has failed to achieve anywhere

but also for improving the overall performance of

near this level of participation by women: ethical

cybersecurity teams. “Diverse groups bring a wider

hacking, where female representation is a mere

range of perspectives, which can enhance problem-

four percent.

solving and innovation, which is why I believe security teams are required to embrace people from different

Ethical hackers are cybersecurity experts who,

walks of life. If they do not, they will not be able to

without being given any inside information, are

cater for the various types of business units within a

engaged to try and find weak points in organisations’

company, and will follow the traditional standards of

cybersecurity defences. They are rewarded with a

cybersecurity teams being a ‘No’ shop.”

‘bug bounty’ for each vulnerability they discover, with payment based on the severity of that vulnerability.

Lohani—who mentors women through the Australian

Many operate through companies that match ethical

Women in Security Network—told AWSM, “A

hackers with clients and manage payments to them.

significant factor is the pervasive cultural stereotype that depicts cybersecurity as a male-dominated, high-

One such company, Bugcrowd (founded in Australia in

risk and technical domain, discouraging many women

2012 but since 20128 headquartered in the US), has

from considering it as a viable career option.”

been surveying the global ethical hacker community

48

annually since 2017 and publishing its findings. Of

He also volunteers with Kids SecuriDay, an

the 1300 members of the global ethical hacking

organisation that runs events for students around

community it surveyed for its latest report, Inside the

the world, and says such initiatives aimed at young

Mind of a Hacker 2024, only four percent identified as

individuals in general can help by offering early

female, and 94 percent as male.

engagement in STEM and mentorship programs,

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

teaching these individuals how to appropriately

starter mentality is complemented by peer-to-peer

celebrate their wins and providing more inclusive

learning, with 35 percent of hackers citing friends or

future work environments.

mentors as key to their educational journeys.”

WHAT IT TAKES TO BE AN ETHICAL HACKER

Not that ethical hackers lack formal education.

If you are a woman with any personal aspirations to

“Almost three-quarters boast college degrees or

address the underrepresentation of women in the

higher, reflecting a level of academic achievement

ethical hacking community by becoming an ethical

rivalling many traditional professional fields,” the

hacker yourself, there’s a few things you should know:

report says.

apart from being male, ethical hackers demonstrate a fairly narrow range of personal attributes. Seventy five

It also dispels the oft-cited classic stereotype of the

percent speak at least two languages, and 17 percent

hacker as an isolated individual, forever hunched over

more than three. Seventy eight percent are aged

a keyboard. Almost half of those surveyed spent less

between 18 and 34 years, and 56 percent between 18

than 10 hours a week hacking and only 23 percent

and 24 years.

spent more than 30 hours a week. The rest, the report says: “They’re your coworkers, neighbours and maybe

That aside, there seem to few barriers to being an

even your barista!”

ethical hacker if you are so minded. According to the report: “Hackers have a striking preference for self-

And ethical hackers display many attributes likely

directed learning, with 87 percent of hackers crediting

to make the role attractive to women. “Today’s

online resources for their skills, it says.

hackers are active community members working toward the common good,” the report says. “A

“But the learning doesn’t stop at online tutorials. A

significant 82 percent are committed to building

remarkable 78 percent of hackers proudly wear the

lasting relationships with companies and bug bounty

badge of being self-taught, showcasing a DIY spirit

program owners, creating a sustained defence.

that’s deeply ingrained in hacker culture. This self-

Knowledge sharing is at the heart of this community,

I S S U E 22

WOMEN IN SECURITY MAGAZINE

49

with 85 percent of hackers dedicated to educating

The report contends that the hackers surveyed

others. The spirit of mentorship is strong too. Instead

“are security experts on the cutting edge of an

of gatekeeping, hackers are inviting others in, with 81

ever-evolving threat landscape.” If this is so, other

percent involved in guiding and working with peers.”

security experts should be deeply concerned about ethical hackers’ views on AI. A significant majority,

THE ETHICAL HACKER PERSPECTIVE ON CYBERSECURITY

78 percent, believe the risks associated with AI

Profiling the ethical hacker community is only one

landscape is evolving too rapidly to adequately secure

aspect of the report. It also reflects their views on

against, and 93 percent believe companies using AI

important aspects of cybersecurity. Ethical hackers

tools have introduced a new attack vector for threat

are at the sharp end of cybersecurity: they are

actors to exploit.

outweigh its potential, 82 percent believe the AI threat

likely to be first to see new attack techniques, and be early adopters of threat detection techniques

The, relatively, good news is that 73 percent of

and countermeasures.

respondents were confident that their abilities as a hacker would enable them to uncover vulnerabilities

And there is nothing making a bigger impact on

in new AI-powered apps.

cybersecurity today, for good and ill, than artificial intelligence. Its use for good has risen dramatically.

And their abilities, as identified in the report, align

In Bugcrowd’s 2023 ethical hacker survey only 23

well with the abilities women bring to cybersecurity:

percent of respondents believed AI technologies could

a level of creativity that AI lacks; the ability to ‘think

enhance the value of ethical hacking. In the 2024

outside of the box’, which gives advantage over ML

survey that figure was 71 percent.

models and predictive AI; the ability to think of new attacks that AI cannot predict because AI relies on

Eighty six percent of respondents said AI had

known information.

fundamentally changed their approach to hacking, for better or worse. However the figures for those who

WHAT IT TAKES BE AN ETHICAL HACKER?

believe AI technologies will outperform the abilities

If this article has inspired you to contemplate making

of hackers have barely changed since 2023, from 21

your own contribution to addressing the miniscule

percent to 22 percent, as have the figures for those

representation of women in the ethical hacking

who believe AI technologies will eventually replicate

community, there’s a useful blog, The Shocking

the human creativity of hackers, (28 percent to

Truth You May Not Know About Being A Full-Time

30 percent).

Bug Hunter, written by Bugcrowd’s VP of operations, Michael Skelton.

50

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Want to sponsor an event but have no one to execute it?

Need stand out booth designs?

Merchandise & Prize giveaways Booth social media presence Booth set up and pack down Booth staffing Booth marketing

LET US HELP YOU OVERCOME YOUR EVENT MANAGEMENT CHALLENGES

We can execute anywhere in Australia, REACH OUT TODAY FOR AN INSTANT QUOTE. The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

FATEMAH BEYDOUN

WHY CONTINUOUS SECURITY IMPROVEMENT FOR DEVELOPERS IS THE KEY TO RENEWED RESILIENCE IN THE MODERN SECURITY PROGRAM

by Fatemah Beydoun, Chief Customer Officer, Secure Code Warrior

We live in a time of great flux and, true to form, the

to the contemporary threat landscape, positioning

cybersecurity industry keeps growing in complexity

their development cohorts for risk reduction and

and scope. The AI revolution of the past 18 months

vulnerability elimination. Here is what they do

has seen many enterprises scrambling to equip

differently, time and time again.

security leaders with the tools required to combat an increasingly borderless attack surface, not to mention responding to growing governance and regulatory requirements demanding significant attention.

DEVELOPERS HAVE PRECISION GUIDANCE AND THE RIGHT TOOLS TO PRIORITISE SECURITY One aspect of cybersecurity rarely discussed in depth

Few would envy CISOs faced with these

is the fact that code-level vulnerabilities are, at their

circumstances. Still, while change can be challenging

core, a human-driven issue. These vulnerabilities are

to navigate, the current security climate feels like the

often perpetuated by poor coding patterns and bad

perfect time to embrace measures that will improve

habits that developers have picked up throughout

software quality and reduce risk for years to come.

their careers, and these can have devastating consequences. Make no mistake, the blame does not

52

I work with some of the most talented and resilient

lie with individual development teams. It lies with the

security professionals on the planet. Many of them

industry as a whole, and our lack of suitable response

are reinforcing their security programs to in response

to developers’ needs for upskilling.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

Bug bounties and security champion programs do go some way towards creating security culture pillars within an enterprise, but these alone are rarely sufficient. Every day I work with CISOs who are rising above the status quo. They prioritise an approach that takes developers on the security journey, typically with executive buy-in for these internal programs. Their developers thrive in an environment where just-in-time, relevant learning pathways are emphasised, as are tools complementary to their tech stacks. These strategies help break down the significant barriers developers face when trying to contribute meaningfully to organisational security goals. They also pave the way for fair security-related

the skills shortage to code monoliths that are an

KPI outcomes.

increasing burden within the codebase.

DEVELOPERS ARE ASSESSED ON SECURITY READINESS AND INCENTIVISED TO IMPROVE

THERE IS AN ORGANISATION-WIDE FOCUS ON SOFTWARE SECURITY AND QUALITY

It is rather alarming that, today, we live in a world

One of the biggest pushes towards higher

that is essentially powered by software. The recent

software security standards has come from the US

CrowdStrike outage proved just how easily a bug can

Government’s Cybersecurity & Infrastructure Security

bring critical infrastructure to its knees. Despite this,

Agency’s (CISA) Secure-by-Design guidelines. These

developers do not have formal security certification

are the result of a joint initiative from multiple national

or verification processes that clear them to work

governments, including those of the United States,

on these vital and often precarious systems;

United Kingdom, Australia, Canada and Germany.

processes akin to those applying to architects or mechanical engineers.

These guidelines promote the importance of shipping secure software from the start. They seek to establish

Security leaders within organisations committed

ultimate ownership of security with software vendors,

to a high standard of software security resilience

as opposed to their end-users. This is a significant

are taking steps not only to upskill the development

break from the status quo, but, if executed well, will

cohort but to routinely assess their security readiness.

assist in reducing cyber risk across the board.

Perhaps a Java developer has proven themselves security-confident, but they want to be deployed on

The best security leaders are heeding this call,

a Ruby-on-Rails project to which their skills may not

and pledging their commitment to higher software

necessarily apply. A modern security program would

standards. For most enterprises, success will

assess the individual, identify knowledge gaps and

require a cultural shift that prioritises role-based

provide that developer with the upskilling required for

security awareness along with ongoing, hands-on

them to be successful. This would enable them to

support for the development cohort. However, there

expand their career horizons on the job, increase their

is no better time than now to get serious about

job satisfaction and deliver better security outcomes.

uplifting internal security programs, and the sooner we do so the sooner we will be able to point to

We must get to a place where data-driven insights

meaningful improvements.

inform rapid, high-impact company decisions. After all, the cybersecurity industry does not sleep, and threat actors already have an unfair advantage over

www.linkedin.com/in/fatemah-beydoun-b6555bb1

security leaders struggling with everything from

I S S U E 22

WOMEN IN SECURITY MAGAZINE

53

MARCUS LAVALLE-SMITH

CYBERSECURITY AND HARRY POTTER: A PHOENIX RISING FROM THE ASHES

By Marcus Lavalle-Smith, Principal Consultant at Decipher Bureau (Cyber Security Recruitment). Harry Potter fan.

What similarities can we draw between cybersecurity

THREATS

and Fawkes, the highly intelligent male phoenix and

Phishing: just as Barty Crouch Junior disguised

companion of Aldus Dumbledore in the Harry Potter

himself as Alastor ‘Mad-Eye’ Moody using Polyjuice

movies? Fawkes was able to disappear at will and

Potion in the Goblet of Fire to get up to no good, cyber

reappear in a flash of fire.

criminals disguise themselves as someone you can trust. They trick you to reveal information that should

The theme for this issue leads me to draw a

be kept confidential and use that information for

strong correlation between cybersecurity and

malevolent purposes.

the Harry Potter stories. Just as Harry and his friends are fighting against dark forces of evil

Social engineering: similar to phishing, this is where

that we mere Muggles cannot see, so too are

a cybercriminal will pretend to be someone else to get

cybersecurity professionals.

information or to gain access to systems and data.

HARRY POTTER – THE CHOSEN ONE (CYBERSECURITY PROFESSIONAL)

Insider threat: Severus Snape became a double

Cybersecurity teams defend us all against threats

Voldemort’s lieutenants while secretly working for and

through a variety of means: they are ready to protect

reporting back to Dumbledore.

agent, pretending to be a Death Eater and one of

us and our networks and assets at all costs.

54

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

The enemy: Like the nefarious black hats constantly

The Patronus Charm: the Patronus is a powerful

seeking to cause chaos and hurt people, the Dark

charm that forms a shield for the spellcaster to

Lord (Voldemort) represents the embodiment of

protect against Dementors, evil creatures that drain

evil, always working to breach defences, steal

happiness and hope from people. (I’m sure we all

data (wands), and take hostages for ransom. Like

know a ‘Dementor’ in our lives). In our world, antivirus

Voldemort’s Death Eaters, black hats often have a

and anti-malware software act like a Patronus Charm,

team of other bad actors backing them up.

protecting systems and companies.

The tools: the invisibility cloak. One guess what this

CONCLUSION

one is about: encryption. Our hero’s trusty invisibility

While there is no doubt 2024 is proving to be a

cloak lets him move around unseen. Similarly,

challenging year for all in cybersecurity, I firmly

encryption makes data invisible from those who

believe we can all take a flaming feather out of

should not/do not need to see it.

Fawkes’ book and, like a phoenix rising from the ashes, become smarter and stronger than ever.

The sorting hat: identity and access management has been such a hot topic this year it would be remiss

www.linkedin.com/in/marcuslavalle-smith

of me to not include it in this article. In cybersecurity, your access control system performs a similar role to the sorting hat by assigning permissions (houses) to users based on their role/background and what they do.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

55

SHINESA CAMBRIC

MAXIMISING YOUR MOMENT

by Shinesa Cambric, Principal Product Manager at Microsoft and personal growth that empowers us to inspire

“And the day came when the risk to remain tight in a bud was more painful than the risk it took to blossom” – Anais Nin

those around us who may be watching our journeys for encouragement.

My own story of resilience and renewal led me to spend time analysing how to be more intentional about my personal brand and what I wanted out of my career, determining the legacy I wanted to leave and how I needed to stretch myself to achieve my goals.

Two pivotal conversations sparked my personal

Technology has been evolving faster than ever and

resilience and renewal journey. The first was having

that evolution shows no signs of slowing down.

a leader share with me that I would never advance

In the days ahead, we will all have the opportunity

further because no one knew who I was. The second

to adapt and drive innovation through technology,

was a mentor who shared a story with me about

but I believe a bigger opportunity will be how we

fingerprints.

innovate ourselves.

If you know anything about small children, you know With the growth of readily available AI and machine

they touch everything and leave their fingerprints

learning technology access to knowledge will no

behind. You know where they’ve been. My mentor

longer be a barrier to innovation. Key to innovation

asked me about when my journey ends, how others

will be how we learn to pivot and embrace the art of

would know I had “been there.” What were the

the possible. As women in technology we all have

fingerprints I wanted to leave behind?

stories of resilience, of how we faced challenges and overcame them, despite difficulties.

In the book Securing Our Future: Embracing the Resilience and Brilliance of Black Women in Cyber,

56

Resilience for us is nothing new. However, what I’d

written by The Black Women in Cyber Collective,

like to challenge each of us to think about is how

I share my story and my motivation to challenge

we combine that resilience with a sense of renewal

myself to move beyond being a quiet introvert, to

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

disguise. If I had simply listened to the leader who told me I would never rise beyond where I was, and had used that as an excuse to shrink back, I would have missed a wonderful opportunity to move towards the legacy I want to leave. I would have missed the opportunity to have my children and those around me know that, just because others want to place limits on you does not mean you have to allow yourself to be defined by them.

Second, be willing to take some risks. In the Broadway play Hamilton, there is a song with the chorus: “I am not throwing away my shot.” Don’t allow fear to cause you to throw away your shot. Growth comes through doing new things, and starting new things will be uncomfortable.

Third, ignore your critics. Your journey and what comes out of it are none of their business. Think about what YOU want to be known for. Last, and most important, you will need to continue to be resilient and to reflect on how far you’ve come, to share your success with others who need encouragement, and celebrate your journey and accomplishments along the way. www.linkedin.com/in/shinesa-cambric

dare to be different and to use that difference to,

ABOUT THE AUTHOR

hopefully, inspire others to recognise possibilities

Shinesa Cambric (CCSP, CISSP, CISM) is an

and strive to achieve. In my case those achievements

award-winning cybersecurity innovator with two

were becoming a bestselling author (twice), a public

patents pending and expertise on the intersection

speaker and a mentor and advocate for others

of GRC, IT and application security. At Microsoft

within cyber.

she leads a team combining AI and machine learning to identify and respond to emerging

I’ve learnt that excitement in life comes from allowing

threats against digital identities. She is lead

challenging moments to build something new in

developer of the ISACA GCP audit program,

us, from creating new dimensions to who we are

certification advisor for the Cloud Security

and insights into all we are capable of. I would like

Alliance and CompTIA, lead author of the best-

to share some general tips on how to move beyond

selling book Cloud Auditing Best Practices, and

where you are and grow into who you want to be.

contributing author to the bestseller Securing Our Future: Embracing the Resilience and Brilliance of

First, you must learn to recognise opportunities for

Black Women in Cyber.

growth, because sometimes they come wearing a

I S S U E 22

WOMEN IN SECURITY MAGAZINE

57

MERIAM EL OUAZZANI

DOING IT WITH PASSION AND HONOURING MY FATHER: FROM ENGINEERING GRADUATE TO SENIOR CYBERSECURITY EXECUTIVE

By Meriam El Ouazzani, Regional Sales Director, Middle East, Turkey and Africa at SentinelOne My late father’s encouragement to dive into something

passion could take me. He pushed me to pursue

challenging helped set me on the path to professional

my ambitions. And, if it was something unusual and

fulfilment and success in the IT world.

challenging, all the better.

Female engineers were few and far between in

My father’s support and guidance were the fuel that

Morocco when I began pondering my career options.

propelled me to join the minority of women enrolled

It’s often said that you cannot be what you cannot

in computer engineering studies in my homeland and,

see, and perhaps that’s why, in common with many

after graduation, move to Dubai.

women of my generation, I did not view IT as a potential career path, despite my natural aptitude for

My first job, selling servers for HP, brought me into

STEM subjects.

contact with another fantastic male mentor; a senior executive with the firm who, like my father, formed

58

Fortunately, I had a farsighted father who believed

the view that an oversized challenge would help bring

in me and knew how far my perseverance and

out the best in me. With his support I moved into a

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

I N D U S T R Y

P E R S P E C T I V E S

role which required me to understand the technology

Security was the field I wanted to grow in. It was

we were promoting and to use the technical expertise

what customers wanted to hear about and what I

gained to engage with customers. I had great people

personally felt most inclined to help customers with:

around me, guiding me and providing me with a great

being part of customers’ security strategy and helping

chance to learn about the technology.

them execute on their security plans.

Good effort brings great results. A few years into

Knowledge opens doors, especially if it’s gained when

the role I was noticed by Cisco and offered a job in

a developing technology is in the early stages of the

its sales team. Thanks to that transition, I was able

Hype Cycle. The insights I acquired at HP and the

to start learning more about network security, an in-

skills I developed allowed me to segue into a more

demand technology at that time.

senior role with Cisco. The busy years I spent at Cisco, in both generalist and specialist sales roles,

I joined a talented team and, because of the rapid

deepened my understanding of networking and

evolution of the industry, often had to learn the

security. I was further inspired to pursue security

hard way. With a never-lose mentality, I was able to

when I moved into a product sales specialist

prove myself and climb the career ladder. I moved

role where I focused on wireless technology and

from sales manager to product specialist sales and

wireless security.

discovered along the way where my passion lay.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

59

While I had amazing leaders supporting and

All up, it’s been quite a journey! I’ve enjoyed every

mentoring me, and helping my growth, I realised

minute of the ride and I’m grateful to the people

that what I needed was focus. I knew with certainty I

who believed in me, backed me and celebrated

wanted that focus to be on cybersecurity.

my successes with me: a family who stood by me every second and every step of the way; my father,

I was approached by VMware to join its Middle East,

whose pride in his boundary-pushing daughter was

Turkey and Africa (META) team focusing on its

unparalleled; the equally supportive colleagues who

security solution, NSX. I came on board with a remit

urged, coached and mentored me to develop the

to set up a partner ecosystem for the business in

capabilities and qualities I needed to secure roles

the META region. It was another assignment which

involving greater responsibility and challenge.

necessitated me throwing myself in at the deep end and learning the technology in order to help our

These days I’m paying it forward, encouraging

partners develop strategies to sell and deploy our

growing talent in the industry and in my own young

technology at scale, with ease.

adult children to set their sights high and map out career plans that will help them get where they want

Then, I was tasked with building a security practice

to be, and to push themselves out of their comfort

from scratch at VMware after the company acquired

zones in the process. I have been fortunate to have

a new solution that needed to be integrated into our

a network of people to guide me, support me and

existing portfolio. My challenges was to position

encourage me. Today, I look at returning their favours

the product to appeal to a different set of buyers.

and trying to be the best support to my team and the

This required me to ensure the VMware teams

people in my surroundings.

developed new technical capabilities for both selling and deploying the solution, in the face of intense

Although things have changed considerably since

competition, particularly from Cisco. I focused on

I entered higher education and the corporate

building a strong go-to-market strategy. I chose to

world, we still have a responsibility to support

collaborate with colleagues who brought essential

those in our communities, particularly young

market knowledge and I engaged technical teams

individuals whose interests and aptitude lean

across the META region.

towards STEM-related fields, where but they are significantly underrepresented.

Once again, security was an essential element of the offering, and my time spent in this role cemented my

The impact of support can be profound. If we are

resolve to continue developing my cyber knowledge

committed to helping the next generation reach its

and capabilities, and to seek out opportunities with

full potential and to addressing the imbalances in the

companies delivering compelling value to customers

security field and the IT sector as a whole, we must

in this space.

all support the young people following us into the industry. There’s no better time than now to make

That resolve led me to accept a role with SentinelOne

this commitment.

four years ago to build its channel ecosystem. I was hired initially as a regional channel manager for the Middle East, Turkey and Africa, where I enjoyed

www.linkedin.com/in/meriam-el-ouazzani-2a75a727b

building the channel from scratch and fighting to get the best partners onboard. Subsequently, I was promoted to regional sales director in mid-2023.

60

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

BOOKS ON

CYBERSECURITY

BY AUSTRALIAN AUTHOR CRAIG FORD

CHECK THEM OUT AT CYBERUNICORNS.COM.AU/SHOP-PAGE

Source2Create Spotlight

Content Content allows you to establish, share, and strengthen your brand. It helps build relationships which is why we are shining the light on our content service.

Content strategies don’t just define the goals your content is intended to achieve, but also the procedure, processes and governance required to get there. We can show you how to manage your content effectively.

We can then use that content to attract, acquire and engage your customer and new prospects, deepening your relationships.

What are you waiting for?

REACH OUT TODAY

EMAIL team@source2create.com.au

CAREER PERSPECTIVES

KEN HENDRIE

CYBER ACCREDITATIONS - WHAT DOES AUSTRALIA REALLY NEED?

by Ken Hendrie, CEO and founder of Cyconsol IT’S NOT NEW NEWS

Today, there are more certifications available in

People in our industry are not providing essential,

the industry than I’ve had breakfasts. The market

credible, reliable cybersecurity advice. Misleading and

has grown in line with the profits that can be made

incorrect recommendations are giving the industry a

by learning institutions. But not all cyber training

bad name. (Shock, horror!)

organisations are created equal. Some have low integrity. For example, their certification could be

Australian companies want professional, high quality

gained through nefarious means, such as having

cybersecurity guidance from people who know their

someone else sit the exam, or the system itself might

subject matter deeply and how it can be applied to a

be insecure and open to manipulation. Course content

business, be it a large organisation or a small one.

might be loosely spun together and the validation of the practical exercises in the curriculum could

FINDING THE RIGHT CYBER EDUCATION

be dubious.

In the scramble to meet the significant shortage of skilled cybersecurity professionals a host of

New career entrants find it challenging to navigate

learning institutions have developed a multitude

the range of accredited cyber training courses and

of courses and certifications. With the abundance

determine which certifications employers value.

of cybersecurity training courses on offer it can

They can often waste money and time getting a

be difficult to identify those with highly competent

certification that does not add to their credibility or

trainers and good quality courseware. Testing for

build relevant skills.

comprehension and required skillsets is increasingly done online.

64

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

C A R E E R

P E R S P E C T I V E S

How do we shift the cybersecurity training industry

a good example of how industry certifications can

from the Wild West, where anything goes, to a

be inherited to provide a degree of assurance over

reputable, reliable industry with knowledgeable

individual assessors.

practitioners who have their skills independently authenticated and operate in an ethical and expert manner?

ESSENTIALS OF A GOVERNMENT ENDORSED SCHEME Here are the key attributes of the cyber training

CAN THE AUSTRALIAN GOVERNMENT SOLVE THIS CHALLENGE?

accreditation program Australia needs:

Many in the industry are encouraging the Australian

• Tiered learning – Remove the barrier of entry for

Government to develop a framework and a process

people at the beginning of their career, enabling

for validation of certifications that would ensure

them to access progressively more specialised

cyber specialists to deliver high quality, independent

training in an area. It should not be ominously

and pragmatic advice. The premise proposed is that specific roles should require specific certifications.

expensive to get started.

• High integrity courses – Only accredited course providers should be put forward. Their

Setting a framework for cybersecurity accreditation

courseware, trainers’ skill and delivery and exam

is no small task. Often, frameworks are created for

processes should be assessed for quality and

roles which are not relevant, or simply do not exist in

relevance to our market.

the Australian context. At the same time, the selection

• Oversight by an independent body – It cannot be

of accredited courses cannot be too restrictive,

a course provider itself. The body provided with

making it too difficult or too expensive to gain

oversight responsibility, existing or new, should

needed certifications.

not be strategically aligned to any one certification vendor. Independent assessment of each course

The UK’s National Cyber Security Centre has built the NCSC Certified Training scheme to provide a benchmark for cybersecurity training by assuring

is essential to provide a level playing field for all course vendors.

• Ongoing learning – Continuing professional

the quality of both the content and its delivery.

development is a key component. Because the

Courses are rigorously assessed by an independent

industry is rapidly changing as a result of new

certification body, APMG International, which has

developments and better solutions, maintaining

been appointed to independently manage and

knowledge is essential. This can be inherited from

maintain the required high standards of assessment.

the certifications themselves.

Locally, the Australian Signals Directorate (ASD) has supported higher standards for security assessments and training through the enhanced Infosec Registered Assessor Program (IRAP). The IRAP policy and training have been co-designed by ASD with government and industry representatives through a series of consultative forums to improve the culture and governance of the program. The IRAP endorsement requires the individual to have experience and a recognised top tier qualification in each of two separate categories. It is important to note there remains room for improvement within the current iteration of the IRAP program, but it is

I S S U E 22

WOMEN IN SECURITY MAGAZINE

65

A model built in collaboration with training organisations, service providers and buyers to meet local demands is the right approach. My experience tells me this is possible. As an exam writer for a global certification vendor, I know we can accurately assess courses for relevance and value in the Australian market. As an employer I’m always guiding my staff towards only those courses that meet high standards and provide superior value for money.

Businesses I work with seek out those who they know and trust. The time to do this is now, before more training vendors clutter this landscape.

I’m always open for a chat and an exchange of ideas, • Multiple accredited providers – Ideally there

and ready to share my experience with those looking

should be multiple options for people to choose.

for guidance based on what they might already have

For example there should not be only one course

and what they want to gain.

for someone wanting to be an ethical hacker.

• New entrants welcome – The industry should be an open market for training providers, not a closed

ABOUT KEN HENDRIE

system. For example, security and AI is a new

Ken Hendrie is CEO and Founder of Cyconsol.

realm with limited courseware and certifications;

He is an experienced security advisor to the

any program should be open and adaptive to

Australian Government, not-for-profit sector, and

evolving providers who address new topics

private industry. With 20 years of experience,

and specialties.

Ken has led projects for many local and state

• Ethical conduct acknowledgement – All

government agencies across Australia, America,

professionals should be aware of their obligations

South Korea, Malaysia and China. Ken plays

and the expectations of clients. Spelling out (and

an active role through the development and

agreeing to) self-evident behaviours and moral

review of industry publications, mentoring of

obligations must be emphasised: a Hippocratic

professionals (of all ages), delivery of training in

Oath for our industry.

the areas of cyber security, management, audit

• Aggregation of digital badges – The ability to

and IT Governance. He is actively involved in

check on a professional’s certifications from

the development and review exam items for the

multiple vendors would be an added benefit of a

global Certified Information Security Manager

central body.

(CISM) and Certified in the Governance of

• Consequences – The adherence to program

Enterprise IT (CGEIT) exams.

requirements must be enforced by a body that can impose real consequences, including the removal of accreditation and/or membership. The value

www.linkedin.com/in/kenhendrie

and reputation of the program will not survive if bad actors are allowed to remain.

66

W O M E N I N S E C U R I T Y M A G A Z I N E

www.linkedin.com/company/cyconsol

N O V E M B E R • D E C E M B E R 2024

Need Event Speaker Services

Tell us more about what YOU need....

Need an MC or host?

Looking for a keynote speaker?

Want to get matched with industry expert speakers?

Need speaker inspiration/ideas?

Looking for presenters or analysts?

Need your events speaker lineup managed end-to-end?

REACH OUT TODAY FOR AN INSTANT QUOTE. The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

ANGELA DUGGAN

HOMING IN ON THE CUSTOMER: FROM FINANCIAL UX CONSULTANT TO CYBER UX SPECIALIST

by Angela Duggan, VP of User Experience at BeyondTrust

My determination to work in a sector where I could

various employment options in the healthcare and

make a real difference saw me carve out a leadership

cybersecurity industries.

role with a leading security vendor.

Luckily, my hometown of Halifax Nova Scotia,

68

Pursuit of an engaging and well-compensated career

in addition to being a financial services hub and

is common for new graduates the world over, and

home to the regional headquarters of some of

I was lucky enough to embark on such a journey

Canada’s largest banks, is also a small city with a

shortly after completing my studies in 2003. I spent

big IT presence. Hence, former colleagues from my

eight years working as a user experience consultant

employer were able to facilitate an introduction to

to a Fortune 500 financial services organisation,

BeyondTrust, an identity and access management

where I learned a lot, earnt a lot and made a lot

vendor that had earned a stellar reputation in the

of friends.

financial services, utilities and government sectors.

But, as I gained knowledge and experience I came

UX NEWBIES

to the realisation I wanted to do more than simply

While BeyondTrust’s product offerings had very few

continue in the financial sector, contributing to

peers technologically, the user experience of its

enhancing the wealth of the already wealthy. I needed

applications had taken a backseat up to that point

to feel I was part of something more meaningful

(a common tale when a company is a pioneering

and that my day-to-day dedication contributed to

developer in the vanguard of high-technology).

the greater good. As a result, I began exploring

However, innovative IT companies inevitably attract

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

C A R E E R

P E R S P E C T I V E S

competitors and, as all focus on solving the same problems and doing things better and more simply, delivering an excellent user experience becomes a more compelling priority.

BeyondTrust’s head of engineering recognised this. While he was no authority on UX, he knew a piece of the puzzle was missing and he was keen to find someone who could help him fill that gap, despite receiving somewhat tepid support from senior leadership.

Fortunately for me, I was that someone. Upon joining

took on its name. Bomgar had earlier that year been

the company in 2015 as its inaugural UX professional

acquired by private equity firm Francisco Partners.

I set about eliciting insights and opinions from the

These deals saw BeyondTrust acquire two additional

people creating, marketing and selling its flagship

UX specialists and a CEO who needed no convincing

products. Conducting the same exercise with

of the contribution our discipline could make to

customers gave me a good idea of what was working,

product development and customer success.

what wasn’t and where improvements might best be made.

At that point, I put my hand up for a director role and was asked to provide a roadmap for expanding the

FOCUS ON THE USER

team and the scope of our operations. Fast forward

While, on the surface, financial services and

six years and we’ve done both with a vengeance.

cybersecurity seem to have little in common, I noticed

I’m proud to lead a high performing team of 28

significant similarities between the two sectors on the

UX professionals and even prouder of the value

UX front during this initial fact finding tour.

they continue to generate for BeyondTrust and its customers.

For example, internal apps used by traders need to be ultra-responsive and easy to use, because, when

I’m also grateful for the support I’ve received, not only

you’re operating in that environment where the stakes

from the senior leadership team but from internal

are high, milliseconds count.

and external female mentors. They encouraged me to strongly advocate for the changes I recognised were

It’s the same story at the sharp end of cybersecurity:

necessary at BeyondTrust and they helped me turn

an unfolding incident creates extraordinary stress for

my debut almost a decade earlier into a challenging

security admins. Being able to find, absorb and use

and fulfilling leadership role.

data quickly and easily is paramount.

Today, I’m delighted to be doing the same for other A great deal of the change I effected in those early

young women via the company’s mentoring program.

months and years was cultural; encouraging our

I’m also committed to boosting gender diversity in my

teams to focus not only on the technical challenges

team and in our industry as a whole. Cybersecurity

they identified, but also on the humans using

continues to offer opportunities aplenty for motivated

our applications.

female candidates who want to work in a sector where they can make a meaningful contribution.

RISING UP THE RANKS In September 2018 Bomgar, a developer of secure remote support software, acquired BeyondTrust and

I S S U E 22

www.linkedin.com/in/angeladuggan

WOMEN IN SECURITY MAGAZINE

69

CRAIG FORD

RISING PHOENIX: REINVENTING WHO YOU ARE

by Craig Ford, Cofounder and Executive Director, Cyber Unicorns

If you were to look at my social media or even one

Do you think that is true?

of my two websites (company and author sites) you would likely sit there and think “Wow, Craig is

I think in our society we have been conditioned to

pretty successful.”

believe so, but I don’t think that is what we should do.

I think we should show our warts and all: show the

I have won quite a few awards. I have published six

world the real story, not just the glossy version of it.

books, given multiple keynote speeches at events around the country and have an international speech

That’s easier said than done, right? Yes, it probably

locked in for later this year. I’ve even had my face on

is, but let me be brave. Let’s look at the bumps in my

the cover of a couple of magazines.

road to becoming who I am today: the parts of my story you might not be familiar with.

I founded Cyber Unicorns to drive change in this industry, which I am extremely passionate about. It

IN THE BEGINNING

looks like I am doing pretty well, right?

Let’s go right back to my childhood. When I was three or four years old my parents split up, later divorcing. I

Yes, I guess I am, but what you see on people’s

lived with my father and a couple of my sisters. When

public-facing social media or websites is not the full

I started school, I was a really bad reader. I really

picture. These do not show you the bumps in the

could not read. I had to have special lessons in my

road, the challenges they have faced, or if they are as

first years in school to teach me how to read, because

successful as they make themselves appear to the

my dad’s priority had been feeding and clothing me,

outside world.

not teaching me to read or write. This is something I don’t often share, but I think it’s an important part of

It’s human nature. We don’t want to be too vulnerable.

who I am, especially when I am an Australian best-

We want people to think we are successful, so we

selling author of six books.

hide our mistakes, We can’t admit failure, which would make us appear weak.

70

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

C A R E E R

P E R S P E C T I V E S

MY FIRST ROLE IN CYBER

for more than half the staff at the MSP. I was one

As many of you would probably know, getting a

of them. It went back to a barebones team and cut

first role in cybersecurity is not very easy. I had

costs, as did so many other businesses.

more than 10 years in ICT technical support and system administrator roles. I had been doing general

I was made redundant and, honestly, I don’t hold a

security work before it was called security, but I was

grudge for this. I still get along amazingly well with

repeatedly rejected for roles in cybersecurity.

the owner. They had to look after their business, their family and the staff they could keep. A lot of tough

I had even obtained my first master of information

choices were made during that time.

technology management degree, in digital forensics, systems security. I had experience and qualifications,

NO JOB, FEW OPPORTUNITIES. NOT A GREAT SPOT TO BE IN

but no one was interested in giving me a shot.

I had already started my writing journey at that

and had almost completed a masters of information

time, contributing to CSO online, and my first book, When I finally did crack that first role as a senior ICT

A Hacker I Am, was a couple of months old. So, I

security engineer, I worked hard, pushing myself to

doubled down on the writing and created the second

excel, expanding my skills in pentesting and incident

book, A Hacker I Am Volume 2, while also pivoting to

response. I thrived for some three plus years.

take on a teaching opportunity at Western Sydney University for a couple of sessions, along with some

Then there was COVID.

other ad hoc writing opportunities to keep food on the table.

The company I worked for was an MSP looking after many pubs and clubs.

I pivoted and reinvented myself. I didn’t sit still. I pushed forward, finding my own path. It was a bumpy

Do you remember what happened with pubs and

ride and a little uncomfortable at times. But who did

clubs? They all shut down and went into a kind of

not feel that way through COVID?

hibernation. That essentially took away the need

I S S U E 22

WOMEN IN SECURITY MAGAZINE

71

BACK ON THE TOOLS

marks on who we are, but if we truly believe, we

Part way through COVID I bounced back, gaining a

can achieve our dreams, or at least give absolutely

contract with a big government agency, working hard

everything we have in trying.

to keep moving forward with my career but never letting go of the new path I had taken with my writing.

So, I have shown some of the bumps in my path.

I have been growing both parts of my career since

There are probably more, and I am more than happy

and I am proud of what I have been able to achieve.

to chat about them with any of you who would like to know more about my journey, but why don’t we all be

THE RISE OF CYBER UNICORNS

a little braver and show it is okay to fail, to show some

Cyber Unicorns is the creation of passion, something

vulnerability. Then we can all rise from the ashes like

I had been talking about for years: educating everyone

the phoenix.

on how to be safer in this digital world we live in.

COVID taught me one thing; you need to be brave and

Just don’t give up.

not put a hold on the things you want to achieve. We need to take a moment to calm ourselves and then just get on with the task and stop talking about what needs to be done.

www.facebook.com/profile.php?id=61552330571786

Just stand up and do it.

www.instagram.com/cyberunicorns.com.au

Like a phoenix rising from the ashes, reborn in its true

x.com/CraigFord_Cyber

beauty, you can do the same. Life gives us knocks sometimes; some small, some leaving permanent

72

www.linkedin.com/in/craig-ford-cybersecurity

W O M E N I N S E C U R I T Y M A G A Z I N E

www.cyberunicorns.com.au

N O V E M B E R • D E C E M B E R 2024

YOU E R A

INTEREST

E D?

Global Contributors

WANTED OUR NEXT ISSUE'S THEME:

Issue 23: Resurgence: The Phoenix's Triumphant Ascent

WAYS YOU CAN CONTRIBUTE: Contribute to one of our

editorial sections

What's Her Journey Career Perspectives Industry Perspectives Technology Perspectives Student in Security Spotlight

Run a listing for

any of the following

Submission Have a book?

Deadline: Have a podcast?

Nov 14th Have a blog?

Have free training and learning opportunities available?

REACH OUT TO JANE@SOURCE2CREATE.COM.AU TODAY

www.womeninsecuritymagazine.com

Need Data Admin Services

Tell us more about your data Need Data appending services?

Need database admin cleaning Data enrichment services

Data Entry Admin services Data Verification services

LET US HELP YOU OVERCOME YOUR BUSINESS DATA CHALLENGES PARTNER WITH A QUALITATIVE FAST-WORKING TEAM Our team understand the importance of time and efficiency when it comes to data projects.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

STUDENT IN SECURITY SPOTLIGHT

financial, medical, or intellectual property—and it needs to be protected the right way. I believe prevention is always better than trying to fix PRANIDHI HANDAPANGODA

things after the fact, and that’s what I love about cybersecurity.

Pranidhi Handapangoda is a dedicated and passionate student currently pursuing her Master of Cyber Security at Griffith University for her Final Year Student at Griffith University

During my internship at PwC Sri Lanka, I discovered that I’m more interested in the GRC (Governance, Risk, and Compliance) side of things than the technical side. I enjoy meeting new people, learning something new every day, and sharing what I know. I already find myself advising friends and family on how to stay safe from cyber threats, and I love that aspect of it. Consulting, to me, is about problem-solving, and with the ever-evolving threat

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

landscape, it requires creativity. I really enjoy digging

My interest in cybersecurity started with movies

One thing I love about my current job as an F&B

and TV shows where hackers would use their skills

attendant is the teamwork and the daily challenges

to save lives. I was fascinated by the idea of good

that come with working with different people. I think

hackers (White Hat) going up against malicious

that’s why I’m drawn to consulting—there’s so much

ones (Black Hat), and I was determined to become

collaboration involved. I’ll get to work with a diverse

an ethical hacker. I threw myself into learning as

team of IT professionals, legal experts, and business

much as I could, doing LinkedIn courses, YouTube

leaders, and that excites me. I’ve already experienced

tutorials, and practising in labs like TryHackMe and

how rewarding it is to work with people from all kinds

HackTheBox. I even went on to get my EC-Council

of backgrounds, and I know it’s something I’ll thrive

Certified Ethical Hacker certification.

in as a consultant. And let’s be honest—the work-life

into threats, gathering intel, and figuring out how to prevent future attacks.

balance is also a huge plus!

But as I gained more experience, my view of cybersecurity evolved. I came to see that it’s not just about hacking—it’s about protecting information, which is incredibly valuable in today’s world.

Information really is the new gold, and cybersecurity is about keeping it safe.

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

When I decided to pursue a career in cybersecurity,

76

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

my first step was to study it because, honestly, I

After I graduate, I’m really hoping to work as a

was studying biomedical science, aiming to become

cybersecurity consultant. As I mentioned before,

a doctor, a dream heavily influenced by my family.

information is the new gold—whether it’s personal,

But after two years of studying, I realised it wasn’t

W O M E N I N S E C U R I T Y M A G A Z I N E

had little to no background in IT or cybersecurity.

Before that, I was on a completely different path—I

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

for me. I started researching other fields and found

Since I was new to the field, I had to start from

cybersecurity, which really excited me. At the same

scratch—learning about virtual machines, different

time, I was terrified about how to tell my parents

operating systems, open-source software, and

I no longer wanted to pursue biomedical science,

so much more. A lot of it was self-taught in the

especially since they had invested so much in

beginning. I remember deciding to install Linux on

my education.

my laptop, starting with Kali Linux through a virtual machine by following YouTube tutorials. I liked Kali

Convincing them wasn’t easy. They had already

but quickly realised it wasn’t very user-friendly. So,

spent a lot of money on my medical studies, and

I began experimenting with different Linux flavours,

cybersecurity was a completely unfamiliar field to

constantly formatting and rebooting my laptop. I took

them. Plus, at the time, only two places in Sri Lanka

a lot of risks with that one laptop! Eventually, I settled

offered a degree in cybersecurity, and it was quite

on using Ubuntu as my main OS for two years just to

expensive. But I knew it was what I wanted, so I made

master Linux in a more user-friendly environment.

a real effort to explain how important cybersecurity would be in the future, even in sectors like healthcare,

Later, I had to switch back to Windows for certain

and eventually, they agreed to support me.

software I needed for my degree. Throughout all this, I was researching cybersecurity pathways,

From my first year in the program, my parents were

certifications, and areas like Open-Source Intelligence

impressed with my dedication and results. Looking

(OSINT). By the time I started my degree after my

back, I’m really proud of myself for being brave

diploma, I already knew so much, thanks to my

enough to make that switch from biomedical science

curiosity and passion. That’s when I realised, if you

to cybersecurity. In 2022, I graduated top of my class

truly love something, even if it’s brand new to you,

at Edith Cowan University’s Sri Lanka campus with a

you can get really good at it.

gold medal in Cybersecurity, and my parents couldn’t be prouder. It feels amazing to be doing something I truly love.”

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

The most memorable part of my cybersecurity journey is how it all began. No one I knew was familiar with IT security or cybersecurity at the time, so I had to do my own research just to discover what it was. It was an emerging field back then, and all I had were a few vague ideas to start my search. Once I found out about cybersecurity, I dove in and started teaching myself.

While studying for my diploma in networking and systems, I fell in love with the story of Unix and Linux.

I even preferred Linux’s interface over Microsoft.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

77

PRANIDHI HANDAPANGODA

The knowledge and experience I gained from self-

of fresh information, even after completing my

learning left a lasting impression on me. It played a

bachelor’s degree. However, one subject stands

huge role in helping me successfully complete my

out to me the most: cybersecurity of critical

bachelor’s degree. When it came time to choose my

infrastructure. It’s fascinating to dive into areas like

master’s, that same drive guided me in selecting

automobile security, water tank system security, and

areas I was passionate about. I specifically chose

OT security protocols—things that are part of our

Griffith University for my Master of Cyber Security

daily lives.

because they offered unique subjects like Global Security, Critical Infrastructure Security, and Financial

It feels really exciting to understand how to secure

Security, which matched my interests perfectly.

the very things we use every day, like our cars. I also had a fantastic experience at the Realms of Cyber

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

conference in 2024. It was incredibly informative and easy to grasp, and I loved every moment of it. Events like that truly inspire me and deepen my passion for the field.”

Working on my degree, I knew I wanted to gain real-

at PricewaterhouseCoopers (PwC) Sri Lanka. It didn’t

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management? If yes, why?

take long for me to realise that what I truly wanted

I believe that interpersonal communication is

was to dive into cybersecurity, not just general IT.

essential in cybersecurity. In this field, we often

world experience before graduating, even though it wasn’t a requirement. So, I decided to take on both a final-year project and an internship to give myself a head start. I applied for an IT support intern position

work with people who have little to no background To make that shift, I earned the EC-Council Certified

in cybersecurity—like managers, CEOs, and other

Ethical Hacker certification, which helped me

employees. It’s our job to help them understand the

transition into PwC’s cybersecurity division. As a

importance of cybersecurity for the organisation and

cyber analyst intern, I got hands-on experience in

how we can tackle cyber threats together.

web application penetration testing, vulnerability assessments, and penetration testing (VAPT). I

We need to explain in

was introduced to key concepts like the OWASP

straightforward terms why

Top 10, GDPR audits, and ISO 27001 audits, and

it’s crucial for leaders and

worked with tools like Burp Suite and Nessus. I also

managers to invest in the

had the chance to create cybersecurity awareness

right assets to protect

training programs. That internship gave me a solid

the company from future

foundation and real-world insight into the field I

cyber threats. Being

wanted to build my career in.

able to communicate effectively ensures that

78

What aspect of your cybersecurity studies excites you the most, and why?

everyone is on the same

I’m genuinely excited about everything I’m learning

value of cybersecurity, which

in cybersecurity. I’ve always loved discovering new

ultimately helps strengthen the

things, and studying this field is a constant source

organisation as a whole.

W O M E N I N S E C U R I T Y M A G A Z I N E

page and understands the

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

I also attend other events like BSides conferences, SeckTalks, and tabletop exercises. The most recent one I went to was the Realms of Cyber conference, which focused on critical infrastructure security across land, air, sea, space, cognitive, and biological areas. It really opened my eyes to a whole new dimension of cybersecurity that I hadn’t considered before!

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

Yes, I’m actively looking for cybersecurity job

I am a member of the Australian Women in Security

my visa conditions, even though I meet all the

Network (AWSN), and I can’t tell you how excited I

educational and experience requirements for entry-

was to discover a community in Australia dedicated

level positions.

opportunities, but it hasn’t been the easiest experience. As an international student, I’ve found that many interview processes stall after I mention

to women in cybersecurity. I joined the network last October, and it’s been an incredible experience since

I can do internships, but almost all of them require

then. Thanks to AWSN, I’ve learned so much, met

either permanent residency or citizenship. It’s

fascinating people, and gained valuable insights

frustrating because I really want to break into the

along the way.

cybersecurity field, but these visa restrictions make it challenging to find employment opportunities.

Most importantly, I truly enjoy being part of AWSN.

I’m staying positive and hopeful that the right

I make it a point to attend almost every event they

opportunity will come along!

organise. The atmosphere is so welcoming and encouraging, and it really feels like a supportive community where we can all grow together.”

www.linkedin.com/in/pranidhi-handapangoda

What is your preferred source for staying informed about cybersecurity trends and general information?

I love staying informed by participating in cybersecurity events. There are so many great ones in Australia, and AWSN events are definitely one of my main sources for keeping up to date. These gatherings not only help me learn but also give me the chance to connect with some amazing people in the industry.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

79

for impressive salaries. Whether your interests lie in technology, law enforcement, or even psychology, there’s a place for you in cybersecurity. It’s a career path where you can continuously learn, grow, and truly make a difference in the world.

VENURI WICRAMASINGHA Venuri Wicramasingha is currently pursuing a Master of Cyber Security (Professional) at Deakin University, Australia On 1st semester.

Master of Cyber Security student at Deakin University

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

When I first thought about studying cybersecurity, I pictured it as a high-tech game of cat and mouse, mainly focused on protecting computers from hackers. I imagined a lot of coding, setting up firewalls, and battling viruses.

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

But after diving into the cybersecurity field and now pursuing my master’s, I’ve discovered it’s so much more than I ever expected. It’s not just about

Imagine a world where everything is connected to

technical skills; it’s about grasping how networks

the internet—your phone, your bank account, even

work, understanding the psychology behind social

your home. While this connectivity offers incredible

engineering, and developing strategies to manage

convenience, it also opens the door for criminals to

security risks on a larger scale. It’s fascinating to

steal personal information, disrupt services, or cause

explore the motivations of attackers, anticipate

real harm. That’s where cybersecurity steps in. Think

emerging threats, and adapt to new technologies

of it as being a digital detective or superhero, always

and vulnerabilities.

on the lookout for threats and working tirelessly to keep people and their information safe.

What really took me by surprise is how dynamic and interconnected everything is. Cybersecurity goes

A career in cybersecurity is not just exciting; it’s

beyond just fending off attacks; it’s about building

a thrilling adventure that never stands still. As

resilient systems that can withstand them, preparing

technology evolves, so do the tactics of hackers,

for incidents, and thinking through the legal and

making every day a new challenge. You’ll constantly

ethical implications of our security measures. The

encounter fresh puzzles to solve, ensuring you’ll

diversity within the field is incredible, covering areas

never experience a dull moment. Plus, you get to

like cryptography, ethical hacking, governance, risk

make a genuine impact by protecting individuals,

management, and incident response. It’s this variety

businesses, and even nations from cyber threats.

that makes the journey so exciting and challenging.

It’s an opportunity to flex your problem-solving skills, outsmart criminals, and create secure systems, all

Overall, my experience has taught me that

while helping people trust the technology they rely on

cybersecurity is not just a technical discipline; it’s

every day.

also a strategic one that requires a mix of technical know-how, critical thinking, and creativity. It’s

80

And the cherry on top? There’s a massive demand

definitely more complex than I initially thought, but

for cybersecurity professionals right now. This field

that complexity is what makes it truly interesting

is brimming with job opportunities and the potential

and rewarding.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

concepts but also highlighted the importance of

After graduation, I’m excited to pursue a role as a

and Compliance).

compliance and risk management, which has shaped my goal of focusing on GRC (Governance, Risk,

GRC (Governance, Risk, and Compliance) analyst.

This path really resonates with me because of

I’ve also been fortunate to receive support and

my previous experience and comfort with various

guidance from mentors and industry professionals

security frameworks.

along the way. Their insights and encouragement have been crucial in helping me navigate

What I love about GRC is the analytical and

challenges, spot opportunities, and fine-tune my

strategic side of it. I get to apply my knowledge

career aspirations.

of different security standards and regulations to help organisations identify and manage risks

My academic journey, including my Bachelor of

effectively. I find it both challenging and fulfilling to

Science in Cybersecurity and now my Master of

ensure that a company’s cybersecurity practices

Cybersecurity (Professional), has played a significant

are in line with their internal policies and external

role in shaping my career path. The assignments and

regulatory requirements.

project work have laid a solid foundation and guided me toward GRC roles. These educational experiences

Another aspect I appreciate about GRC roles is

have helped align my goals with my strengths and

the opportunity to use my communication and

interests in the field.

collaboration skills. I enjoy working with different teams throughout the organisation to create a

In summary, the blend of practical experience,

strong security posture. This role not only plays to

mentorship, and continuous learning has been key

my strengths but also allows me to make a real

in shaping my career trajectory. It has reinforced

impact by helping organisations operate securely and

my commitment to cybersecurity and directed my

responsibly in today’s digital landscape.

focus toward GRC roles, where I hope to make a real difference.

Who or what has been the most influential factor in shaping your journey in cybersecurity so far, and how has it impacted your career aspirations?

The biggest influence on my journey in cybersecurity

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

has been the hands-on experience I’ve gained

Beyond my academic studies, I’ve been fortunate to

in the field. From internships to full-time roles,

gain practical experience in cybersecurity through

each experience has deepened my understanding

both jobs and internships. I worked as a Cyber

of the challenges, frameworks, and solutions

Security Analyst at Scybers from May 2023 to June

in cybersecurity.

2024, where I had a range of responsibilities that really helped me grow in the field. My role included:

My practical experience as a Cyber Security Analyst and vCISO intern has been invaluable. These

• Conducting readiness assessments for clients

roles gave me the chance to take my theoretical

aiming for ISO27001 and SOC2 Type 1 & Type

knowledge and apply it to real-world problems,

2 certifications.

whether it was performing gap assessments or

• Performing gap assessments to identify areas for

developing security policies. This hands-on work

improvement and assisting in remediation efforts.

not only strengthened my grasp of cybersecurity

I S S U E 22

• Managing Information Security Management

WOMEN IN SECURITY MAGAZINE

81

VENURI WICRAMASINGHA System (ISMS) documents to ensure compliance with standards.

• Conducting Third Party Risk Assessments to evaluate vendor security.

• Developing policies, procedures, and guidelines that align with security standards.

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

I see a real need for additional training in noncyber skills like interpersonal communication,

In addition to that, I interned as a vCISO from

management, and strategic thinking. In

December 2022 to April 2023. This role allowed

cybersecurity, especially in GRC (Governance, Risk,

me to assist in vCISO assessments based on

and Compliance) or leadership roles, being able

the NIST Cybersecurity Framework. I also helped

to communicate effectively with both technical

clients refine their security policies and procedures,

and non-technical stakeholders is essential. It’s all

created strategic cybersecurity roadmaps, and

about translating complex cybersecurity concepts

supported them with Compliance as a Service

into clear, understandable language for executives,

(COaaS) practices.

clients, and team members so everyone is on the same page about the risks and how to mitigate them.

These experiences have been invaluable in helping me apply what I learned in the classroom

Management skills are equally important. They

to real-world situations. They’ve deepened my

help in coordinating teams, managing projects,

understanding of cybersecurity frameworks and

and aligning cybersecurity goals with the broader

highlighted the crucial role of compliance and

business objectives. Strong management and

governance in protecting organisational assets.

leadership abilities allow you to motivate your team, make informed decisions, and handle challenges or

The cybersecurity industry offers various certifications from different organisations.

Have you pursued, or do you plan to pursue any of these certifications? If so, which ones, and what factors influenced your choice?

crises effectively.

Absolutely! I plan to pursue the ISO27001 Lead

and continuously improving an organisation’s

Implementer certification. It’s a perfect fit for my

security posture.

On top of that, strategic thinking and problemsolving skills are crucial for anticipating future threats, planning long-term security strategies,

experience and passion for Governance, Risk, and Compliance (GRC). Having worked with ISO27001

Overall, developing these non-cyber skills will help me

standards in my previous roles, I believe that

become a more well-rounded professional. It’ll enable

obtaining this certification will really deepen my

me to navigate the complexities of the cybersecurity

understanding of how to implement and manage an

field and make a meaningful contribution to my

Information Security Management System (ISMS)

organisation’s success.

according to these standards.

security frameworks within organisations. Ensuring

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

compliance with international standards is important

I’m actively involved in the broader cybersecurity

to me, and I see this certification as a great way

community, and it’s really enriched my experience

to enhance my qualifications for a career in

and professional growth. Here’s how I’ve

cybersecurity governance.

been participating:

I chose this path because I want to strengthen my skills in managing and improving information

82

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

Industry Events and Conferences: I make it a point

makes my life a lot easier!

to attend cybersecurity conferences, webinars,

Two-Factor Authentication (2FA): I make it a point

and workshops to stay on top of the latest trends,

to enable 2FA on all accounts that support it. It’s an

technologies, and best practices. These events not

extra step, but it adds a layer of security that makes

only offer valuable insights from industry experts but

me feel much safer knowing that even if someone

also provide fantastic networking opportunities.

gets my password, they still need that second form of verification.

Professional Associations: I’m a member of

Regular Software Updates: I keep all my devices,

the Australian Computer Society (ACS) and

from operating systems to applications, updated

several local cybersecurity groups. Being part

with the latest security patches. It’s a bit of a hassle

of these organisations gives me access to a

sometimes, but it’s worth it to stay protected.

wealth of resources, certifications, and the latest

Secure Connections: When I’m on public Wi-Fi or just

industry news.

need an extra layer of privacy, I use a VPN (Virtual Private Network). I also make sure that any websites

Mentorship and Networking: I actively seek out

I visit are using HTTPS, which adds an extra layer

mentors and network with other professionals in

of security.

the field. Building relationships with experienced

Antivirus and Anti-Malware: I’ve got reliable antivirus

individuals has been incredibly beneficial, providing

and anti-malware software installed, and I regularly

me with guidance, support, and fresh perspectives on

run scans to catch any potential threats before they

my career journey.

become a problem.

Backup Data: I back up my important data regularly

Contributing to Knowledge Sharing: I love

and store it securely in the cloud. That way, I know I

contributing to knowledge-sharing initiatives, whether

can recover my information if anything goes wrong.

it’s writing articles or sharing posts. By sharing my

Be Cautious with Emails and Links: I’m always on

experiences and insights, I not only stay engaged but

the lookout for phishing attempts. I avoid clicking

also give back to the community.

on suspicious links or opening attachments from unknown or untrusted sources because it’s just not

Being involved in the cybersecurity community has

worth the risk.

really broadened my perspective on the field. It’s

Privacy Settings: I take the time to review and adjust

enhanced my skills and opened up new opportunities

my privacy settings on social media and other online

for collaboration and professional development. Plus,

accounts to limit how much personal information I

it helps me stay current with industry advancements

share publicly. It’s all about keeping my information

and trends, which is essential in such a rapidly

as private as possible.

evolving field like cybersecurity.

Education and Awareness: I stay informed about the latest cybersecurity threats and best practices

What measures do you have in place to enhance your personal cybersecurity in today’s digital landscape?

through industry news, courses, and other resources.

To enhance my personal cybersecurity in today’s

By implementing these measures, I aim to protect my

digital landscape, I take several proactive measures:

personal information and maintain a secure online

I believe that continuous learning is key to improving my personal security practices.

presence. It’s all about being proactive and staying Strong, Unique Passwords: I always use strong,

one step ahead!

unique passwords for each of my accounts.

Whenever I can, I rely on a password manager to securely store and generate those passwords, which

I S S U E 22

www.linkedin.com/in/venuri-wicramasingha

WOMEN IN SECURITY MAGAZINE

83

When I talk to people already in the field, they share incredible stories about identifying new threats and saving the day. It makes me think of them as modern-day heroes, doing vital work to shield the SITHUMI ABEYWARDHANA

digital world from those with harmful intentions.

A passionate cybersecurity professional with a strong commitment to protecting the digital world.

If you’re someone who loves problem-solving,

Sithumi Abeywardhana, a dedicated student currently pursuing her Master of Cyber Security at Griffith University on the Gold Coast as final trimester.

keeping up with new tech, and wants a career that’s both challenging and meaningful, cybersecurity has so much to offer. It’s a field full of opportunities and excitement, where no two days are the same. I can’t wait to dive in!

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

I used to think cybersecurity was just a hands-on

For me, cybersecurity feels like being part of a

But I’ve come to realise that there are so many

digital defence team dedicated to protecting people,

other paths in cybersecurity that focus on different

businesses, and even entire nations from online

skill sets, like governance, risk and compliance,

threats. I can imagine the thrill of being on the front

cybersecurity training, threat intelligence, and even

lines, using cutting-edge technology to outsmart

open-source intelligence.

technical field, like software engineering. Sure, roles like ethical hacking, penetration testing, and digital forensics do require some serious technical skills.

hackers and keep everyone safe. That’s what makes this field so exciting!

At first, I worried that specialising in a niche area might make it tougher to find jobs and opportunities.

What really draws me in is how fast things change

But I’ve been pleasantly surprised to learn that it’s

in cybersecurity. There’s always something new to

really not niche at all! It feels like there’s a spot for

learn, and you have to stay ahead of the curve to

everyone in cybersecurity. I’ve met people entering

tackle the latest threats. Every day brings a fresh

the field from all sorts of unrelated backgrounds,

challenge, whether it’s fighting off ransomware

bringing diverse skills that are incredibly valuable. It’s

attacks or securing vital infrastructure. It’s like a

eye-opening to see how different perspectives can

puzzle that keeps evolving, and you have to think like

enrich the field. The reality is so much broader and

the bad guys to defend against them.

more welcoming than I initially thought!

But it’s not just about the tech; it’s also about the that the work I do helps protect data, privacy, and

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

people’s livelihoods. With the growing need for skilled

I found it really challenging to choose a specific area

cybersecurity professionals, I feel like I could have a

of cybersecurity to focus on because there are just

meaningful and rewarding career ahead of me.

so many fascinating options! I wasn’t entirely sure

impact. There’s a real sense of purpose in knowing

84

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

what I’d be best at, even though I typically excel in

cyber community. This experience has truly fueled

technical subjects. I also appreciate having a bit of

my desire to contribute meaningfully, protect others,

a human element in my work to keep me motivated.

and find purpose in the work I do. I can honestly say

I’m naturally a defensive person, and I find a lot of

that without her influence, my approach to this field

satisfaction in protecting others and helping them

would be vastly different.

stay safe from online threats.

Solutions. It involved a series of tests that evaluated

Given the rapid evolution of cybersecurity threats, do you feel that your academic program adequately keeps pace with the industry’s current landscape?

my skills and suggested areas in cybersecurity where

I believe that my academic program at Griffith

I might thrive. I was excited to find that I scored

University is keeping up with the fast-changing

highest in analysis and forensics, and I learned that I

world of cybersecurity. This year, they’ve updated

have a knack for spotting anomalies. This experience

the structure of the degree, and I know there are

was really insightful and helped me reflect on my

more changes on the horizon to reflect the dynamic

strengths and weaknesses.

nature of the industry. I feel lucky to be part of the

To help guide my decision, I took a cyber skills assessment called CyberGen.IQ by Haystack

first cohort to take the Cybersecurity of Critical As a result, I’ve narrowed down my interests to roles

Infrastructure course!

like Security Operations Centre (SOC) analyst, Threat Analyst, Digital Forensics Investigator, and Incident

This course is especially relevant because

Response (DFIR) analyst. It feels great to have a

critical infrastructure includes essential services

clearer direction now!

like transportation, food, water, electricity, and communication systems. These services used to

Who or what has been the most influential factor in shaping your journey in cybersecurity so far, and how has it impacted your career aspirations?

be pretty isolated and secure, but with technology

The most influential person in my cybersecurity

systems can be to malicious actors since disrupting

journey has definitely been Paula, whom I met

them can have far-reaching effects on society.

advancing, they’ve become integrated with IT networks, making them more vulnerable to cyberattacks. It’s alarming how attractive these

through the Australian Women in Security Network (AWSN). From the moment I joined the community,

To tackle these emerging threats, governments and

her warm welcome helped me overcome my initial

cybersecurity organisations are putting a spotlight

fears and self-doubt about stepping into a field filled

on protecting critical infrastructure. They recognize

with experts. Hearing her share her own experiences

the need for a more resilient and secure framework,

of struggling to navigate industry conversations early

and that focus aligns perfectly with what we’re

on made me realise that persistence and continuous

learning at Griffith. I feel like the program is really

learning are essential for success in this field.

preparing us for the complexities of cybersecurity in today’s interconnected world. The way it adapts to

Paula didn’t just offer technical advice; she also

industry trends shows that it’s staying relevant and

encouraged me to connect with others when

equipping us with the skills we need to face modern

I felt a bit reserved and needed a little nudge.

cybersecurity challenges head-on.

She emphasised how important networking is in cybersecurity, and thanks to her, I’ve built a strong network and developed a deeper connection to the

I S S U E 22

Considering the holistic requirements of a future role, do you see the need for

WOMEN IN SECURITY MAGAZINE

85

SITHUMI ABEYWARDHANA

additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

Each one has been a fantastic opportunity for

Absolutely! I truly believe that honing interpersonal

One highlight for me was participating in the National

communication and management skills is essential.

Missing Persons Hackathon in September. The goal

Effective communication is crucial in cybersecurity,

was to gather digital information on real missing

especially when it comes to explaining technical

person cases in Australia to aid police investigations.

concepts to non-technical stakeholders, collaborating

This event felt especially meaningful and gave me a

with cross-functional teams, or delivering security

deeper sense of purpose. I’m also looking forward

awareness training. During my internship at Cyber

to the chance to take part in an Incident Response

Audit Team, I was tasked with preparing scripts for

Competition organised by AWSN!

learning and connecting with industry professionals.

cybersecurity training, and I quickly realised how important it is to present information in a way that

Recently, I volunteered at an ACS Foundation

someone with no background in cybersecurity can

event at Griffith University, where high school

easily grasp. That’s when I understood that truly

students learned about opportunities in STEM. It

strengthening an organisation’s human firewall starts

was wonderful to give back to the community and

with clear communication.

hopefully inspire the next generation. All these experiences have really helped me feel more

Management skills are equally important for leading

connected and engaged in the industry.

projects, responding to security incidents, and

necessary. I think having a growth mindset, along

What measures do you have in place to enhance your personal cybersecurity in today’s digital landscape?

with persistence and resilience, is key to thriving in

Working in cybersecurity

this field. There are definitely tough days, like when

has really opened my

a data breach occurs, and having the emotional

eyes to just how exposed

intelligence to navigate those scenarios and keep

we can be online. When

moving forward is vital.

I started learning about

overseeing teams. From what I’ve observed in the industry, no two days in cybersecurity are ever the same! Continuous learning and the ability to adapt to an ever-changing threat landscape are absolutely

Open-Source Intelligence

86

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

(OSINT)—which is all about

I’m really active in the cybersecurity community, and

couldn’t help but reflect on

it’s something I genuinely enjoy. I’m a proud member

my own digital footprint.

of the Australian Women in Security Network (AWSN)

I found myself asking,

and make it a point to attend most of their events in

“What information about

Gold Coast and Brisbane, along with SecTalks. This

me is already out there?

year has been particularly exciting—I had the privilege

How could someone use

of attending three amazing security conferences:

that against me, maybe in

CrikeyCon, Bsides Brisbane, and Realms of Cyber.

a scam?”

W O M E N I N S E C U R I T Y M A G A Z I N E

gathering publicly available information to create actionable intelligence—I

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

strong personal cybersecurity. That realisation

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

really motivated me to take steps to protect my

I’m getting close to graduating, and I’ve been

online presence.

actively applying for graduate and junior roles

It’s a bit unsettling to know that Australia consistently ranks among the top 10 countries for scam victims, which just highlights the importance of

in cybersecurity. I did face a setback when I got One of the first things I did was clean up my social

rejected from an initial online assessment that was

media. I removed contacts I didn’t know personally

automated, but I’m keeping my spirits up and making

and encouraged my family to do the same. I locked

progress with some other applications. I’m hopeful

down our profiles and took out personal details like

that I’ll land a role soon!

my birth date, schools, and past addresses. It hit me that this kind of information could be a goldmine for

Tailoring my resume and cover letter for each

phishing attacks or identity theft.

application feels like a full-time job in itself, but I’ve come to realise it’s absolutely necessary. Most of

Looking back on my teenage years, I now see how

the time, the initial screening is done by an applicant

unwise it was to share personal stories on public

tracking system rather than a person, so if my

platforms. While I’ve managed to shut down my

resume isn’t formatted in a way that the system can

old profiles, some bits of that information are still

read, it’s hard to get through that first hurdle. I’ve also

floating around online. It’s a tough lesson: once

completed a couple of recorded video interviews.

something is out there, it can be nearly impossible to

At first, I didn’t think much of them, but I later

erase your digital footprint completely.

learned how important it is to prepare well and really stand out.

Besides cleaning up my social media, I also tackled my bad habit of reusing passwords across different

I’ve noticed that some companies receive hundreds

platforms. Now, I use longer, unique passwords and

of applications, so it’s crucial to differentiate myself

rely on a password manager to keep them secure.

from the crowd. Being part of the cybersecurity

Whenever I can, I enable Multi-Factor Authentication

community through AWSN has shown me how

(MFA) for that extra layer of protection.

important it is to go the extra mile in my job search.

I make sure to keep my software updated, too, to

As an international student, it’s particularly

minimise the risk of vulnerabilities being exploited. I

challenging since many roles require security

also try to avoid using public Wi-Fi unless I absolutely

clearance that I just can’t obtain. It’s frustrating, but

have to, and even then, I take extra precautions.

I understand the reasoning behind it when it comes to security. It would be great if job sites had better

There’s a lot more I do to reduce my digital footprint

filters for these roles. Thankfully, some of them do,

and boost my personal security, but these steps

which saves us from wasting time applying for jobs

have been particularly important for me. I’ve learned

we have no chance of getting.

firsthand how hard it is to take something back once it’s out there on the internet. These proactive measures are my way of staying safe in today’s

www.linkedin.com/in/sithumi-abeywardhana

digital world.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

87

deeply personal. I believe that having an awareness of how to stay safe online empowers us to protect those we care about—our children, grandparents, CHARLOTTE BAINES

parents, and friends.

Charlotte is currently studying at the University of Chester. Her research is on tailoring cybersecurity training based on an individual’s cybersecurity job role, using the Cyber Security Body of Knowledge (CyBOK) Knowledge Areas (KAs) as the basis for assessment. Her interest in cybersecurity was sparked during her Master’s studies at Liverpool John Moores University.

I often think about the different attitudes toward

Charlotte Baines, a dedicated student currently pursuing her postgraduate research program in Cybersecurity at the University of Chester.

corporate safety; it’s about safeguarding those

cybersecurity in the workplace. Many people seem indifferent about keeping their organisation safe, but they are passionate about protecting their families.

That’s where my interest lies: how can I help my loved ones navigate this digital landscape? This is the message I try to convey to encourage others to engage with cybersecurity—it’s not just about we love.

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

I am really passionate about getting involved in research, particularly focusing on the human side of cybersecurity. It excites me to think about the

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

potential positive impact we can make in this field.

My journey into cybersecurity has been anything but

knowledge and tools they need to navigate the digital

traditional. Initially, I set out to become a solicitor,

world confidently. Making a difference in this area

earning a BA in Law. However, I quickly realised that

feels both rewarding and essential to me.

I want to explore ways to help individuals not only keep themselves safe online but also protect their loved ones. It’s all about empowering people with the

working in that field wasn’t quite my passion. I then

to write my dissertation on cybersecurity in the

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

maritime industry. An assignment on the Internet

My family, especially my husband and parents, have

of Things really ignited my curiosity about

been incredibly supportive throughout my journey.

cybersecurity—not from a technical standpoint, but

Even though they didn’t fully understand my interest

from the perspective of training and awareness.

in cybersecurity, they encouraged me to pursue

pivoted to study an MSc in Maritime Operations Management, inspired by my interest in shipping law that developed during my time studying law. It was during this program that I had the opportunity

my PhD because they knew it was something I had

88

When I discovered the postgraduate program at the

always dreamed of. If you had told me ten years ago

University of Chester, it felt like the perfect fit, and

that I’d be diving into the world of cybersecurity, I

I couldn’t resist applying. For me, cybersecurity is

would have never believed you! It’s funny how life

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

takes unexpected turns, and I’m so grateful to have

conference at my university. It was my first

their unwavering support as I navigate this path.

real chance to engage with academics in the cybersecurity field, and I could feel the excitement

Who or what has been the most influential factor in shaping your journey in cybersecurity so far, and how has it impacted your career aspirations?

in the air. Everyone there, whether they were from a technical or non-technical background, shared a genuine passion for cybersecurity, which was incredibly inspiring.

Dr. Henry Collier has been a game changer for me in my academic journey. As the Executive Director for

That’s where I met Dr. Henry Collier. We had a great

the Institute for Cybersecurity at Marshall University,

conversation after his presentation, and because I

he’s taken me under his wing, allowing me to

took the initiative to connect, I ended up co-authoring

collaborate with him on two papers. This experience

two papers with him. I can’t stress enough how

has been invaluable, not just for getting my name

stepping out of my comfort zone that day opened

out there but also for building my confidence. He’s

doors for me in my academic journey. It was a

genuinely kind and has a way of making me feel that

wonderful reminder of the power of networking

I truly belong in this field, even though my path has

and the opportunities that can arise when you put

been anything but conventional. I’m so grateful for

yourself out there.

his support and mentorship as I find my way in this

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

The most impactful moment for me was definitely

I truly believe that non-technical and non-security

attending and volunteering at the ECCWS 2021

skills are crucial in the cybersecurity landscape.

exciting industry.

Throughout my research, I’ve come across several papers emphasising the importance of Knowledge, Skills, and Abilities (KSA). Cybersecurity is rarely a solo endeavour; it thrives on teamwork. Skills like communication and collaboration are vital for bringing technical and non-technical staff together.

For me, it’s all about explaining why certain practices matter. When everyone, from the CEO to the customer service representative, understands the rationale behind a simple thing like why a strong password is essential, it can transform their approach. It’s easy to overlook security when you’re busy with daily tasks, but when people grasp the bigger picture, it fosters a positive security culture.

Suddenly, security isn’t just a checkbox; it becomes part of the fabric of everyday work life. That kind of understanding can make all the difference in

I S S U E 22

WOMEN IN SECURITY MAGAZINE

89

CHARLOTTE BAINES

how seriously security practices are taken across the organisation.

What measures do you have in place to enhance your personal cybersecurity in today’s digital landscape?

I make it a point to keep my privacy settings on social media as tight as possible. Trusting my intuition is key—if something feels off, whether it’s a friend request, a call, or an email attachment, I just don’t engage. I also try to use biometrics whenever I can; it feels like an extra layer of protection.

Whenever an app or account prompts me to update or enable two-factor authentication (2FA) or multifactor authentication (MFA), I jump on it. I’ve also subscribed to newsletters that keep me updated on the latest in cybersecurity. One resource I really appreciate is The Cyber Helpline; their online guides have been super helpful for reviewing my security practices. It’s all about being proactive and staying informed!

www.linkedin.com/in/charlotte-morton-22992584

90

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

AUSTRALIA'S LARGEST

Security Awards ARE BACK!

JOIN US

for an enchanting evening to celebrate and recognise the achievements within the IT Security Industry.

For more information on the 2025 Awards and to register your interest in sponsoring, please visit our website: womeninsecurityawards.com.au

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

MRIDULA SHARAVANAN

When I first considered studying cybersecurity, I was really intrigued by the idea of hacking. The thought

Mridula Sharavanan is a dedicated MSc Cyber Security student at the University of Birmingham, where she is honing her skills in a rapidly evolving field.

MSc Cyber Security student at the University of Birmingham

of breaking into systems to find vulnerabilities was what initially grabbed my attention. But as I started my studies, I realised that cybersecurity is so much broader than just that. There are areas like software security, hardware security, and security auditing, which I hadn’t even thought about before.

I was especially surprised by hardware security; it was something I never considered, and it was a bit challenging at first. But as I learned more, I started

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

to enjoy it. Security auditing was another unexpected area that caught my interest. I didn’t know it existed, but I found it fascinating, even if it’s more theoretical than hands-on.

When I was 16, my computer was hit by a ransomware attack, and that really changed

One thing I’ve come to understand is that

everything for me. It sparked a curiosity that led

cybersecurity is a field where you have to keep

me to explore how these attacks work and dive into

learning all the time. New threats and technologies

the world of cybersecurity. I became fascinated by

are always emerging, and staying updated is crucial.

hacking—not just the act itself, but also the challenge

The fast-paced nature of this field is even more

of understanding and stopping it.

exciting than I expected, and that’s what makes it so rewarding for me.

Today, cybersecurity is more important than ever.

threats. I find it thrilling to be part of this field where

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

every day feels like unravelling a mystery as I work to

After I graduate, I’m aiming to become an SOC

identify different types of attacks.

(Security Operations Centre) Analyst. The idea of

Almost everything we do online, from shopping to banking to healthcare, makes us vulnerable to

monitoring and responding to security threats in real Privacy concerns are also at the forefront of

time really excites me. I love the thought of using

our digital lives, and I’m excited to play a role in

threat intelligence and security analytics, along with

protecting people’s personal data from misuse.

digital forensic tools, to dig into cyberattacks. It feels like a perfect fit for what I’ve been learning and what I

For anyone feeling like they don’t have the right

enjoy about cybersecurity.

skills yet, I want to say: don’t worry! There are plenty

92

of resources available online to help you learn

What draws me to this role is the challenge. The

cybersecurity from scratch. Just take that first step,

fast-paced environment of quickly identifying and

and you’ll be on your way.

reporting threats is both urgent and motivating. Plus,

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

I appreciate that there’s always something new to

field. It’s shaped my career aspirations and keeps

learn, with fresh threats and technologies emerging

me motivated to keep improving and growing in this

all the time. I thrive in that dynamic atmosphere and

exciting area.

can’t wait to keep building my skills in this field.

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition,and if so, how did you navigate those challenges?

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

Beyond my academic studies, I’m currently working in threat detection and analysis, where I get to use

When I decided to go into cybersecurity, my parents

AI-powered tools to identify and tackle threats

and friends were super supportive, which really

quickly and effectively. This hands-on experience has

helped. But my parents were a bit worried since I had

been invaluable for me, as it lets me apply what I’ve

no background in IT. They encouraged me, but there

learned in class to real-world situations.

were definitely concerns about how I’d break into such a technical field.

In my role, I evaluate how different AI tools perform in various attack scenarios, which ties

To address that, I decided to pursue a master’s

directly into my dissertation. This practical work

degree in cybersecurity after finishing my bachelor’s.

has really deepened my understanding of how

The toughest part for me was being young and

these tools function in real environments and has

inexperienced, but I didn’t let that stop me. I started

given me insights that complement my research.

diving into cybersecurity on my own and picked

Overall, this experience has greatly shaped my

up some beginner certifications to build my skills

career goals, reinforcing my passion for exploring

and confidence. It was a challenge, but those steps

advanced cybersecurity solutions and their

helped me push through my doubts and really

practical applications.

commit to this path.

Who or what has been the most influential factor in shaping your journey in cybersecurity so far, and how has it impacted your career aspirations?

The biggest influence on my journey in cybersecurity has definitely been my own curiosity. When my PC was hit by ransomware, it really opened my eyes and made me want to understand how these attacks work and how to prevent them. That moment sparked a deep interest in cybersecurity, leading me to explore everything from hacking to software security and threat detection.

My curiosity has been a driving force for me, pushing me to learn more, pick up new skills, and stay on top of the latest developments in the

I S S U E 22

WOMEN IN SECURITY MAGAZINE

93

MRIDULA SHARAVANAN

The cybersecurity industry offers various certifications from different organisations.

Have you pursued, or do you plan to pursue any of these certifications? If so, which ones, and what factors influenced your choice?

What aspect of your cybersecurity studies excites you the most, and why?

I recently completed the Certified in Cybersecurity

and addressing security threats, along with the

certification from ISC2, which really helped me

challenge of developing and implementing policies to

build a solid foundation in cybersecurity principles.

safeguard against potential risks.

What excites me most about my cybersecurity studies are threat detection and security policy. I’m particularly drawn to the technical side of identifying

Looking ahead, I’m eager to pursue the Certified SOC Analyst and Certified Ethical Hacker certifications

I find the technical challenges of threat detection—

from EC-Council. These fit perfectly with my interests

like analysing data and responding to complex

in threat detection and analysis and ethical hacking.

attacks—absolutely fascinating. At the same time, crafting effective security policies that meet both

I’m motivated to earn these certifications because

organisational needs and regulatory requirements

they align with my career goals and the growing

is both challenging and fulfilling. These areas not

demand in the field. The Certified SOC Analyst will

only keep me engaged but also align perfectly with

give me specialised skills in security operations,

my career aspirations of making a real impact in

while the Certified Ethical Hacker will deepen my

security and policy development. My passion for

understanding of identifying and fixing security

these topics drives me to stay updated on the latest

vulnerabilities. I believe these certifications will not

advancements and continually refine my skills, which

only advance my career but also keep me updated

I know will be essential for reaching my career goals.

with the latest industry standards.

Given the rapid evolution of cybersecurity threats, do you feel that your academic program adequately keeps pace with the industry’s current landscape?

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management? If yes, why?

My academic program includes some really

Absolutely, I believe that training in non-cyber

interesting modules, like Secure Software and

skills, like interpersonal communication and

Hardware Systems, which focus on how to protect

project management, is crucial for a future role in

both software and hardware in our fast-changing

cybersecurity. While technical skills are definitely

tech landscape. I love that these courses are

important, being able to communicate effectively

designed to keep up with the challenges in the

and manage projects is just as vital for presenting

industry and offer hands-on experience through

findings, collaborating with teammates, and

lab classes.

leading initiatives.

That said, I’ve noticed that sometimes the

I’ve seen how strong communication skills can make

program doesn’t fully capture the rapid changes

a difference, especially when explaining complex

in cybersecurity. To stay on top of things, I make

technical concepts to stakeholders or clients who

an effort to network and engage with different

might not have a tech background. Plus, good

cybersecurity communities. This helps me

project management skills help in organising tasks,

compliment my academic learning with real-time

managing resources, and ensuring that projects stay

insights and practices from the industry, making sure

on track.

I’m always in the loop.

94

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

To develop these skills, I plan to look for workshops

these sources help me keep up with emerging

and training programs focused on project

threats, technological advancements, and best

management and communication. I also want to

practices in the industry. Staying connected this way

gain practical experience by taking on leadership

really fuels my passion for cybersecurity and helps

roles in group projects or participating in team

me stay ahead of the curve.

activities. By enhancing these skills, I’ll be in a better position to contribute to my team and advance in my cybersecurity career.

Are you actively engaged in the broader cybersecurity community? If so,what has been your involvement, and how has it enriched your experience?

Have you ever encountered situations where being a woman in cybersecurity made you feel disadvantaged or discriminated against? If so,please share your experiences.

I’m really thankful that I haven’t faced any situations where being a woman in cybersecurity has made me feel disadvantaged or discriminated against. I feel

Yes, I’m actively involved in the broader cybersecurity

lucky to be surrounded by supportive people who

community, and attending conferences has been

genuinely value my contributions and respect me for

a key part of my journey. These events have been

my skills and knowledge.

incredibly valuable for me, as they keep me informed about the latest trends and advancements in

Being in an inclusive environment has allowed

the field.

me to focus on my work and personal growth without dealing with any gender-related barriers. It’s

I’ve learned so much from industry experts and

highlighted for me how important it is to foster a

fellow attendees, which has really expanded my

positive and welcoming culture in our field, and I’m

understanding of emerging threats and technologies.

grateful to be part of a community where everyone is

Plus, these conferences have given me the chance

treated fairly.

to connect with professionals in the cybersecurity

Overall, being part of this community has enriched

What measures do you have in place to enhance your personal cybersecurity in today’s digital landscape?

my experience and motivated me even more in my

To boost my personal

cybersecurity career.

cybersecurity, I make it a

space. Building these relationships has been great for networking and exploring new opportunities.

point to use multi-factor

What is your preferred source for staying informed about cybersecurity trends and general information?

authentication (MFA)

To stay informed about cybersecurity trends, I

important accounts. I also regularly review my

primarily rely on LinkedIn, various websites, and

account permissions to ensure I’m only giving

blogs. These platforms give me timely updates and

access where it’s truly needed. Keeping my

deeper insights into what’s happening in the field. I

devices secure is a priority, so I’m diligent

also follow “The Cyber Mentor” on YouTube, which

about performing software updates.

whenever I can, and I always password-protect my

has been a fantastic resource for learning about new techniques and trends.

I stay informed about the latest personal cybersecurity best practices through various

I’m also involved with the Cyber Security Forum

sources, which helps me adjust my security

Initiative (CSFI), which offers great discussions and

measures as needed. It feels good to know

insights on the latest in cybersecurity. Together,

I’m taking steps to protect myself online!

I S S U E 22

WOMEN IN SECURITY MAGAZINE

95

MRIDULA SHARAVANAN

Reflecting on your journey thus far, would you, with the benefit of hindsight, make any changes to your career trajectory? If yes, what adjustments would you consider?

Looking back, I wish I had started working on certifications a bit earlier in my journey. I’ve developed a real interest in the audit side of cybersecurity, and it would have been great to explore that sooner.

While I’m happy with the path I’ve taken, I definitely would have made some adjustments. For instance, realising the importance of various certifications earlier on could have given me an edge in my career.

Overall, I’m learning from these reflections and am excited about where I’m headed next!

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

I’m actively applying for jobs and internships in the cybersecurity field, but as a fresher, I’m finding it a bit challenging to land a position. The interview process can be pretty tough, but I know it’s manageable with the right preparation.

There are times when I feel well-prepared and my skills align with the job requirements, yet I still get caught off guard by unexpected questions or challenges during interviews. One important lesson I’ve learned is to stay persistent; good things really do take time. I remind myself not to give up easily, and I’m determined to keep pushing forward!

www.linkedin.com/in/mridula2407

96

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Join Us in Empowering

Future Leaders

! d e t n a W y it r u c e S in Students Are you a student passionate about shaping the future of security?

Do you have innovative ideas and insights to share with a global audience? Join us in contributing to the Women in Security Magazine and become a voice for the next generation of security leaders!

Why contribute?

Gain valuable exposure: Reach over 11000 subscribers globally and showcase your expertise to industry professionals.

How to get involved

Make an impact: Share your experiences, challenges, and aspirations to inspire others and shape the future of security.

Let us know you are interested.

We will send you a series of questions of which you can choose which ones you would like to answer.

Submit those back to us in an email.

We will then edit to be a concise and flowing edited Q&A.

Don't miss this opportunity to be part of a vibrant community of students driving change in the security industry.

Contact us today to learn more about how you can contribute to the Women in Security Magazine!

Contact: jane@source2create.com.au

LISA ROTHFIELD-KIRSCHNER Director at Private Wealth Network | Impactful Education & Peer Experiences for Family Office

Olivia, Jack help Cousin Charlie show resilience This story is about Olivia (she/her), Jack (he/ him) and Cousin Charlie (they/them). It continues the story Your digital footprint and how it can impact your life in issue 17 of Women in Security Magazine.

Cousin Charlie was looking forward to joining their cousins Olivia and Jack at the school holiday chess camp. However, Felix, the chess camp director had informed Charlie’s parents that, because of issues with Charlie’s digital footprint that gave a negative impression of Charlie’s character, Charlie would not be allowed to join the camp. This disappointed Olivia and Jack immensely. However, they were determined to enjoy the chess camp despite their cousin not being there.

Following the chess camp, Oliva and Jack returned home with many stories about their fun adventures. That weekend, at a family dinner and cousins’ sleepover at their house, they shared some of these fun stories with Charlie.

When Charlie heard the stories, they became upset and started crying. They shared with Olivia and Jack the real reason why they had a bad digital footprint. It turned out Charlie had been bullied for being non-binary. Some of the children at school had been calling Charlie ‘weird’ and saying horrible things. Charlie was too embarrassed to tell their parents. Charlie said that one day, in physical education class, the teacher, Mr Ben, had noticed Charlie was not participating and had asked if Charlie wanted to have a quiet chat. Charlie really liked Mr Ben and said yes. That lunch time Charlie shared with Mr Ben how some of the children from the other class were bullying them and sending nasty messages online. Charlie had decided that, instead of screen shotting and reporting the bullies they would retaliate by jumping onto social media, bullying those children and calling them nasty names.

98

W O M E N I N S E C U R I T Y M A G A Z I N E

The situation had spiralled out of control. Charlie had created a negative digital footprint which had not only barred them from participation in chess camp, but had affected Charlie’s reputation with their teachers at school. Charlie explained how embarrassing it felt. Mr Ben offered to help Charlie explain the situation to their parents. This was a huge relief to Charlie.

They explained this to Olivia and Jack who came up with a great suggestion: “Why don’t you ask your mum to help you improve your digital footprint and also speak with the chess camp director about what you can do to be allowed to attend chess camp in future.” Charlie then started removing the rude videos and photos from social media sites and closing down and deleting unnecessary accounts.

Charlie needed more help with learning how to protect their privacy and security online.

Because Charlie had gained a reputation for bad behaviour, it was very important to create a new online identity that showed Charlie as positive, friendly and polite, a reflection of who they really were. Charlie was also learning how to deal with people who were not polite by screen shotting and reporting bad behaviour, then blocking those people rather than getting involved in negative communication. It was not always easy. Charlie was learning to be resilient and to focus on being let back into chess camp while regaining the trust of parents, teachers and the community.

Mr Ben showed how important a trusted grownup is to help deal with these issues, and Olivia and Jack continued to be great friends and support their cousin Charlie. www.linkedin.com/in/lisarothfield-kirschner

howwegotcybersmart.com

N O V E M B E R • D E C E M B E R 2024

How We Got Cyber Smart addresses cyber safety, cyber bullying and online safety for elementary school-aged children.

Lisa has partnered with Cool.Org, and her content is found on the Department of Education website.

READ NOW

WOMEN IN SECURITY MAGAZINE CONTRIBUTORS 01

02

1. AMANDA-JANE TURNER

Author of the Demystifying Cybercrime series and Women in Tech books. Conference Speaker and Cybercrime specialist

2. NAOMI EMMA EKWEALOR

03

04

Cybersecurity Analyst in Nigeria

3. MONI-AYO SAKA

Founder, CYFORTE

4. THULASI UPPU

Identity Access Management Analyst at City of Gold Coast

05

06

5. SERENA PILLAY

Senior Learning & Design Manager at Phriendly Phishing

6. NADJA EL FERTASI

Founder of Thrive with EQ

07

08

7. ANMOL AGARWAL

Senior Security Researcher

8. SAILAKSHMI METIKOTA

Cyber Security Engineer at Synapxe

9. BLESSING DURU

Cybersecurity Consultant

09

10

10. LEILA ASSADI

Associate Director –Technology risk and cybersecurity

11. KAREN STEPHENS

CEO and co-founder of BCyber

11

12

12. MARISE ALPHONSO

Information Security Professional

13. VIRAJ GANDHI

Product Security Leader

14. LISA VENTURA

13

100

14

W O M E N I N S E C U R I T Y M A G A Z I N E

Founder, Cyber Security Unity

N O V E M B E R • D E C E M B E R 2024

15

16

15. JO STEWART-RATTRAY

Oceania Ambassador, ISACA

16. FATEMAH BEYDOUN

Chief Customer Officer, Secure Code Warrior

17

18

17. MARCUS LAVALLE-SMITH

Principal Consultant at Decipher Bureau (Cyber Security Recruitment). Harry Potter fan.

18. SHINESA CAMBRIC

Principal Product Manager at Microsoft

19

20

19. MERIAM EL OUAZZANI

Regional Sales Director, Middle East, Turkey and Africa at SentinelOne

20. KEN HENDRIE

CEO and founder of Cyconsol

21

22

21. ANGELA DUGGAN

VP of User Experience at BeyondTrust

22. CRAIG FORD

23

24

Head Unicorn – Cofounder and Executive Director, Cyber Unicorns.

Australian Best Selling Author of A Hacker I Am, Foresight and The Shadow World book series. vCISO – Hungry Jacks, Wesley Mission, PCYC and Baidam Solutions

23. PRANIDHI HANDAPANGODA

Student at Griffith University

24. VENURI WICRAMASINGHA

Master of Cyber Security student at Deakin University

25

26

25. SITHUMI ABEYWARDHANA

Master of Cyber Security at Griffith University

26. CHARLOTTE BAINES

Postgraduate Cybersecurity student at the University of Chester

27

28

27. MRIDULA SHARAVANAN

MSc Cyber Security student at the University of Birmingham

28. LISA ROTHFIELD-KIRSCHNER

Author of How We Got Cyber Smart | Amazon Bestseller

I S S U E 22

WOMEN IN SECURITY MAGAZINE

101

SURFING THE NET

with

SAYFTY BLOG

By Subuhi Safvi Sayfty's blog is the zone where contributors share ideas on women's safety, women in media, society, law, feminism, & health.

READ BLOG

ENGAGING YOUNG MINDS IN CYBER SECURITY

By Kidsafe Training children in cyber security is as important in today’s digital world as training them to always look both ways before crossing the street. yet how can we captivate young brains with such an important yet complicated subject? Here are a few creative and entertaining ways to teach kids about cyber security.

READ BLOG 102

W O M E N I N S E C U R I T Y M A G A Z I N E

REFLECTING ON ONE VERY, VERY STRANGE YEAR AT UBER

By Susan Fowler A blog post that caused quite a stir in the tech community, Susan J. Fowler chronicles her struggles as a female engineer at Uber. Prepare to be taken aback.

READ BLOG

REMINDER: ONE OF THE FIRST COMPUTER PROGRAMMERS WAS A WOMAN

By Damon Beres In her notes, Ada described how codes could be created for the device to handle letters and symbols along with numbers.

She also theorized a method for the engine to repeat a series of instructions, a process known as looping that computer programs use today.

READ BLOG

lindsey

KNOWING WHAT YOU'RE LOOKING AT

By Lindsey I have a confession to make. While I have been a professional web developer for over 6 years, I didn’t feel comfortable with JavaScript until a year and a half ago. I still don’t feel like I know a lot of things.

There’s a lot that still confuses me.

READ BLOG

REASONS TO HIRE WOMEN OVER 40 AT YOUR TECH STARTUP By theBoardlist Much has been said about the tendency of tech companies to hire primarily young workers. There’s also the tired stereotype that older people are not “hip to new technology” to deal with. Like other hiring biases in tech, this issue seems to hit women in tech harder.

READ BLOG N O V E M B E R • D E C E M B E R 2024

EMPOWERING WOMEN IN CYBERSECURITY

By Medium blog In March, we come together to celebrate Women’s History Month, a time dedicated to honoring the remarkable historical, cultural, political, and technical contributions made by women worldwide.

CYBER TRAILBLAZERS UNITE

By Lekshmi Lekshmi, the founding member and President of WiCyS India, highlighted the stark reality of women’s underrepresentation in tech and leadership roles.

She emphasized how WiCyS is working to address this issue, providing mentorship, training, and networking opportunities.

ANGIEJONES.TECH

By Angie Jones With a mix of test automation strategies, coding recipes, & tutorials on Java, this blog is perfect for QAs, Java enthusiasts, and developers interested in testing.Angie is not only an amazing tech blogger; she is also a Java Champion and Principal Developer Advocate at Appitools.

READ BLOG

READ BLOG

READ BLOG

UNSUPERVISED LEARNING

HACKERNOON

TRELLIX BLOG

The cyber security section of the Hacker Noon blog provides an array of technical "How-To" articles, insights, and guides related to security practices, tools, and trends.Hacker Noon is a platform where articles on various topics, such as software development, blockchain, artificial intelligence, and cyber security, are shared.The blog discusses security best practices and awareness topics, avoiding scams, practical guides, and technical hacking tutorials.

Trellix is a security company that provides various solutions and services. The blog provides technical analysis of new malware strains, vulnerabilities, and tactics, engaging in discussions on topics like endpoint security, network defense, threat intelligence, and data protection. It aims to keep CISOs, security analysts, and IT teams informed on emerging security issues.

By Daniel Miessler An experienced cybersecurity expert, consultant and writer, Miessler takes a personal approach on his blog with an “about me” page that not only details his professional interests but also his hobbies, interests and political views.

READ BLOG I S S U E 22

READ BLOG

READ BLOG WOMEN IN SECURITY MAGAZINE

103

THE LEARNING HUB CISSP® INTRODUCTION TO INFORMATION SECURITY In this free CISSP course, you'll grasp the fundamentals of CISSP. You'll start by understanding information security, where you'll learn to safeguard data and systems. Then, you'll explore risk management, mastering the art of identifying and mitigating security risks. Next, you'll delve into asset security, discovering ways to protect valuable assets.

VISIT HERE

CYBERSECURITY BASICS Cyberattacks have surged by 71% and are predicted to continue increasing. This alarming statistic highlights the continued demand for cybersecurity professionals. Jumpstart your cybersecurity career with this introductory IBM course, which introduces you to fundamental cybersecurity concepts, threats, and preventive measures.

VISIT HERE

ENTERPRISE AND INFRASTRUCTURE SECURITY This course introduces a series of advanced and current topics in cyber security, many of which are especially relevant in modern enterprise and infrastructure settings. The basics of enterprise compliance frameworks are provided with introduction to NIST and PCI. Hybrid cloud architectures are shown to provide an opportunity to fix many of the security weaknesses in modern perimeter local area networks.

VISIT HERE

COMPUTER FORENSICS Learners in this class study digital forensics fundamentals, including the four-step procedure concept. The course then moves into Unix/Linux fundamentals and Windows forensics and investigations. This course makes up part of NYU's five graduate-level course sequence leading to the MicroMasters® program in cybersecurity.

VISIT HERE

104

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

FEATURING FREE SECURITY TRAINING RESOURCES THAT ARE AIMED AT INCREASING SECURITY AWARENESS AND HELPING PEOPLE BUILD AND UPSKILL THEIR SECURITY SKILLS.

GOOGLE CYBERSECURITY PROFESSIONAL CERTIFICATE Get on the fast track to a career in cybersecurity. In this certificate program, you'll learn in-demand skills, and get AI training from Google experts. Learn at your own pace, no degree or experience required.

Additionally, when you enroll today, you’ll get access to Google AI Essentials at no cost. Offer ends 11/30*

VISIT HERE

CYBERSECURITY Primarily aimed at individuals in managerial positions in an organization, this program covers the key concepts about how managers can contribute to maintaining the cybersecurity of the company. Begin by understanding the types of possible threats and list up the priorities accordingly. Build improved defenses and cultivate a culture of ethics and cybersecurity in the workplace. By the end of the lessons, you will be aware of how to handle risks and threats and come up with a robust action plan.

VISIT HERE

PROFESSIONAL CERTIFICATE IN CYBERSECURITY EXECUTIVE EDUCATION PROGRAM This professional certification program is designed to advance your career as a cybersecurity engineer in any organization. Registering for this program will enable you to gain advanced technical skills required to defend mission-critical computer systems, networks, cloud applications, and more against cyberattacks.

VISIT HERE

A PRACTICAL INTRODUCTION TO CLOUD COMPUTING The 2nd top hit for 'Cloud Computing' on Google says, 'Cloud computing is a general term for the delivery of hosted services over the internet.'

Unfortunately, that definition is completely wrong. This course is designed to clear up the many misunderstandings about Cloud Computing and to give you a crystal clear and easy-to-understand explanation of exactly what it is.

VISIT HERE

I S S U E 22

WOMEN IN SECURITY MAGAZINE

105

THE LEARNING HUB INTRODUCTION TO INFORMATION TECHNOLOGY FOR MANAGERS This free online information technology course for managers will introduce you to the characteristics and uses of IT systems. Effective management and implementation of IT resources have now become routine tasks for many middle and senior managers. This means that a solid understanding of Information Technology is of vital importance for any manager in the modern workplace. Start this free online course today to grow your management skills today.

VISIT HERE

CYBERSECURITY FOR EVERYONE Cybersecurity affects everyone, including in the delivery of basic products and services. If you or your organization want to better understand how to address your cybersecurity, this is the course for you and your colleagues to take -- from seasoned professionals to your nontechnical colleagues.

VISIT HERE

106

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

INTERESTED IN WORKING TOGETHER? Contact Aby Aby@source2create.com.au www.source2create.com.au

MEDIA

CONTENT

EVENTS

ADVERTISING

CUSTOM AS-A-SERVICE

TURN IT UP

CYBER CAREERS AND COFFEE

SMASHING SECURITY

2B BOLDER PODCAST

With Graham Cluley and Carole Theriault

With Mary Killelea

With Jessie Bolton Tune in to learn from Jessie and special guests on what it takes to develop and lead today's workforce, stay ahead of industry trends, gain insights for innovative cybersecurity solutions, and strategic career advice.

A helpful and hilarious take on the week's tech SNAFUs. Cybersecurity industry veterans Graham Cluley and Carole Theriault chat with guests about cybercrime, hacking, and online privacy. It's not your typical cybersecurity podcast.

CLICK TO LISTEN

CLICK TO LISTEN

CLICK TO LISTEN

CAREER QUEENS PODCAST

UNSEEN BATTLES

LADYBUG PODCAST

With Parul Goel

With Kelly Vaughn

Career conversations with millennial women in tech that are making moves and figuring out their career journeys, one step at a time. From salary negotiations to career pivots. This podcast is hosted by Teti Lekalake, an MBA candidate at INSEAD and former marketer at Meta.

On Unseen Battles, you will hear raw, honest conversations with women leaders about an unseen battle in their careers - working with a difficult manager, receiving critical feedback, hesitating to negotiate - issues we all face in some form. We will go deep into their motivations and fears. Tune in for your bi-weekly dose of hope and inspiration.

We published our first episode on July 1, 2019 and have since published over 80 episodes on tech, career, and code.as we embark on our new season after a 2-year hiatus, we’re thrilled to elevate the conversation by dedicating a season to all things engineering leadership.

CLICK TO LISTEN

CLICK TO LISTEN

CLICK TO LISTEN

With Teti Lekalake

108

On the 2BBolder Podcast, you will hear inspiring stories of how successful women in business and tech have worked hard to build great careers. Learn about their passions, their journey, their challenges, and their advice to the next generation of women. The 2B Bolder Podcast is designed to provide you first-hand access to some amazing women.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

AFTERNOON CYBER TEA With Ann Johnson Ann Johnson, Corporate Vice President, Business Development, Security, Compliance & Identity at Microsoft, talks with cybersecurity thought leaders and influential industry experts about the trends shaping the cyber landscape and what should be top-of-mind for the C-suite and other key decision makers.

SECURING BRIDGES

DISCARDED

With Alyssa Miller

With Selena Larson

As a hacker, Alyssa Miller has a passion for security which she evangelizes to business leaders and industry audiences both through her work as a cyber security professional and through her various public speaking engagements.

Tales from the Threat Research Trenches is a podcast for security practitioners, intelligence analysts, and threat hunters looking to learn more about the threat behaviors and attack patterns.

CLICK TO LISTEN

CLICK TO LISTEN

THE CYBER QUEENS PODCAST

NOTHING ABOUT YOU SAYS COMPUTER TECHNOLOGY

With Maril Vernon, Erika Eakins and Amber Devilbiss WHERE ARE THE WOMEN IN CYBER?'The LandscapeIn 2022 the cybersecurity field still consists of 24% women and only 2.2% LGBTQ minorities. Long-perpetuated gender, age, and demographic biases held by the 'Baby Boomer' and Gen-X groups have led to a severe gap in the representation and advancement of women and minorities in this field.

CLICK TO LISTEN I S S U E 22

With Anthony Hendricks A podcast about cybersecurity and data privacy viewed through the lens of diverse voices. By educating and encouraging women and people of color to explore careers in the cybersecurity space, we can close the skills gap and reduce our technology and policy blindspots.

CLICK TO LISTEN

CLICK TO LISTEN

CYBERVERSED With Mandy Haeburn-Little The podcast from those wellversed in all things cyber.Mandy Haeburn-Little, Cyber Woman of the Year 2021, in conjunction with the National Cyber Resilience Centre Group (NCRCG), brings listeners access to strategic conversations with industry leaders and figures in the UK's cyber resilience landscape.

CLICK TO LISTEN WOMEN IN SECURITY MAGAZINE

109

J O B B OA R D NETWORK SECURITY ADMINISTRATOR | FUJITSU FULL TIME

ON-SITE

AUSTRALIA

RESPONSIBILITIES AND ACCOUNTABILITIES:

REQUIREMENTS:

• Perform root cause analysis and triage network/ computer issues for clients, servers, and network equipment.

• Work with both Windows and Linux/UNIX environments.

• Maintain the configuration, documentation, and procedures of the Gateway environments. Proactively maintain effective working relationships with peer group and key internal stakeholders and manage key external stakeholders relevant to the achievement of business objectives, where relevant.

• Plan own workload to achieve deliverables in required timeframes.

• Contribute to the effectiveness of the work team through positive and productive personal behaviours.

• Provide advice and demonstrate initiative in an area of functional expertise, where appropriate.

• Display a high standard of personal and professional integrity in all business dealings and develop own capability for current and future roles.

• AGSVA Security Clearance - NV2 preferred but willing to look at NV1 happy to uplift to NV2 • Proven ability and knowledge of working in an IT environment • Experience and knowledge using diverse operating systems • Strong written and oral communication skills • Ability to troubleshoot and perform root cause analysis on network/computer issues on clients, servers, and network equipment • Understanding of commands and concepts along with the ability to setup, configure, and maintain servers, desirable.

• Demonstrated experience and/or knowledge in communication/networking, and programming using scripting languages, desirable.

• Experience in a gateway environment including mail and web applications, desirable.

• Willing to work a 24x7 shift roster

APPLY HERE

CYBER SECURITY INCIDENT MANAGER | CAPITA FULL TIME

SCOTLAND

WHAT YOU’LL BE DOING: • Support the development of tools to support the implementation e.g. RACI, Service Catalogues etc.

• Provide SME support to assist the business and in meeting Cyber Security policies and standards.

• Deliver and support scenario exercising and assessment to identify opportunities for improvement / strengthening.

• Partner with the business to identify and manage cyber security resilience risks, providing support on risk mitigation solutions and plans.

• Review existing capabilities and identify opportunities for improvement.

• Create cyber security major incident management post-incident reviews (PIR) and identify opportunities for improvement.

• Provide cyber security Incident support where necessary - this may entail out of core business hours support.

110

W O M E N I N S E C U R I T Y M A G A Z I N E

• Partner with SMEs and provide resilience support and oversight to acquisitions, bids, and disposals to ensure they are managed appropriately and in a timely manner.

DESIRED SKILLS/EXPERIENCE: • Industry-recognized certifications such as CISSP, CISM, or CISA. • Experience with incident response platforms and tools.

• Familiarity with cloud security and modern IT environments.

• Knowledge of threat intelligence and threat hunting techniques.

• Experience in managing security incidents in a managed services provider (MSP) environment.

• Project management skills.

APPLY HERE

N O V E M B E R • D E C E M B E R 2024

IT SECURITY ASSISTANT MANAGER | SANDS CHINA FULL TIME

ON-SITE

HONG KONG

Required: Diploma or above in IT or IT Security Responsible for maintaining, supporting and deploying security devices and solutions (Firewall, IDS/IPS, Remote Access, Multi-factor Authentication, Log aggregation platform, etc.) related daily operations, projects and administration.

• Maintain detailed notes and produce professional investigative reports • Configure, implement, maintain and troubleshoot a wide variety of information security devices • Tune, patch and upgrade information security tools for optimum performance and platform security • Respond to events/incidents with knowledge, efficiency, and professionalism

• Create, develop, and maintain detailed design documentation • Prepare, document, and maintain standard operating procedures and protocols • Collaborate with team members and business teams to troubleshoot system • Submit and respond to tickets from an automated ticketing system • Prepare change management items and participate in the Change Approval Board (CAB) meetings • Must be able to respond to calls as needed (24/7)

APPLY HERE

CYBER SECURITY SOC MANAGER | ZODIAC SOLUTIONS, INC FULL TIME

REMOTE

UNITED STATES

QUALIFICATIONS : • Bachelor's degree in Computer Science, Information Security, or a related field; equivalent experience will be considered.

• Minimum of 5-7 years of experience in cybersecurity, with at least 2-3 years in a SOC environment and 1-2 years in a leadership role.

• Strong knowledge of SOC operations, security monitoring, incident response, and SIEM technologies.

• Experience with security technologies and tools, such as EDR, IDS / IPS, firewalls, and cloud security solutions.

• Industry-recognized certifications, such as CISSP, CISM, GIAC, or CEH, are preferred.

• Excellent leadership, communication, and problemsolving skills.

• Ability thandle high-stress situations with a calm and methodical approach.

KEY RESPONSIBILITIES : SOC LEADERSHIP AND MANAGEMENT : • Manage the SOC team, including scheduling, training, mentoring, and performance evaluation.

• Define and implement SOC processes, procedures, and playbooks tensure efficient security operations and incident response.

• Maintain a shift schedule tprovide 24 / 7 / 365 coverage, ensuring optimal staffing levels for the SOC.

I S S U E 22

SECURITY MONITORING AND INCIDENT RESPONSE : • Oversee the monitoring and analysis of security events and alerts from various sources, such as SIEM, IDS / IPS, endpoint protection, and cloud platforms.

• Coordinate with internal and external stakeholders tcontain and remediate incidents effectively.

• Conduct post-incident analysis tidentify root causes and drive improvements in incident response processes.

SOC STRATEGY AND DEVELOPMENT : • Develop and implement SOC performance metrics and reporting mechanisms.

• Continuously evaluate the effectiveness of SOC operations and recommend improvements in technology, processes, and staffing.

• Stay current with emerging security threats, attack techniques, and industry best practices tensure the SOC remains effective.

TEAM COLLABORATION AND COMMUNICATION : • Communicate SOC activities and incident response progress tsenior management and stakeholders.

• Collaborate with other cybersecurity teams, such as CSIRT, Threat Hunt, Threat Intelligence, and Vulnerability Management, tenhance overall security posture.

APPLY HERE

WOMEN IN SECURITY MAGAZINE

111

J O B B OA R D SECURITY OPERATIONS CENTER - ANALYST | INNSPARK FULL TIME

ON-SITE

INDIA

JOB RESPONSIBILITIES 1) Continuously monitor and analyze security alerts and logs to identify potential incidents.

2) Analyze network traffic patterns to detect anomalies and identify potential security breaches.

3) Establish correlation rules and mitigation playbooks as per requirements. Continuously update and suggest new rules and playbooks based on the evolving attack vectors. Leverage insights from public articles and cybersecurity reports to sharpen threat hunting strategies.

4) Use security compliance and scanning solutions to conduct assessments and validate the effectiveness of security controls and policies. Suggest improvements to enhance the overall security posture.

5) Utilize deception security solutions to deceive and detect potential attackers within the network.

6) Leverage deep expertise in networking, system architecture, operating systems, virtual machines

(VMs), servers, and applications to enhance cybersecurity operations.

7) Work effectively with cross-functional teams to implement and maintain robust security measures.

Conduct thorough forensic analysis of security incidents to determine root causes and impact.

8) Assist with all phases of incident response. Develop and refine incident response strategies and procedures to address emerging cyber threats.

9) Perform digital forensics to understand attack vectors and impact. Swiftly respond to and mitigate security threats, ensuring the integrity and security of organizational systems and data.

10) Professionally communicate and report technical findings, security incidents, and mitigation recommendations to clients.

APPLY HERE

SENIOR SECURITY ENGINEER (RED TEAM) | ATLASSIAN FULL TIME

NEW ZEALAND

AUSTRALIA

RESPONSIBILITIES • Carry out complex operations from concept to postoperation with a high degree of skill and work ethic • Translate real-world threat actor behaviours into relevant attacks on Atlassian • Continuously probe, test and exercise Atlassian’s defences • Keep detailed records of operational activity for deconfliction and later uses • Produce detailed and meaningful post-operation reports • Collaborate with other groups to multiply our impact • Work on other projects as required • Continuously improve your skillset and increase your impact QUALIFICATIONS • Senior-level offensive security operator skills in a broad range of tactics and techniques

112

W O M E N I N S E C U R I T Y M A G A Z I N E

• An adversarial mindset and the ability to think like an attacker • Very good problem-solving, analytical, and critical thinking skills.

• Good understanding of ethical hacking methodologies, cybersecurity frameworks, and risk management strategies • Fundamental information technology skills in systems, networking and IAAS • Proficiency in one or more programming languages • Very Good verbal and written communication skills • A mature outlook and understanding of a Red Team’s business value • Self-driven with the ability to adapt in a fast-paced, changing environment and work on multiple projects simultaneously • Relevant academic and professional qualifications

APPLY HERE

N O V E M B E R • D E C E M B E R 2024

AWS CHINA RESPONSE SECURITY ENGINEER, AWS SECURITY OPERATIONS, AWS SECURITY | AMAZON WEB SERVICES FULL TIME

CHINA

KEY JOB RESPONSIBILITIES

BASIC QUALIFICATIONS

• Supply oversight of in-flight security issues.

• Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritise its remediation in conjunction with the impacted service team.

• Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including AWS’ Chief Information Security Officer).

• Escalate issues to senior AWS leadership if you feel your issues are not being treated at the correct pace due to their impact to ensure that we are putting customers first.

• Explore building and improving our tooling to make your own life easier, and at the same time, sharing that benefit with all our engineers globally.

• Bachelor's degree in computer science or equivalent • 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience

APPLY HERE

IT MANAGER – CYBERSECURITY | CYBERKNIGHT FULL TIME

ON-SITE

UNITED ARAB EMIRATES

• Conduct routine security assessments and audits to ensure compliance with industry • Develop and execute IT strategies, policies, and standards and regulations. protocols to align with the organization's cybersecurity • Promptly respond to and investigate security incidents goals. and breaches, taking remedial actions as required.

• Oversee the management and upkeep of the • Develop and uphold disaster recovery and business company's IT infrastructure, including networks, continuity plans to ensure the resilience of IT systems servers, security systems, and Office 365. and operations.

• Address and troubleshoot IT technical issues as they • Manage project coordination, resources, and timelines arise. with different stakeholders.

• Monitor and assess the organization's IT security • Coordinate with external vendors and service posture, proactively identifying and addressing providers to procure and manage IT hardware, potential risks and vulnerabilities. software, and services, including Office 365.

• Stay informed about the latest cybersecurity threats, • Handle all IT-related projects for the Company. technologies, and best practices, and implement suitable measures to safeguard against them.

• Collaborate with various departments to effectively APPLY HERE integrate security measures into business processes and applications.

KEY RESPONSIBILITIES:

I S S U E 22

WOMEN IN SECURITY MAGAZINE

113

J O B B OA R D CYBERSECURITY TEAM LEADER | SIRISOFT PUBLIC COMPANY LIMITED FULL TIME

THAILAND

regulatory compliance. Build and maintain strong client relationships to ensure satisfaction and support • Technical Implementation: Lead develop, and design ongoing business growth. comprehensive security solutions based on the • Log Analysis and Monitoring: Implement and manage organization's needs and industry best practices. advanced monitoring systems and log analysis Implement and configure security technologies, tools to ensure continuous oversight of network including firewalls, IDS/IPS, DLP, encryption solutions, performance and security, especially for financial and access control systems. Diagnose and resolve clients. Proactively identify and resolve issues through security-related issues, ensuring the effective effective log analysis and monitoring practices. operation of security systems.

• Security Practices: Enforce security best practices, • Team Management: Lead and manage the conduct regular audits and vulnerability assessments, cybersecurity team, delegating tasks effectively and ensure compliance with industry standards. and ensuring team members possess the requisite Maintain up-to-date security protocols to protect skills and resources to deliver outputs that directly financial data and ensure compliance. contribute to the organization's strategic objectives.

• Incident Response: Lead the response to network • Financial Industry Compliance: Ensure that all network and security incidents, ensuring quick resolution with and security solutions adhere to the strict regulatory minimal disruption to client operations. Conduct postand compliance requirements of the financial incident reviews to enhance security measures and industry. Implement industry-specific security prevent future occurrences. measures to protect sensitive financial data and • Technical Documentation: Develop and maintain ensure compliance with standards such as PCI-DSS, comprehensive technical documentation, including SOX, and others. network diagrams, security configurations, load • Presales Support: Collaborate with the sales team balancing setups, digital certification processes, to provide technical expertise during the presales encryption practices, and log analysis/monitoring process. Participate in client meetings, design procedures, with a focus on financial industry customized network and security solutions for standards. financial clients, and develop technical proposals that meet their specific needs.

QUALIFICATIONS: • IT Risk Management: Proactively identify, assess, • Education: Bachelor’s degree in Information and mitigate network and security risks specific to Technology, Computer Science, Network Engineering, organization and clients. Implement and oversee or a related field. Advanced certifications (e.g., CISSP, robust security measures, including intrusion CEH, Security+, CCNP, CCNA) are highly desirable. detection/prevention systems, secure access • Experience: 5+ years of experience in solution security controls, encryption strategies, and comprehensive engineering, with significant hands-on experience IT risk management frameworks. Stay abreast of in technical design, implementation, and support emerging security threats and opportunities, ensuring within the financial industry or a similarly regulated the organization remains resilient and proactive in environment. Experience working in a Systems safeguarding its assets.

Integrator (SI) environment is strongly preferred • Project Management: Lead network and security • Technical Skills: Expertise in network technologies projects for financial clients from inception to (e.g., Cisco, Juniper), security protocols (e.g., completion, ensuring they are delivered on time, VPN, firewalls, encryption), load balancing, digital within scope, and to a high standard. Manage certification, log analysis, and monitoring tools (e.g., project resources, timelines, and client expectations, IDS/IPS, SIEM, SOAR, UEBA). Experience with financial coordinating closely with vendors and internal teams. industry compliance and cloud-based network and • Resource Management: Oversee resource allocation security solutions is a plus. Deep understanding of within the cybersecurity team. Mentor and guide cybersecurity frameworks and standards (e.g., NIST junior engineers, ensuring they are effectively utilized CSF, ISO 27001). and continuously developing their skills.

KEY RESPONSIBILITIES:

• Client Engagement: Serve as a trusted advisor to financial clients, offering strategic guidance on network architecture, security best practices, and

114

W O M E N I N S E C U R I T Y M A G A Z I N E

APPLY HERE

N O V E M B E R • D E C E M B E R 2024

CYBER SECURITY RESEARCHER AND PENETRATION TESTER | ENERGY JOBLINE FULL TIME

MEXICO

AS A CYBER SECURITY RESEARCHER, YOU WILL BE RESPONSIBLE FOR: • Performing security research to identify threat vectors and potential vulnerabilities.

• Using tools and security assessment techniques to identify vulnerabilities in the product, platform, and scoped environment and provide recommendations on vulnerability remediation.

• Testing of a network, computer systems, applications, or other digital environment to identify vulnerabilities and/or configuration issues that could be used and exploited by attackers • Developing new solutions under guidance and/or in a team setting or based upon precedents in the organizations.

• Working together with business leadership at SPB and EB level. Specifies needs, communicates about project approach and presents outcomes of research done.

• Delivering products as part of a team. Works on cross functional teams. Alternatively: Leads analytical

and design activities using proven technologies and vested approaches and methods.

TO BE SUCCESSFUL IN THIS ROLE YOU WILL: • Have a Bachelor's degree from an accredited university or college with at least 3 years of experience in Cyber Security Research/Offensive Security.

• Have Strong oral and written communication skills.

Have Strong interpersonal and leadership skills. Ability to influence others and lead small teams • Lead initiatives of moderate scope and impact. Ability to coordinate several projects simultaneously.

• Have Effective problem identification and solution skills. Proven analytical and organizational ability.

• OSCP Certification • OSEP Certification • OSED/OSCE3 Certification • Fluent written and verbal english

APPLY HERE

DO YOU WANT YOUR COMPANY'S JOB LISTED IN THE NEXT ISSUE? Contact us today to find out how we can boost your job listing and help you find the top talent in the security industry.

REACH OUT

aby@source2create.com.au

I S S U E 22

WOMEN IN SECURITY MAGAZINE

115

OFF THE SHELF

TOOLS AND WEAPONS: THE PROMISE AND THE PERIL OF THE DIGITAL AGE Authors // Brad Smith and Carol Ann Browne Microsoft President Brad Smith operates by a simple core When your technology changes the world, you bear a responsibility to help address the world you have helped create. This might seem uncontroversial, but it flies in the face of a tech sector long obsessed with rapid growth and sometimes on disruption as an end in itself.

BUY THE BOOK

QUIET: THE POWER OF INTROVERTS IN A WORLD THAT CAN'T STOP TALKING Author // Susan Cain At least one-third of the people we know are introverts. They are the ones who prefer listening to speaking; who innovate and create but dislike self-promotion.

BUY THE BOOK

STRONGER TOGETHER: WOMEN IN CYBERSECURITY Authors // David Meece and Emily Zakkak This book throws open the doors to the world of IT and Cybersecurity, celebrating over 100 accomplished women who have carved their own paths in these dynamic fields. It's not just a chronical of their achievements.

BUY THE BOOK

HACKING GENDER BARRIERS: EUROPE'S TOP CYBER WOMEN Author // ECSO This new publication written by the Women4Cyber Foundation gives voice to over 100 untold stories from women working in cybersecurity and aims at inspiring more female (but also male) professionals to take up a career in one of today’s most requested professional fields.

BUY THE BOOK 116

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

UNCANNY VALLEY: A MEMOIR Author // Anna Wiener Part coming-of-age-story, part portrait of an already-bygone era, Anna Wiener’s memoir is a rare first-person glimpse into high-flying, reckless startup culture at a time of unchecked ambition, unregulated surveillance, wild fortune, and accelerating political power.

BUY THE BOOK

CLOSE TO THE MACHINE: TECHNOPHILIA AND ITS DISCONTENTS Author // Ellen Ullman In 1997, the computer was still a relatively new tool—a sleek and unforgiving machine that was beyond the grasp of most users.

BUY THE BOOK

BROAD BAND: THE UNTOLD STORY OF THE WOMEN WHO MADE THE INTERNET Author // Claire L. Evans Join the ranks of the pioneers who defied social convention to become database poets, information-wranglers, hypertext dreamers, and glass ceiling-shattering dot comera entrepreneurs.

BUY THE BOOK

THE WOMAN THEY COULD NOT SILENCE Author // Kate Moore The Woman They Could Not Silence,’ is about Elizabeth Packard, an unintentional mental health rights advocate. Kate does an amazing job of profiling historical figures who advocate for those without a voice and learn to make systems not designed for them succeed in their cause.”

BUY THE BOOK

I S S U E 22

WOMEN IN SECURITY MAGAZINE

117

OFF THE SHELF

GOOGLE CYBERSECURITY EXPERT PARISA TABRIZ (STEM TRAILBLAZER BIOS) Author // Domenica Di Piazza Do you like to compete against other people? So did cybersecurity engineer Parisa Tabriz. She turned her toughness and her competitive spirit into a job as Google's top security expert.

BUY THE BOOK

CHICHI'S CYBERSECURITY ADVENTURES: THE SECRET OF SECURE SERVERS Author // Grace Fejokwu Chichi is a curious and tech-savvy girl living in Lagos, Nigeria who loves to learn about cybersecurity. She has just started boarding school at TeleAcademy Preparatory School and she is excited to learn even more!

BUY THE BOOK

CYBERAMA Author // Arthi Vasudevan Help your kids be safe on the internet and start talking cybersecurity with this actionpacked video game-like middle-grade adventure book!Are you worried about your child's digital safety-but don't know where to begin?

BUY THE BOOK

SEE YOURSELF IN CYBERSECURITY: A BOOK ABOUT CAREERS IN CYBERSECURITY FOR THE NEXT GENERATION Author // Zinet Kemal As a cybersecurity professional, YOU can play the role of a superhero who fights against hackers and cybercriminals to keep information, systems, networks, and applications safe from harm. It's a fulfilling career that requires you to stay one step ahead of the "bad guys" and help protect the digital world.

BUY THE BOOK 118

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

2024

024 2Australian

WOMEN IN SECURITY AWARDS ®

#2024WISAWARDS

CELEBRATING EXCELLENCE: THE 2024 AUSTRALIAN WOMEN IN SECURITY AWARDS The buzz was electric at the 2024 Australian

In my speech, I reflected on the resilience we

Women in Security Awards, and it was an emotional

all share:

experience for me. I felt a deep sense of pride reflecting on how far my team and I have come in building a vibrant community dedicated to celebrating the achievements of others. As I stood there, captivated by the enchanting performance of fire drummers and aerialists, accompanied by my key violinist—a phoenix—alongside an eight-piece orchestra, I couldn’t help but feel overwhelmed. This year marked my sixth awards ceremony, and I rode an emotional rollercoaster, uncertain if we’d even

“Like the courageous firebird, we rise from our own experiences, renewed, empowered, and transformed. This is not just a story of survival; it is a story of thriving—of taking the lessons learned from our challenges and using them to fuel our future success.”

make it to the opening evening. But thanks to my amazing sponsors, both old and new, we did!

The winners of all 18 categories embodied this spirit, These awards wouldn’t have come to life without the

and you could feel the emotion in the room as they

support of our incredible sponsors, some of whom

shared their heartfelt stories.

have been with us for years while others joined us

120

for the first time. Their contributions were vital in

This year’s judges had their work cut out for them,

making the evening a spectacular and unforgettable

sifting through hundreds of nominations across 18

celebration. A heartfelt thank you to NAB, Bupa,

categories to select our winners, highly commended

AUSCERT, Sekuro, Stone & Chalk, TAL Australia,

recipients, and those deserving special recognition. I

Australian Signals Directorate, Fujitsu Asia Pacific,

was honored to have such an esteemed panel: John

Convergint, CyberCX, Equifax, Netskope, Macquarie

Taylor, Maxine Harrison, Daniel Grzelak, Saleshni

Group, Decipher Bureau, Gridware, SheLeadsTech

Sharma, Nadia Taggart, Anafrid Bennet, Laura

Melbourne by ISACA, Zerto, and Cyber Unicorns. Your

Whelan, Jackie Montado, Leanne Fry, Clive Reeves,

support makes these awards possible.

Stephen Bennett, Yaso Arumugam, Sarah Luscombe,

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Ford, Jason Murrell, Dan Maslin, Lynwen Connick,

MOST INNOVATIVE EDUCATOR IN CYBERSECURITY

Tamsin Jowett, and Janice Law.

(Proudly sponsored by Source2Create)

Paul Clarke, Nikki Peever, Roxanne Pashaei, Craig

Winner: Emma Kirby The 2024 Australian Women in Security Awards were

Highly Commended: The Cybermarvel program by

created and produced by Source2Create, and we look

NSW Department of Education

forward to continuing this journey for many years to come. We’ll be heading to New Zealand for the 2025

CHAMPION OF CHANGE

New Zealand Women in Security Awards in April, and

(Proudly sponsored by Source2Create)

with support from sponsors and government bodies,

Winner: Peter Gigengack

we hope to launch in Tasmania and Hong Kong in the

Highly Commended: Jakub Zverina

New Year.

UNSUNG HERO Now, let’s celebrate this year’s incredible winners!

(Proudly sponsored by TAL Australia) Winner: Shyvone Forster

MVP OF THE IT SECURITY INDUSTRY

Highly Commended: Nikola Orgill

(Proudly sponsored by Source2Create)

Special Recognition: Karen Sullivan

Winner: Bek Cheb

BEST VOLUNTEER

BEST INDUSTRY INITIATIVE FOR DIVERSITY, INCLUSION, AND EQUALITY

(Proudly sponsored by Source2Create)

(Proudly sponsored by Stone & Chalk)

Winner: Donna Buckley

Winner: Women in Security Emerging Leaders

Highly Commended: Natalie Perez

Program by AWSN and Aya Leadership Highly Commended: Cyber Skills Enrichment

THE ONE TO WATCH IN PROTECTIVE SECURITY

Program

(Proudly sponsored by Sekuro) Winner: Venessa Ninovic Highly Commended: Anastasia Grivas

BEST SECURE CODER (Proudly sponsored by CyberCX) Winner: Anisa Taj

THE BEST PROGRAM FOR YOUNG INDIVIDUALS IN SECURITY (Proudly sponsored by Australian Signals Directorate) Winner: The Cyber Academy program by Deloitte Highly Commended: Kids Securiday

BEST SECURITY STUDENT (Proudly sponsored by AusCERT) Winner: Felicity Le Highly Commended: Adriana Jones Special Recognition: Eve Black

I S S U E 22

WOMEN IN SECURITY MAGAZINE

121

NEURODIVERSITY IN CYBERSECURITY EXCELLENCE CHAMPION (Proudly sponsored by Source2Create) Winner: Cayley Wright

AUSTRALIA’S MOST OUTSTANDING IN PROTECTIVE SECURITY (Proudly sponsored by Source2Create) Winner: Rachaell Saunders

AUSTRALIA’S MOST OUTSTANDING IN IT SECURITY (Proudly sponsored by Convergint) Winner: Kate Healy Highly Commended: Shannon Jurkovic Special Recognition: Joanne Cooper

BEST IN QUANTUM CYBER CHAMPION

As we reflect on this remarkable evening, it’s clear

(Proudly sponsored by Source2Create)

that the 2024 Australian Women in Security Awards

Winner: Dr. Farina Riaz

embody the spirit of resilience and transformation.

Highly Commended: Julie Gleeson

Each winner’s story is a testament to the strength and determination that fuels our community. Just

BEST PLACE TO WORK IN SECURITY

as the phoenix rises from the ashes, so too do these

(Proudly sponsored by Source2Create)

exceptional women rise from their experiences—

Winner: CyberCX Women in Cyber

renewed, empowered, and ready to lead. Together,

Highly Commended: Phronesis Security

we celebrate not only the achievements of these

Special Recognition: TAL Australia

trailblazers but also the vibrant future they inspire.

Let us carry this momentum forward, embracing our

PROTECTIVE SECURITY CHAMPION

challenges as catalysts for growth, and fostering an

(Proudly sponsored by Source2Create)

inclusive environment where every woman can soar

Winner: Nadia Hammoud

to new heights. The journey continues, and with each year, we reaffirm our commitment to lifting each

CONVERGED SECURITY RESILIENCE CHAMPION

other up, ensuring that the fire of inspiration burns bright in the hearts of future leaders.

(Proudly sponsored by Convergint) Winner: Meg Tapia Highly Commended: Sandy Ortmanns

BEST SECURITY MENTOR (Proudly sponsored by Fujitsu) Winner: Paula Sillars

CYBERSECURITY CHAMPION (Proudly sponsored by Source2Create) Winner: Vannessa Van Beek Highly Commended: Jana Dekanovska

122

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

EXPRESSIONS OF INTEREST OPEN!

Become a Sponsor Today If you're part of an organisation dedicated to promoting diversity and inclusion, we'd love to discuss our 2025 Awards packages with you.

These packages are designed to further our shared mission of recruiting, retaining, and advancing women in the cybersecurity workforce.

By becoming a sponsor and supporting our event, you'll visibly demonstrate your commitment to celebrating diversity and recognising accomplishments within the security industry.

Get in touch for more information on the 2025 Awards and to register your interest aby@source2create.com.au

BEST SECURE CODER Proudly Sponsored by

Winner

Anisa Taj NRMA For her outstanding leadership and technical expertise in secure coding, they have driven significant improvements across her organisation. Her commitment to safeguarding user data and fostering innovation through secure coding distinguishes them in the field of DevSecOps. Anisa efforts have greatly reduced vulnerabilities, enhanced team competency, and strengthened trust in the organisation’s products. Her intrinsic motivation, dedication to safety, and intellectual curiosity make her a standout leader in secure coding.

FINALISTS

NOMINEES

Mahrita Harahap

Emma Rigelsford

Microsoft

Anisa Taj NRMA

Emma Rigelsford

Anisa Taj Heena Sahare Sophie Barton

PwC

Antra Saxena

Antra Saxena

Sonal Agrawal

Deloitte

Natasha Liang

Natasha Liang

Medha Mishra

Bupa

Priya Eluru Mahrita Harahap Niki Patel

124

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

ANISA TAJ: A BEACON OF EXCELLENCE IN SECURE CODING

Anisa has played a pivotal role in enhancing secure coding practices at NRMA through her unwavering commitment to leadership and education. By spearheading the development and implementation of comprehensive secure coding guidelines, she ensured that the team adhered to industry standards such as OWASP and CERT. This foundational work has fortified NRMA’s secure coding practices, making them more robust and reliable.

Her impact extends beyond policy development; Anisa has actively organised workshops and training sessions that empower her team to elevate their secure coding knowledge. By facilitating regular code reviews and security audits, she has fostered a culture of vigilance and accountability, making security a shared responsibility within the team.

Anisa Taj, the esteemed winner of the Best Secure

As a hands-on coder, Anisa has consistently

Coder award proudly sponsored by CyberCX,

demonstrated her ability to identify and rectify

exemplifies what it means to be a leader in the

security flaws through thorough manual inspections

critical field of secure coding. In a world increasingly

and automated tools. Her commitment to secure

dependent on technology, her remarkable

coding principles—such as input validation, proper

contributions to the NRMA team have not only

error handling, and secure data storage—has been

elevated the organisation’s security posture but also

instrumental in improving the quality and security

inspired her colleagues and set a new standard in

of NRMA’s software applications. Moreover, her

secure coding practices.

integration of static and dynamic analysis tools

I S S U E 22

WOMEN IN SECURITY MAGAZINE

125

Anisa’s passion for secure coding is driven by a deep commitment to user safety and ethical responsibility.

She finds motivation in the intellectual challenges of cybersecurity and the tangible impact her work has on quality and trust. The rapid advancements in technology and the collaborative spirit of the cybersecurity community fuel her desire to stay updated and continuously improve her skillset.

Her ethical imperative to protect users from harm, combined with her commitment to personal growth, exemplifies what it means to be a leader in the security industry. Anisa’s dedication to sharing her knowledge and uplifting her peers speaks volumes about her character and commitment to building a strong security culture. into the development pipeline has automated vulnerability detection, significantly enhancing the

Looking ahead, Anisa’s contributions have laid the

organisation’s security measures. Thanks to her

groundwork for NRMA’s future initiatives, including

efforts, NRMA has seen a substantial reduction in

advanced automation, comprehensive security

security vulnerabilities, thereby improving user trust

training programs, and a Security Champions

and confidence in their products.

program to embed security advocates within each development team. Her vision for a security-first

Throughout her projects, Anisa has faced numerous

culture and holistic security framework will continue

challenges, from managing a complex codebase

to inspire the organisation as it strives for excellence

to addressing varying levels of expertise within

in secure coding practices.

her team. She skillfully navigated these obstacles

126

by implementing automated security tools for

Anisa Taj stands out as a shining example of what

continuous scanning and establishing a modular

it means to be an exceptional secure coder. Her

approach for easier security assessments.

hard work, leadership, and unwavering dedication

Anisa also created a peer mentorship program

to excellence have inspired those around her and

that has empowered team members of all skill

made a lasting impact on NRMA. Having narrowly

levels, ensuring that secure coding practices are

missed winning this award in 2023, Anisa’s journey

consistently applied across the board. Her innovative

showcases resilience and a steadfast commitment

strategies for integrating security measures

to her craft. She embodies the essence of “see her be

into development processes without hindering

her,” proving that with passion and determination, one

productivity demonstrate her keen understanding

can make a difference in the world of cybersecurity.

of the balance between security and functionality.

Anisa is not just deserving of the Excellence in

By emphasising a risk-based approach and

Secure Coding Award; she is a beacon of hope and

fostering cross-functional collaboration, Anisa has

inspiration for future generations in the cybersecurity

seamlessly woven security into the fabric of NRMA’s

landscape. Congratulations, Anisa, on this well-

development lifecycle.

deserved recognition!

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

BEST IN QUANTUM IN CYBER CHAMPION Proudly Sponsored by

Winner Dr Farina Riaz CSIRO She is transforming quantum cybersecurity with groundbreaking research, advanced AI security, and collaboration between the quantum and cybersecurity fields. Her work on defensive models, quantum-safe cryptography, and the impact of quantum computing on AI has greatly strengthened resilience against attacks. Her efforts have been vital in raising awareness about quantum computing’s impact on cybersecurity.

Highly Commended

Julie Gleeson Deloitte For her outstanding advocacy of quantum readiness in cybersecurity, his 25 years of experience have left a lasting impact.

By leading seminars, writing influential pieces such as "The Quantum Countdown," and creating practical solutions for quantum resilience, Julie has made remarkable advancements in the field.

Her innovative strategies and thought leadership have significantly shaped the cybersecurity landscape, helping organisations prepare for the quantum era.

FINALISTS Dr Farina Riaz

Yasaman Samadi

CSIRO

RMIT University

Rita Gatt

Tara Lie

Deloitte

Department Of Water And Environmental Regulation (DWER), WA State Government

Saba Bagheri Julie Gleeson Deloitte

128

NOMINEES

W O M E N I N S E C U R I T Y M A G A Z I N E

Rita Gatt Saba Bagheri Tara Lie Yasaman Samadi Julie Gleeson Dr Farina Riaz

N O V E M B E R • D E C E M B E R 2024

DR FARINA RIAZ: QUANTUM CYBERSECURITY TRAILBLAZER “Winning the “Best in Quantum in Cyber Champion” award is a tremendous honour for me and a reflection of my work at CSIRO and CSIRO Data61. This recognition highlights my dedication to advancing both quantum technologies and AI-driven solutions within the cybersecurity space. By combining the strengths of quantum computing with artificial intelligence, I’ve been able to develop innovative approaches that enhance the security of digital systems.

This award inspires me to continue exploring how these groundbreaking technologies can work together to build stronger, more resilient defences against ever-evolving cyber threats.

I’m proud to bring this achievement back to CSIRO, where our commitment to innovation continues to push the boundaries of what’s possible.”

Dr. Farina Riaz, the recipient of the Best in Quantum

could potentially disrupt traditional encryption and

in Cyber award, has established herself as a

security models, Farina has been working diligently

visionary at the intersection of quantum computing

to understand how quantum-enabled attacks

and cybersecurity. Her work at CSIRO reflects a

might affect AI systems. Her primary focus has

pioneering commitment to exploring the potential

been on image data, an area ripe for exploitation

threats and opportunities that quantum technology

by adversaries. Farina’s research explores the

brings to cybersecurity. Through her innovative

ways in which quantum capabilities could amplify

research and collaborations, Farina is reshaping

cyberattacks, such as data manipulation and

how we think about defending AI systems in an

hacking, and their potential to undermine the integrity

increasingly complex digital landscape.

of AI outcomes.

At the heart of Farina’s work is a groundbreaking

What sets Farina apart is her dual approach: not

project focused on protecting artificial intelligence

only is she identifying the ways in which quantum

from the emerging risks posed by quantum

computing could be leveraged for malicious

computing. In an era where quantum computers

purposes, but she’s also developing robust defense

I S S U E 22

WOMEN IN SECURITY MAGAZINE

129

through the use of Variational Autoencoders (VAE), represents a significant leap forward in the defense of AI systems against quantum attacks. After experimenting with various quantum circuit designs and testing different parameters, she discovered new methods to generate highly accurate quantum images. These models hold immense potential for countering future quantum-powered cyber threats, pushing the boundaries of how we defend against adversarial attacks.

Throughout her career, Farina has actively fostered collaboration between the cybersecurity and quantum computing communities. She has played a key role in building partnerships and initiating joint research projects that bridge the gap between these two fields. Her efforts include organising workshops and seminars at CSIRO, where experts from both domains come together to exchange ideas and tackle the unique challenges posed by quantum computing.

These events have become vital platforms for knowledge-sharing, driving interdisciplinary approaches to solving cybersecurity problems with quantum principles.

Beyond her work on AI and quantum defence strategies, Farina is laying the groundwork for future explorations into quantum-safe cryptography. While her current research focuses on identifying potential adversaries and crafting countermeasures, she is poised to expand her efforts into cryptographic practices that can withstand the power of quantum computing. As the field evolves, her insights will likely contribute to a stronger, more resilient cybersecurity framework, ensuring sensitive information remains mechanisms to counteract these threats. She has

secure even in a quantum-enabled world.

been working on innovative quantum AI security models that address the vulnerabilities inherent in

Farina’s impact on the cybersecurity landscape is

machine learning systems. By devising next-level

already evident through measurable improvements in

strategies, she aims to safeguard AI applications

the resilience of AI systems. Her quantum initiatives

from both human and machine adversaries in the

have enhanced defences against adversarial attacks,

quantum era.

particularly those targeting image data. By identifying key vulnerabilities in AI generative systems and

130

Farina’s contributions to quantum cybersecurity

developing effective countermeasures, Farina has

extend beyond theoretical work. Her cutting-

bolstered cybersecurity protections in critical sectors

edge application of generative AI, particularly

such as smart cities, where quantum threats could

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

disrupt everything from autonomous vehicles to

breakthroughs and cybersecurity threats into

anomaly detection systems.

casual conversations with colleagues, friends, and peers. This approach reflects her deep belief in the

In addition to her research, Farina has been

importance of continuous learning and dialogue

instrumental in raising awareness about the

as we enter an era where quantum computing will

convergence of quantum computing and

redefine the boundaries of cybersecurity.

cybersecurity. Whether she’s speaking at industry conferences or engaging directly with students

Dr. Farina Riaz’s journey in quantum cybersecurity

as a guest lecturer, her passion for educating the

is a testament to her dedication, innovation, and

next generation of cybersecurity professionals is

foresight. By exploring the untapped potential of

clear. She thrives on sparking conversations about

quantum technologies and developing new ways

the challenges and opportunities that quantum

to defend AI systems, she is shaping the future of

computing presents, ensuring that both current and

cybersecurity in a rapidly evolving technological

future cybersecurity leaders are equipped to tackle

landscape. As quantum computing continues to

the quantum revolution head-on.

advance, Farina’s work will undoubtedly remain at the forefront of efforts to protect our most critical digital

Farina’s work is not confined to the lab or the

infrastructures.

lecture hall. She brings her expertise into everyday life, seamlessly weaving discussions of quantum

DATA BREACHES ARE ON THE RISE Is your response plan ready?

Reduce the impact of a data breach for your customers & your brand with Equifax Protect. equifax.com.au/breach Equifax Pty Ltd, a wholly owned subsidiary of Equifax Inc.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

131

BEST PLACE TO WORK IN SECURITY Proudly Sponsored by

Winner

CyberCX Women in Cyber At CyberCX, she leads the way in promoting gender inclusion with her “Women in Cyber: Strength in Equality” plan and innovative practices. Her efforts have greatly boosted female representation and demonstrate a strong commitment to building a diverse and inclusive workplace. CyberCX sets the standard for gender inclusion and diversity, creating a workforce that thrives on varied perspectives and backgrounds, highlighting her dedication to fostering an innovative and supportive environment in the cybersecurity sector.

Highly Commended

Phronesis Security Phronesis Security exceeds industry standards by implementing government recommendations for gender balance, offering paid internships, and providing flexible work arrangements. Its Employee Share Options Program and generous training allowances further enhance staff career development. By fostering a culture of empowerment, inclusivity, and growth, the organisation demonstrates a clear commitment to progressive policies and practices that champion gender equality and professional development.

Special Recognition

TAL Australia TAL leads the way in inclusivity in cybersecurity with its pioneering approach to gender parity and extensive support for diverse talent. With over 50% of its cybersecurity team, including leadership positions, comprised of women, it has achieved gender parity in a traditionally male-dominated field. Ongoing recognition as an Employer of Choice for Gender Equality, along with proactive diversity initiatives such as gender-neutral communication and LGBTI+ support, underscores its commitment to creating an inclusive and innovative security workplace.

FINALISTS

NOMINEES

Cloudflare

Deloitte

Grant Thornton

Sekuro

TAL Australia

Tenable

Centiex

Ravinn

Grant Thornton Australia

Mercury Information Security Services

Nbn

CyberCX

Phronesis Security

Nab

Phronesis Security CyberCX Women In Cyber

Cloudflare Gridware Security

132

W O M E N I N S E C U R I T Y M A G A Z I N E

Bupa Pepsico

Department of Customer Service

TAL

N O V E M B E R • D E C E M B E R 2024

CYBERCX: LEADING THE WAY FOR WOMEN AND NON‑BINARY INDIVIDUALS IN SECURITY, BEST PLACE TO WORK 2024 CyberCX was delighted to be recognised as Best Place to Work in Security at the 2024 Australian Women in Security Awards for their Women in Cyber program.

Accepting the award on behalf of CyberCX, Chief People Officer Snezana Bakalovski said, "Celebrating the achievements of women in the industry, and those who support women in the industry, is so critical as we continue to strive to attract more women to the interesting, highly skilled and rewarding careers in security."

"At CyberCX we believe our teams need to be as diverse as the communities we secure – built on a foundation of gender diversity, inclusion, equity and belonging,” she continued.

“Accepting the award of Best Place to Work in Security for our Women in Cyber Program was the ultimate recognition after five years of relentless pursuit and focus on being the best in the industry.”

CyberCX has been awarded the prestigious Best

Since its inception in 2020, CyberCX has made

Place to Work in Security, and it’s easy to see why.

impressive strides in gender diversity. Starting with

The company’s commitment to fostering a diverse,

18% female representation, the organization now

inclusive, and supportive environment is second to

boasts 28% women in its workforce, a significant

none, particularly when it comes to uplifting women

leap above the Australian industry average of 21%.

and non-binary individuals in cybersecurity roles.

This includes 30% of female leaders overseeing

This vision is more than just words; it’s backed

critical security domains like Cyber Intelligence,

by concrete programs, policies, and an inclusive

Identity Access & Management, and Cyber Capability,

culture that makes CyberCX stand out in the

as well as 44% of industry specialists and 50% of the

security industry.

Cyber Intelligence Analyst team. While representation

I S S U E 22

WOMEN IN SECURITY MAGAZINE

133

of non-binary individuals remains low at less than 1%,

actively connects women to role models and industry

the company is actively committed to improving this.

opportunities, helping them build their careers while fostering a sense of belonging. CyberCX also

Women at CyberCX are leading from the front,

launched an All Women’s Cohort within its CyberCX

managing key security operations such as Federal

Academy, equipping women with the technical skills

PROTECTED Security Operations Centres, Identity &

they need to excel in cyber roles.

Access Management Projects, and Governance Risk & Compliance Teams. In fact, women occupy 30%

Flexibility and work-life balance are essential for

of the Executive Leadership roles in Cyber Security

employees’ well-being, and CyberCX ensures that

Practices and Domains, and nearly half of them are

all employees, especially those with caregiving

in Director or Executive Director positions. This isn’t

responsibilities, have the support they need.

just a statistic but a testament to CyberCX’s focus on

Flexible work arrangements, paid parental leave,

empowerment and career progression for women in

and additional mental wellness leave are just a

high-stakes, technical positions.

few examples of how CyberCX supports its team.

Importantly, 96% of women and 94% of men report

What truly sets CyberCX apart are its comprehensive

that they feel supported when utilizing these flexible

initiatives to ensure women and non-binary

working options.

individuals can thrive. The company’s flagship

134

program, Women in Cyber (WIC), provides mentoring,

In addition to its focus on gender diversity, CyberCX

skills development, and regular networking events. It

has a clear strategy to tackle unconscious bias and

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

discrimination. From screening job ads for gendered

Beyond internal efforts, CyberCX is a visible

language to ensuring women are included on all

champion for women in the broader industry,

interview panels for female candidates, CyberCX is

sponsoring key events such as the Women in

making strides to ensure recruitment and promotion

Security Awards Australia and celebrating occasions

practices are free from bias. This commitment is

like International Women’s Day and International

reflected in the fact that 35% of new hires in the past

Day of Women in Cyber. These initiatives are

12 months have been women, outpacing the overall

part of CyberCX’s larger strategy to advocate for

female workforce representation of 28%.

gender diversity and elevate women and non-binary individuals in the cybersecurity field.

The company’s leadership is equally committed to these efforts. CyberCX has strong governance

Ultimately, CyberCX deserves the Excellence

in place to ensure gender equality outcomes are

in Security Workplace Award not just for its

achieved, with clear leadership accountability and

commitment to inclusivity and equality, but for the

regular monitoring of progress through employee

measurable impact it is having on its employees

surveys and engagement metrics. CyberCX’s Women

and the industry at large. With progressive policies,

in Cyber: Strength in Equality initiative exemplifies its

a nurturing culture, and leadership that truly cares,

dedication to improving gender equality across the

CyberCX is not only securing communities—it’s

board, including efforts to achieve gender pay parity.

creating a workplace where everyone can belong and excel.

Today’s enterprise risks are constantly evolving.

Protect your business.

Evolve faster.

GRIDWARE.COM.AU

MVP OF THE SECURITY INDUSTRY Proudly Sponsored by

Winner

Bek Cheb AusCERT She is an exceptional individual who embodies the qualities of an unsung hero, volunteer, cybersecurity champion, and mentor. Her remarkable dedication and significant contributions to cybersecurity include transforming the AusCERT annual conference, leading mental health initiatives, and creating environments where people thrive. Her advocacy for diversity, equity, and inclusion, along with her inspiring public speaking and leadership, have educated thousands on online safety and data privacy. Her calm, diplomatic approach and unwavering support for newcomers showcase a collaborative spirit and deep commitment to the industry.

136

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

CELEBRATING BEK CHEB: MVP OF THE IT SECURITY INDUSTRY AT THE 2024 AUSTRALIAN WOMEN IN SECURITY AWARDS Bek Cheb has been honored with the prestigious

While Bek’s efforts often occur behind the scenes,

MVP In the IT Security Industry Award at the 2024

her impact is undeniable. She has played a pivotal

Australian Women in Security Awards, sponsored by

role in member services, training programs, and

Source2Create.

financial management at AusCERT, ensuring the continued success of the organisation as a not-

CEO of Source2Create, Abigail Swabey, expressed

for-profit dedicated to the greater good of the

her admiration, stating, "We are delighted to

cybersecurity community.

announce that Bek Cheb has been honored with an Appreciation Award for the MVP Of the security

Bek is also a passionate champion of diversity,

industry Award 2024. This prestigious accolade

equity, and inclusion (DEI). She has spearheaded

is a testament to Bek’s unwavering dedication,

numerous initiatives that celebrate and advance

extraordinary efforts, and remarkable contributions

these values, including the creation of awards

to the cybersecurity industry."

recognising contributions to DEI within the cybersecurity community. Her dedication to listening,

As the Business Manager at AusCERT, Bek’s visionary

supporting, and uplifting others has fostered deep

leadership has not only ensured the seamless

and enduring connections across the industry.

operation of this essential organisation but has also transformed its annual conference into a standout

Most recently, Bek has courageously stepped into

event marked by excellence, collaboration, and

the spotlight, taking on public speaking roles and

community spirit. Her meticulous attention to detail

demonstrating her inspiring journey from behind-the-

and ability to innovate have positioned AusCERT as a

scenes to a recognised leader. Her growth, combined

cornerstone of the Australian cybersecurity landscape.

with her compassionate leadership, highlights why she is so highly respected in the field.

Bek’s influence reaches beyond operational excellence.

She is a fierce advocate for mental health and

Bek Cheb’s tireless efforts, steadfast dedication, and

wellbeing, recognising the intense pressures faced by

compassionate approach make her a truly deserving

cybersecurity professionals. Through initiatives like

recipient of the 2024 MVP of the Security Industry

offering free counselling sessions and introducing a

Award. The cybersecurity community celebrates

beloved “puppy pit” at conferences, Bek has prioritised

Bek’s outstanding achievements and looks forward

holistic support, creating safe spaces for individuals to

to her continued positive influence in the industry.

recharge both mentally and emotionally.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

137

BEST SECURITY MENTOR Proudly Sponsored by

Winner

Paula Sillars Cyber Audit Team For her dedication as a mentor, she has significantly reshaped the Gold Coast cyber community. Her profound impact on mentees— through confidence-building, fostering growth, and facilitating career advancements—along with her active support and inspiration at various events, underscores her exceptional contribution to the cybersecurity industry. Her selfless dedication and passion for community-building have enriched the industry and made a tangible difference in many lives.

FINALISTS

NOMINEES

Peter Gigengack

Paula Sillars

Emily Edgeley

Puneet Tikoo

WA Department of the Premier and Cabinet

Barbara Lima

Darlene Winston

Tas Ahmed

Gai Brodtmann Australian Strategic Policy Institute

Paula Sillars Cyber Audit Team

Skye Davis AWSN

Colin Twist South Cyber West

Abhijit maity Sonakshi Arora Monika Tarnavetchi Grace Aulakh Colin Twist Monika Tarnavetchi Gai Brodtmann Catherine Buhler Emily MajorGoldsmith Skye Davis

138

W O M E N I N S E C U R I T Y M A G A Z I N E

Peter Gigengack Mina Zaki Samuel Kelly Helena Lim Smita Mylavarapu Asou Aminnezhad

Michael Reinhardt Justin Lisle Catherine Kimonides Siddiqua Shaheen Heather Tsui Mark Navarrete

Dr Claire Lentz

Pratima Kushwaha

Mahrita Harahap

Saleshni Sharma

Niru Verma

Justin Sacilotto

Jasmin Krapf

N O V E M B E R • D E C E M B E R 2024

PAULA SILLARS: A BEACON OF MENTORSHIP IN CYBERSECURITY “I'm deeply passionate about mentoring and supporting the next generation of cybersecurity professionals through my work with the Australian Women in Security Network and the Cyber Skills Enrichment Program. These experiences, along with other mentoring opportunities within my broader network, have shown me how practical guidance and a willingness to challenge traditional perceptions can unlock incredible talent. I believe in looking beyond résumés to recognise the true potential of each individual. Receiving this award reinforces the importance of mentorship, and I’m excited to continue empowering others and helping them build confidence on their cybersecurity journeys.”

Paula Sillars stands as a prominent figure in the

security sector, particularly for those at the beginning

cybersecurity industry, not just for her technical

of their careers. Her involvement with the Australian

acumen but for her unwavering dedication to

Women in Security Network (AWSN) as a Gold Coast

mentorship and community building. As a Cyber

chapter lead and her significant role in SecTalks

Security Engineer for a Managed Security Service

Gold Coast highlight her commitment to nurturing

Provider (MSSP) based in South East Queensland,

new talent. Paula’s mentorship is both formal and

Paula leads a team responsible for hardening clients’

informal, reaching mentees through AWSN and her

systems and manages the configuration of security

direct interactions via SecTalks and LinkedIn.

tools. She also oversees an intern program within the Cyber Audit Team, where she has developed

What sets Paula apart as an exceptional mentor

comprehensive training content and managed

is her practical and individualized approach.

the delivery of a rigorous 12-week Cyber Skills

She takes the time to understand each mentee’s

Enrichment Program.

unique aspirations and challenges. Paula excels at connecting mentees with others who share similar

But Paula’s influence extends far beyond her formal

goals or can offer valuable insights, leveraging her

role. She is a pillar of support and guidance in the

extensive network to foster growth. Her commitment

I S S U E 22

WOMEN IN SECURITY MAGAZINE

139

is evident in her generous allocation of time, expertise, and resources, aimed at empowering the next generation of cybersecurity professionals.

Paula’s mentorship has led to notable success stories. One of her mentees, initially new to cybersecurity and struggling with confidence, overcame imposter syndrome with Paula’s support and recently secured her first role as a threat hunter at BOQ. Another mentee, transitioning from a different career, found clarity and landed a job at Lotteries Corp thanks to Paula’s guidance. Additionally, Paula assisted a longtime IT professional, disheartened by a toxic work environment, in making a successful transition to cybersecurity where he is now flourishing.

Paula’s inspiration to mentor stems from a deep commitment to ensuring diverse representation in the industry. As an immigrant woman with hearing loss, she understands the challenges of being a minority in cybersecurity. Her visibility and success serve as a beacon of possibility for others, reinforcing the message that everyone has a place in this field. The joy she finds in witnessing her mentees’ achievements fuels her dedication to creating a more inclusive and supportive community.

On the Gold Coast, Paula’s impact is profound. Her efforts in building and nurturing the local cyber community are commendable. Through her roles as a mentor, AWSN chapter lead, and SecTalks coordinator, Paula has helped shape a vibrant and supportive network. Her work has not only fostered individual growth but also contributed significantly to the development of a strong, interconnected cybersecurity community.

Paula Sillars embodies the essence of a true mentor: someone who inspires, supports, and elevates others while contributing to the broader growth of their field. Her dedication to mentorship and community building makes her a deserving recipient of the Best Security Mentor award, reflecting her profound impact on the cybersecurity industry and the lives she has touched.

140

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Strategic guidance and specialised capabilities at each step of your cyber resilience journey Learn more “At Fujitsu Cyber Security Services, we empower every individual to reach their full potential, fostering an environment where every voice is heard, and every contribution valued. We are committed to a place where diversity is our strength and equality is the standard, ensuring that our collective ef forts lead to exceptional outcomes for all.”

Laura O’Neill Head of Fujitsu Cyber Security Services

www.fujitsu.com/au/services/security

THE BEST PROGRAM FOR YOUNG INDIVIDUALS IN SECURITY Proudly Sponsored by

Winner The Cyber Academy Deloitte For the program's innovative 'earn-as-you-learn' model that bridges the cybersecurity skills gap while boosting gender diversity, it has achieved a 93% retention rate and significant increases in female participation. The Academy excels in creating equitable career pathways and aligning educational outcomes with industry needs.

Highly Commended Kids SecuriDay For shaping the next generation of cybersecurity professionals with a strong emphasis on inclusivity and practical learning, Kids SecuriDay sparks excitement and prepares young women and nonbinary individuals for careers in cybersecurity.

FINALISTS

NOMINEES

CyberCX Academy

Monash University

CyberCX

Cyber Skills Enrichment Program

Kids SecuriDay

Kids SecuriDay

Monash University Student Incubator Program

The Cyber Academy by Deloitte

The Cyber Academy

She Leads Tech

Deloitte

Cyber Skills Enrichment Program Cyber Audit Team And Griffith University

142

W O M E N I N S E C U R I T Y M A G A Z I N E

CyberCX Academy IBL Program by ANZ Rheinmetall Defence Australia Cyber Security Internship

N O V E M B E R • D E C E M B E R 2024

EMPOWERING THE FUTURE OF CYBERSECURITY: THE CYBER ACADEMY’S ROLE IN BRIDGING GENDER GAPS AND FOSTERING TALENT The Cyber Academy, a groundbreaking collaboration between Deloitte, the University of Wollongong, Swinburne University of Technology, TAFE NSW, and the Department of Education, has won the Best Program for Young Individuals in Security. The Academy was created to close the cybersecurity skills gap by combining education, industry, and government efforts into a unique “earn-as-you-learn” model. This approach allows students to work while pursuing their education, earning a salary that removes financial barriers and opens doors to a cybersecurity career.

Launched after five years of careful co-design with key stakeholders, the first cohort began in January 2023 with a retention rate of 93%. Over the two cohorts, the Academy has supported 26 women and non-binary participants, making up 35% of the student body—double the industry average for gender diversity. Women have also been instrumental in the Academy’s development and success, with over 75 women actively involved in its creation and 57% of the Cyber Academy team being female.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

143

The Academy aims to tackle the well-known gender

the workforce, but the Cyber Academy gave me the

gap in cybersecurity. Through workshops and school

skills, confidence, and support I needed to re-enter

outreach programs, the Academy encourages high

the industry,” she shared. Charlotte, who discovered

school girls to consider cybersecurity as a career,

the program through a high school career fair, found

showing them that it’s not only viable but also an

her passion for cybersecurity during her first year

exciting path. Mentorship is key to this, connecting

in the Academy. “I never thought I’d be interested

students with industry role models who help guide

in cybersecurity, but the Academy made it so

their careers and offer support. Inclusive recruitment

accessible. Now, I can’t wait to see where this journey

practices ensure that women are represented at

takes me.”

every stage of the process, from applications to classroom participation.

The Cyber Academy is creating meaningful opportunities for students, particularly women and

Many women have already had life-changing

non-binary individuals, to thrive in cybersecurity.

experiences thanks to the Cyber Academy. Nora,

The program offers real-world work experience,

for example, transitioned from a career in early

mentorship, and a supportive learning environment

childhood education into cybersecurity. She credits

that ensures participants are set up for long-term

the program for opening doors she never thought

success. With its focus on diversity, inclusivity, and

possible. “I had no idea cybersecurity could be

breaking down financial barriers, the Academy is not

my path until I found the Academy. Now, I’ve had

only closing the skills gap but also reshaping the

opportunities like joining CISCO’s Dream Team for

future of cybersecurity in Australia.

the 2023 FIFA Women’s World Cup—something I could never have imagined,” she said.

As Nora put it, “The Cyber Academy gave me a fresh start in a field I’m passionate about, and I

Sachita, another student, used the Academy as her

know I’m not the only one. It’s opening up a world of

pathway back to work after taking time off for family

possibilities for so many of us.”

responsibilities. “I was nervous about returning to

144

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

You’ll be at the forefront of cyber security and part of a diverse team at ASD.

An exceptional career awaits at ASD.gov.au/careers

BEST VOLUNTEER Proudly Sponsored by

Winner

Donna Buckley John Curtin College For her outstanding work in advancing cybersecurity education,she has created workshops, integrated cybersecurity into school curricula, and connected students with industry professionals through mentorship programs. Donna's efforts have not only heightened awareness but also sparked genuine interest in cybersecurity among young people, demonstrating that they are an invaluable asset to the industry.

Highly Commended Natalie Perez ISACA and IAG Natalie Perez's unwavering dedication to volunteering, driving impactful sessions, and fostering collaborations that advance cybersecurity education and support women in the field, she has gone above and beyond. Her efforts in establishing diverse volunteer committees, leading mentorship programs, and working with key organisations have empowered women in cybersecurity.

FINALISTS Annie-Mei Forster

Donna Buckley

Baby Nagayo

SheLeadsTech

Kelli Dienhoff

Anjali Varghese

Donna Buckley

Linda Cavan

Heidi Winter

Annie-Mei Forster

Chaital Vasta

Puneet Tikoo

Pooya Khanmohamadi

Sabine Bourdin

Yogini Patil

Amelia Edge

Mary Yu

Jasmine Mccrudden

Roma Singh

Natalie Perez

Sandra Weng

Andra Cimpean

WiCys Australia

John Curtin College

WiCys Linda Cavanagh AWSN

Natalie Perez ISACA and IAG

Jasmine McCrudden Decipher Bureau

146

NOMINEES

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

DONNA BUCKLEY: TRANSFORMING CYBERSECURITY EDUCATION FOR THE FUTURE Donna’s journey in cybersecurity education began

It is such an unexpected honour to be awarded the Best Volunteer at the Australian Women in Security Awards. Listening to the breeze has led my on an adventure that I never would have imagined when I started my mathematics teaching career. A love of cryptography, puzzles and people has sailed me on a journey into the cybersecurity industry. To be recognised with this award makes me confident that the work I do supporting young people and teachers to develop their own portfolio of cybersecurity skills is helping to create a more secure Australia."

with a profound passion for mathematics and a love of puzzles. Initially a mathematics teacher, she utilised cryptographic applications from history to help students connect pure mathematics with the real-world applications of cybersecurity. In 2018, she recognised the urgent demand for future cyber experts through her volunteer work as a Day of STEM/Life Journey teacher champion. Inspired to meet this need, Donna retrained, earning a Cert IV in Training and Assessment and a Cert IV in Cybersecurity, enabling her to deliver a vocational cyber course for her students.

In 2021, Donna’s pioneering efforts culminated in the development of Australia’s first accredited cybersecurity industry-aligned Cert II course for Year 11 and 12 students. This groundbreaking initiative provides students with future-ready cybersecurity skills and creates an innovative vocational pathway that reinvents how students engage with technical

Donna Buckley, winner of the Best Volunteer

education. Her approach opens doors for dual

award has made extraordinary contributions to

exceptional and creative students to expand their

cybersecurity education, bridging the gap between

skill sets beyond the traditional curriculum, setting

secondary schooling and the rapidly evolving

the foundation for future careers in the cyber field.

cyber industry. Her dedication to empowering the next generation of cybersecurity professionals is

EDUCATING AND ENGAGING COMMUNITIES

reshaping the educational landscape in Australia,

Donna’s commitment to cybersecurity goes beyond

particularly in the realm of vocational training for

the classroom. She is passionate about raising

high school students.

awareness of cybersecurity risks and best practices

I S S U E 22

WOMEN IN SECURITY MAGAZINE

147

within her school and the broader Western Australian

Beyond her teaching role, Donna has actively

community. Her “champions creating champions”

engaged with programs and competitions that

methodology empowers her students to lead

nurture technical talent. She volunteers with the Girls

cybersecurity initiatives. Her cyber students regularly

Programming Network (GPN Perth Node), where

conduct activities such as Safer Internet Day events,

she leads beginner programming sessions and

assembly presentations on digital reputation,

ensures young girls receive the support they need

and educational incursions for younger students,

to thrive in technical fields. As a driving force behind

educating peers, teachers, and parents alike.

the PECAN+ CTF (Capture the Flag) competition, Donna has inspired students to develop critical

Her influence extends far beyond the school gates.

problem-solving skills essential in cybersecurity. Her

Donna’s students have taught online safety to

long-standing involvement with the CSIRO Cyber

community groups, including the Meerilinga Family

Taipan competition further highlights her dedication

Group, shared their experiences in the Cyber Taipan

to creating engaging, hands-on experiences for her

competition, and presented at DigiTech teacher

students.

conferences. These initiatives foster a cybersecurityconscious culture, reinforcing the importance of

LOOKING TO THE FUTURE

digital safety in everyday life.

Donna’s plans for the future center around continuing to innovate and expand cybersecurity education. With

Through her active involvement in the broader

the recent conclusion of the Cyber Taipan contract,

cybersecurity community, Donna engages with

Donna has seamlessly adapted her resources to

industry and public sector leaders to address the

align with the PECAN+ competition, ensuring her

need for practical education in the field. She regularly

students continue to receive high-quality, practical

hosts industry experts and tertiary educators to

cybersecurity training.

speak at her school, ensuring her students are exposed to the latest trends and technologies in

Her newest initiative, the Cyber [+] Teacher project,

cybersecurity. Additionally, she collaborates with

focuses on building teacher capacity to deliver

the WA Office of Digital Government, advising on

vocational courses aligned with future-focused

cybersecurity education pathways for secondary

technical industries, particularly in the context of

students.

cybersecurity. By developing comprehensive teacher resources and professional learning modules for

PROMOTING BEST PRACTICES AND SHAPING FUTURE LEADERS

Year 11 and 12 students, this project aims to provide

As an advocate for cybersecurity education, Donna

digital and cybersecurity skills. This initiative will

continuously promotes best practices by aligning her

not only benefit students by equipping them with

teaching with the guidelines of the Australian Cyber

the skills necessary for future employment but

Security Centre (ACSC), eSafety Commissioner, and

will also enhance teachers’ understanding of the

Australian Signals Directorate (ASD). Her efforts to

intersection between business, digital technologies,

demystify cybersecurity have earned her numerous

and cybersecurity.

educators with the tools they need to teach essential

accolades, including the prestigious 2023 Prime Minister’s Prize for Science Teaching in Secondary

Donna Buckley’s contributions to cybersecurity

Schools and the WiTWA Tech + Award. These

education are shaping a future in which students

honours underscore her commitment to developing a

are equipped with the knowledge and skills to

pipeline of future cyber professionals equipped with

protect Australia’s digital landscape. Her passion

the skills necessary to navigate the complexities of

for fostering the next generation of cyber leaders

the industry.

ensures that her legacy will continue to inspire and guide educators and students for years to come.

148

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Build the future of Australian innovation with us

Only 17% of Australia's cyber security workforce identify as female.

We want to change that.

DID YOU KNOW?

Enhancing the growth, recognition and impact of these professionals.

Meet our 2024 Stone & Chalk x AWSN Scholarship Program recipients:

Christina Jane Arcane

Jasmin Ilic

InspireCyber

CYBR

• Startups & Scaleups • Corporates & Government • Cyber Security Specialists

6,000+

innovators across 515+ startups

Dr Sarah Morrison

Morrisec

Shirley Ha

HA.WIC

We are not-for-profit, purpose-driven and sustainable, and are committed to diversity and inclusivity across our community.

$1B+

residents across 515+ startups and scaleups

100,000+ jobs created

4 hubs

across Austalia

Founders go further faster at Stone & Chalk.

Join us.

stoneandchalk.com.au/cyber

BEST INDUSTRY INITIATIVE FOR DIVERSITY, INCLUSION, AND EQUALITY Proudly Sponsored by

Winner

Women in Security Emerging Leaders Program AWSN and AYA LEADERSHIP For significantly advancing female leadership in Australia’s security sector through the Women in Security Emerging Leaders program, they have supported numerous women across multiple organisations with tailored workshops and coaching. This initiative has led to increased promotions and leadership roles, fostering resilience, diversity, and confidence within the industry, and empowering women with the edge to lead.

Highly Commended

Cyber Skills Enrichment Program Cyber Audit Team and Griffith University Cyber Skills Enrichment Program excels in bridging the cybersecurity talent gap with free training and paid placements. It prioritises inclusivity, with 40% of placements awarded to women and 20% to neurodiverse individuals.

Graduates have landed roles at top organisations, proving the program's effectiveness. The program is impactful and innovative.

FINALISTS WINSPIRE

ANU’s National Security College and The Australian Strategic Policy Institute

Women In Security Emerging Leaders Program

AWSN and AYA LEADERSHIP

Kids SecuriDay Cyber Career Starter Program Kirra Services

Cyber Skills Enrichment Program Cyber Audit Team and Griffith University

150

W O M E N I N S E C U R I T Y M A G A Z I N E

NOMINEES Women In Security Leadership Development Program AYA LEADERSHIP Cyber Skills Enrichment Program Ilead Talent Exchange Women In Security Emerging Leaders Program by AWSN And AYA LEADERSHIP Project Friedman, produced

by Louisa Partridge and Louisa Vogelenzang

Cyber Uplift Step Program SA Identifly Cyber Security Graduate Program by Identifly Cyber Career Starter Program

By Kirra Services Kids SecuriDay Women In Security Mentoring Network by AWSN, ASD, and OK RDY Isaca Foundation SheLeadsTech Melbourne

WINSPIRE by National Security College, Australian National University and Australian Strategic Policy Institute (ASPI)

N O V E M B E R • D E C E M B E R 2024

EMPOWERING FUTURE LEADERS: THE WOMEN IN SECURITY EMERGING LEADERS PROGRAM—PROUD WINNERS OF THE 2024 BEST INDUSTRY INITIATIVE FOR DIVERSITY, INCLUSION, AND EQUALITY AWSN and Aya Leadership are proud of the impact the Women in Security Emerging Leaders Program is having across the security industry – supporting women, advancing female leadership, and expanding diversity. Winning this award highlights the important role of leadership development to creating sustainable diversity, inclusivity and equity in the sector.

With 140 women having now progressed through the program over the past three years, it acknowledges the essential support required for early-career female professionals, to help them overcome systemic barriers and position them for leadership roles. It also reflects how well-placed Australia’s security sector is to invest in the development and promotion of women as a leading strategy to drive gender equity and increase the representation of women at all levels, especially as leaders.

The Women in Security Emerging Leaders Program is

Dr. Susan McGinty, founder and CEO of Aya

a groundbreaking initiative by the Australian Women

Leadership, leads this initiative with a wealth

in Security Network (AWSN), in collaboration with Aya

of experience in STEM and National Security.

Leadership. Launched in 2022, this program aims

Her commitment to fostering gender diversity

to elevate emerging female leaders in the security

informs the program’s design, which creates a

sector, addressing barriers that have traditionally

supportive environment for women to learn, grow,

hindered women’s progression in this male-

and collaborate. By offering tailored leadership

dominated field.

development, the program helps participants

I S S U E 22

WOMEN IN SECURITY MAGAZINE

151

Designed for women and female-identifying individuals across various security sectors—including cyber, IT, physical security, and national security—the program accommodates those new to leadership or in their first roles. By connecting participants with peers and helping them define their leadership aspirations, it fosters a thriving community where women can succeed.

What sets this program apart is its research-driven content, rooted in the experiences of its design and delivery team, which has over 25 years of combined experience in the STEM and security sectors. The program has also responded proactively to findings from the 2023 RMIT/AWSN Gender Dimensions of the Australian Cyber Security Report, highlighting the need for increased gender representation in leadership roles within cybersecurity. navigate their unique challenges and equips them

Participants benefit from a holistic learning

with the tools necessary for leadership success.

experience that includes workshops on essential topics like emotional intelligence and effective

Despite women making up less than 25% of the

communication, combined with coaching and peer

security workforce in Australia—and only 17% in

mentoring. Each session is designed to cater to

cybersecurity—the Emerging Leaders Program

individual needs, ensuring that participants can

focuses on increasing retention and promotion of

integrate new strategies into their daily practices.

women in these sectors. It aims to provide essential

152

support to early-career professionals, helping them

The positive feedback from participants reflects the

overcome systemic barriers and positioning them

program’s effectiveness, with many recommending

for leadership roles. This initiative tackles issues

it to colleagues and expressing appreciation for the

like toxic organisational cultures and the scarcity of

strong sense of community it fosters. Organisations

role models and mentors, paving the way for a new

like CyberCX have also recognized its value, sending

generation of confident female leaders.

over 14 women through the program since it began.

The program operates on four key pillars: enhancing

The Women in Security Emerging Leaders Program

leadership skills, increasing the number of female

is more than just a leadership initiative; it’s a

leaders, positioning participants as role models,

transformative approach to diversity and inclusion

and transforming organisational cultures. In 2023, it

in the security sector. By empowering women

successfully developed the leadership capabilities of

and focusing on their leadership development, it

33 women, contributing to a total of 94 participants

reshapes the landscape of the industry, setting a

from over 40 organisations since its inception. Many

precedent for inclusivity and equity. As it continues

participants have reported significant growth in their

to grow and adapt, this program is paving the

leadership skills and have even secured promotions

way for a more diverse and collaborative future in

shortly after completing the program.

security leadership.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Governance, Risk & Compliance Capability Maturity Assessment Service Take proactive steps to enhance your cyber security posture and mitigate information security risks. We work together with you to reduce your risk exposure.

Package Includes the following: Comprehensive Assessment

Maturity Gap Report

Risk Scenario Assessment Report

Executive Summary & Roadmap

Follow up Re-assessment

Key Benefits Expert Guidance Strengthened Cyber Security Posture Globally Recognised Industry Controls Cyber Risk Identification Independent Evaluation

grc@auscert.org.au

+61 (0)7 3365 4417

auscert.org.au

Proud sponsors of the 2024 Australian Women in Security Awards.

BEST SECURITY STUDENT AWARD Proudly Sponsored by

Winner Felicity Le Risk & Security Management A truly dedicated recent graduate making impactful strides in national security, she is poised to become a leader and role model for women in the industry. Despite facing challenges, she has won awards, published research, and co-developed the Emerging Leaders Program. As an AIPIO Board member, she clearly demonstrates a commitment to leadership and serves as a role model for women in security, all while balancing career dedication with mental health.

Highly Commended

Adriana Jones NIB A dedicated cybersecurity professional, she is passionate about protecting societal values and empowering others. Her work enhancing digital services at NIB and overcoming challenges as one of only eight women in Engineering School in Guatemala showcases her resilience. With achievements including a prestigious scholarship, a microcredential, and mentoring women in cybersecurity, her commitment to safeguarding societal values is evident.

Special Recognition

Eve Black SA Power Networks Eve black has demonstrated that leadership in cybersecurity is achievable without the need for advanced degrees by harnessing her neurodivergent strengths and unwavering determination.

Excelling in her TAFE studies and stepping into leadership roles as a teacher's assistant, she sets an inspiring example for others. By turning challenges into opportunities, she proves that leadership in cybersecurity is driven by passion and perseverance, not just traditional qualifications.

154

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

BEST SECURITY STUDENT AWARD Proudly Sponsored by

FINALISTS Adriana Jones

Rofina Suraj

Katrina Steen

Samantha Barr

Sherley Pidakala

Courtney Jones

Tania Sadhani

Shakira Memorey

Dishti Kapoor

Zahlia Hamer

Paola Palomo

Aliah Al-Shabib

Claudia Nave

Orro Group

Linet Momposhi

Felicity Le

Rofina Suraj

Yasaman Samadi

Ishika Bhatra

Anushka Ravalji

Katie Perry

Nyalok Gatwech

Cindy Liu

Hayley Eaton

Adriana Jones

Eve Black

Chantelle Vivian

Greeshma Dantla

Pallavi Singh

Amy Curtis

Jessica Austin

Amy Nguyen

Shurui Lian

Jess McInally

Dracy Ma

Marwah Alharbi

Cindy Liu

Georgia Elias

Julie McKenna

Didi Fletcher

Jingjing Zhang

NIB

Linet Momposhi Western Sydney University

Felicity Le Risk & Security Management

Eve Black SA Power Networks

Paola Palamo

Pronto Software

Courtney Jones CyberCX

Zahlia Hamer Macquarie University

I S S U E 22

NOMINEES

WOMEN IN SECURITY MAGAZINE

155

FELICITY LE: BEST SECURITY STUDENT AWARD WINNER in the mercantile industry. Her passion for national

" This award means everything to me. As a child of first generation immigrant parents, my family did not have much when I was growing up. Even so, we were grateful for everything we had and they worked hard to ensure a brighter future for my siblings and I. This gratitude is precisely what drew me in to the security profession, particularly national security. It's my way of saying thank you to my parents and to my home - I want to protect our homes for future generations."

security, international law, and the ethics of war has driven her to build a robust foundation in intelligence and security while still completing her degree. Felicity’s commitment to these fields is evident, as she aims to transition into government intelligence, with aspirations of protecting Australia’s national interests.

Felicity’s path to success has not been without challenges. Raised in an ethnic minority household by first-generation immigrant parents, she experienced the effects of generational trauma and financial hardship firsthand. Her parents worked tirelessly in their small business to provide for their family, and as she grew older, Felicity took on a dual role— supporting her family’s business while advancing her own education and career. This balancing act

Felicity Le’s journey to winning the Best Security

often led to sleepless nights and impacted her well-

Student Award is a testament to her remarkable

being, but Felicity’s determination never wavered.

achievements, resilience, and dedication to both

Despite these obstacles, she excelled in her studies,

her studies and her career in the security and

publishing a research paper in the Australian Institute

intelligence fields. A recent graduate of Queensland

of Professional Intelligence Journal and winning the

University of Technology, Felicity holds a double

Emerging Intelligence Professional Award in 2022.

degree in Law (Honours) and Justice. Throughout

156

her academic career, she has simultaneously

In the past year, Felicity has demonstrated her

worked as an intelligence professional in the private

potential for leadership through a series of significant

investigations sector, gaining hands-on experience

accomplishments. She has mentored and supervised

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

an intern as part of the Australian Institute of Professional Intelligence Officers (AIPIO) program, co-developed the Emerging Leaders Program with Aya Leadership, and played an integral role in planning the AIPIO National Conference in 2023.

Her leadership in these areas, particularly in shaping programs tailored to emerging professionals in the intelligence community, underscores her ability to inspire and guide the next generation of security professionals.

Beyond her primary responsibilities, Felicity has been actively involved in AIPIO since 2019, where she initially completed an internship and now serves as a Board member. In this role, she advises on matters relevant to emerging intelligence professionals, attends networking events, and contributes to the development of the intelligence community.

Her involvement in AIPIO’s Security Intelligence Community of Practice showcases her commitment to advancing discussions around national security, defence, and policing, ensuring that the perspectives of newer professionals are well represented.

Felicity’s passion for leadership is also evident in her plans to develop a marketing and communications strategy for AIPIO’s Emerging Intelligence Professionals Community of Practice. This initiative, the first of its kind, will streamline communications between the Board, regional representatives, and community convenors, helping to better serve the needs of intelligence professionals across Australia.

Undertaking this project independently, Felicity is driven by her deep passion for the intelligence sector

and security is a lifelong journey, and one that

and her desire to foster stronger connections within

requires not only resilience but also a deep sense

the community.

of responsibility. It is this unwavering commitment to making a difference that motivates Felicity to

For Felicity, working in security is about more than

continue her work in the security industry, ensuring

just protecting systems and information—it’s about

the safety of future generations.

giving back to her country and ensuring a future where others don’t face the struggles her family

Felicity Le is a shining example of what it means to

endured. Her personal experiences growing up in

be a leader in security, and her contributions thus

an immigrant household, along with her dedication

far highlight the significant impact she will continue

to Australia’s national security, have shaped her

to have on the intelligence and security fields in the

worldview. She believes that the pursuit of peace

years to come.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

157

AUSTRALIA’S MOST OUTSTANDING IN IT SECURITY Proudly Sponsored by

Winner

Kate Healy Empowered Cyber As a pioneering IT security leader, she is renowned for her exceptional leadership and innovation, elevating both the industry and smaller companies through her dedication and expertise.

Her trailblazing roles and commitment to mentoring highlight her significant impact on the industry. By transforming personal fears into strengths and focusing on enhancing security for smaller, economically vital companies, she demonstrates an unwavering commitment to her core values. Her leadership and innovation make her truly deserving of this award.

Highly Commended

Shannon Jurkovic Australian Retirement Trust She is a standout leader in cybersecurity, recognized for her transformative impact, inclusive approach, and dedication to advancing industry standards and education. By building a robust team and shifting to a holistic strategy, she revolutionised her organisation’s approach to cybersecurity. Her inclusive leadership has fostered greater awareness in the field and led to pivotal partnerships that enhance customer authentication. With a proven track record in the sector, she excels in fostering collaboration, developing her team, and engaging with the industry.

Special Recognition

Joanne Cooper World Data Exchange She is a pioneering leader in data security and eHealth, recognized for her innovative approach, global teamwork, and adept navigation of regulatory challenges. Her exceptional management skills are evident in her leadership of a global team and her promotion of collaboration. Her commitment to driving innovation is showcased through her impressive achievements and accolades, while her ability to navigate complex regulatory landscapes while pushing technological boundaries marks her as a true trailblazer in the industry.

158

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

AUSTRALIA’S MOST OUTSTANDING IN IT SECURITY Proudly Sponsored by

FINALISTS Fiona Long

NOMINEES Caity Randall

Kate Healy

Bahar Fardaran

Shyvone Forster

Joanne Cooper

Deanna Gibbs

Nikki Peever

Nora Fusiyao

Daniela Fernandez Palacios

Liz Gomez

Shannon Jurkovic

Joanne Cooper

Sharin Yeoh

Shameela Gonzalez

Assuredly

Kate Healy Empowered Cyber

Shannon Jurkovic Australian Retirement Trust

World Data Exchange

Laura O’Neill Fujitsu

Bat-Ami Naim Fiona Long Jessica Gomes Dian Erliasari Laura O’Neill Sarah McAvoy Daniela Fernandez Palacios Roseline Christopher

Serena Pillay Simi Das Adara Campbell Leila Assadi Jalpa Bhavsar Laura Hartley-Quinn Jana Dekanovska

Pranali Mandewalkar

I S S U E 22

Louise Hanna

Vanessa Gale

Anya Avinash

Katherine Downing

Jacqueline Ryder

Naima Hassen

WOMEN IN SECURITY MAGAZINE

159

KATE HEALY: PIONEERING EXCELLENCE AND INSPIRING LEADERSHIP IN IT SECURITY Kate Healy’s recognition as Australia’s Most

My favourite part of the awards night was being in a room full of so many amazing Women and advocates. Accepting the award in front of so many peers who had incredible stories and triumphs is something I will never forget.

I am deeply honoured and humbled to have won. Working in IT Security is not always easy and there was a point in my career I wanted to walk away, but I came to realise that the work we do is important. If I can help protect an organisation, I’m not just protecting the organisation, but also their customers including everyday Australians, and it’s that philosophy that drives me. It is wonderful to be recognised amongst my peers, but the most meaningful part of the award for me is the acknowledgement that the work I do has impact and that I am contributing to our community in a meaningful way.

Outstanding in IT Security at the recent 2024 Australian Women in Security Awards is a fitting tribute to her exceptional career and unwavering dedication to the field. Her journey through IT security is nothing short of remarkable, marked by groundbreaking roles and pioneering contributions that have set new benchmarks in the industry.

Kate’s career began with a trailblazing role in 2008 when she became one of the banking industry’s first Business Information Security Officers (BISO) at Standard Chartered Bank. This position, which took her to Singapore, set the stage for her future achievements. By 2014, Kate had further solidified her status as a pioneer by becoming Australia’s first Cyber Security Risk Manager at CBA, where she expertly managed a $300 million multi-year Cyber Security program.

Her innovative spirit continued to shine in 2020 when she joined Google Cloud as their first Australian cyber security hire, taking on the role of Head of Security for Google Cloud Australia and New Zealand. And most recently Kate served as the interim CISO for The Lottery Corporation, an ASX Top 50 company, where she oversaw a comprehensive multi-year cyber security program.

160

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Kate’s leadership extends well beyond her formal roles. Her commitment to fostering collaboration and supporting others in the IT security community is evident through her various efforts. She has provided invaluable mentorship, both formally through the NSW Cyber Business program and informally, helping numerous professionals navigate their careers and develop crucial skills. Her dedication to building a supportive network is further demonstrated by her voluntary hosting of the Sydney Day of the Month Club. This meetup for cyber professionals thrives under her engagement, creating valuable opportunities for networking and collaboration.

In her role as a Non-Executive Director for HANZA, Kate has actively contributed to reviewing and aligning the organisation’s cyber security strategy, enhancing its technological resilience and mission. Her contributions have had a profound impact on both individuals and the broader IT security community.

Kate’s journey has not been without its challenges.

One significant obstacle she faced was her initial

field. In 2019, Kate was honored as one of the

fear of public speaking. Recognizing the importance

first Fellows (FAISA) by the Australian Information

of clear communication for effective leadership,

Security Association (AISA), acknowledging her

Kate committed herself to overcoming this fear

leadership and commitment. Her influence was

through practice and training. This transformation

further highlighted in 2020 when she was shortlisted

enabled her to become a sought-after keynote

for NSW Woman of the Year by the University of

speaker, sharing her insights on various topics,

Wollongong, celebrating her trailblazing efforts.

including container security and cyber risk culture.

Her dedication to public speaking is driven by a

Kate’s passion for IT security is deeply rooted

desire to inspire the next generation of cyber security

in her understanding of its broader impact. She

professionals, bridge knowledge gaps, and support

embraces the philosophy that her work not only

women in the industry.

protects organizations but also their customers and contributes to national security. This sense of

Kate also encountered challenges in balancing her

purpose drives her to inspire others and foster a

corporate career with her passion for addressing

culture of security excellence.

the “Knowledge Gap” in Cyber Security. This led her to found Empowered Cyber, a consultancy offering

Kate Healy’s recognition as Australia’s Most

accessible and affordable cyber security expertise

Outstanding in IT Security is a testament to her

to individuals and start-ups. Her choice to prioritize

significant contributions and unwavering dedication.

this mission over financial convenience highlights her

Her career is a testament to what it means to be a

dedication to making a meaningful impact.

trailblazer and leader in IT security. Kate’s unique blend of expertise, leadership, and passion sets her

Her contributions have been widely recognized,

apart, and her impact will continue to inspire and

underscoring her influence and leadership in the

shape the future of the industry.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

161

AUSTRALIA'S MOST OUTSTANDING IN PROTECTIVE SECURITY Proudly Sponsored by

Winner

Rachaell Saunders National Protectives Services She is an exemplary leader in protective security, having transformed NPS into a national leader over nearly 40 years. From pioneering patrol officer to CEO, her journey showcases resilience and innovation. Her commitment to overcoming gender biases, navigating business challenges, and supporting disadvantaged individuals highlights her exceptional leadership and dedication to the industry.

Highly Commended Jodi Finn Eva’s Ridge Enterprises For her exceptional leadership and innovative security management at the ASEAN-Australia 50th Anniversary Special Summit, she ensured the safety of world leaders and thousands of attendees.

Her strategic expertise, adeptness in high-pressure situations, and commitment to mental health advocacy distinguish her as a trailblazer in the field.

FINALISTS

NOMINEES

Jodi Finn

Rachaell Saunders

Marina Toailoa

Louise Hanna

Eva’s Ridge Enterprises

National Protectives Services

Niamh Cunningham

Christina Rose

Eastern Star International

Nidhi Joshi NAB

Rebecca Townsend

Rebecca Townsend

Anna Dart

Nidhi Joshi

Westpac

Rachaell Saunders

Kate Nilon

NAB

Lacey Shields NDIS Quality And Safeguards Commission

W O M E N I N S E C U R I T Y M A G A Z I N E

Rimplejit Kapil

Kate Nilon Sonya Stephens Jasmin Krapf Jodi Finn

162

Victoria Callaghan Jeevitha Vijayakumar Fariha Uddin Anna Dart Lacey Shields Sermin Cesur

N O V E M B E R • D E C E M B E R 2024

RACHAELL SAUNDERS: AUSTRALIA’S EXEMPLARY LEADER IN PROTECTIVE SECURITY “Winning the Most Outstanding in Protective Security Industry award at the Women in Security Awards is a true honour, and it’s a testament to the hard work and dedication of both myself and my team. Having been in the industry for 40 years, I’ve experienced a wide range of challenges and had the privilege of protecting a diverse array of clients with unique needs. This recognition reflects not just my personal journey but the collective expertise and commitment of my team to consistently deliver outstanding results.

The award has reinforced our reputation in the industry, enhancing opportunities for collaboration and growth. It has inspired my team and me to continue innovating in protective security, ensuring we remain at the forefront of the industry.

Source2Create’s Women in Security Awards are crucial for recognizing the contributions of women in this field. By highlighting our achievements, these awards help empower future generations and showcase the diverse roles women play in driving the security sector forward.”

Rachaell’s journey into the security industry began

half of Melbourne, managing a team of eight

out of necessity at the age of 18 when she took

officers—a remarkable accomplishment in a male-

up what was meant to be just a job to pay the

dominated field.

bills. However, this quickly turned into a career of unparalleled achievement. Early in her career, she

In 1988, at just 20 years old, after undergoing training

faced significant pushback when pursuing a patrol

in defensive tactics and firearms in the USA, Rachaell

officer role, as her company had never had a woman

founded National Protective Services. Though her

in that position. Despite this, Rachaell persevered

expertise was initially in protective services, she

and eventually acquired a patrol franchise covering

recognised the need to diversify her company’s

I S S U E 22

WOMEN IN SECURITY MAGAZINE

163

Long Service Leave Authority (PLSA) highlights her commitment to shaping the future of the security industry and supporting her peers.

She has long been an advocate for fostering collaboration and maintaining strong client relationships, which has been a cornerstone of her business’s success. Her partnership approach is evident in the long-term relationships she has built with clients, such as the City of Port Phillip, which has worked with her for over 36 years. She has become more than just a service provider—she’s a trusted advisor and partner.

Throughout her career, Rachaell has encountered numerous barriers, from facing discrimination as a young woman in a male-dominated industry to dealing with challenging business circumstances like union action and employee theft. However, she has navigated these obstacles with resilience, learning offerings. She expanded into electronic security

valuable lessons along the way. She emphasises

and secured transport, turning her small business

the importance of maintaining financial reserves,

into a comprehensive security provider. Under her

increasing the risk of detection to prevent theft, and

leadership, National Protective Services grew into a

ensuring proper risk management.

nationwide operation with hundreds of employees, serving high-profile clients like the City of Melbourne,

During the COVID-19 pandemic, Rachaell’s leadership

Telstra, Cabrini Hospitals, and the Victorian

was put to the test. National Protective Services

Department of Treasury and Finance.

was tasked with providing large-scale security services for the Department of Health and Human

Rachaell’s leadership goes beyond business

Services (DHHS), quickly ramping up from 30 to

expansion. She consistently strives to improve

1,500 security officers to support public housing,

her expertise, earning multiple qualifications,

hotel quarantine, and emergency response. Despite

including a Master’s in Marketing from Monash

the immense pressure, Rachaell remained focused

University, Certified Protection Professional (CPP),

on the well-being of her staff and clients, providing

and Cybersecurity credentials from HarvardX.

clear communication and stability during an

Her commitment to personal growth and industry

uncertain time.

knowledge is a testament to her drive for excellence.

Rachaell’s passion for supporting disadvantaged

164

One of the most notable aspects of Rachaell’s

communities is another defining feature of her

career is her dedication to giving back to the security

leadership. She developed a program in partnership

industry. She has served as Secretary of the ASIS

with the Salvation Army and Juno to provide

Victorian Chapter and made history as the first

employment opportunities for victims of domestic

female Board member of the Australian Security

violence, covering the costs of their security training

Industry Association Limited (ASIAL), where she

and licensure. This program not only offers flexible

currently serves as Vice President. Her work with

employment but also provides a pathway for

ASIAL and as a Board member of the Portable

survivors to rebuild their lives. This initiative has

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

been praised for its positive social impact, with the

business, and she has a long-standing commitment

Salvation Army and Juno acknowledging Rachaell’s

to providing opportunities for those from

deep commitment to social procurement.

disadvantaged backgrounds.

Rachaell’s accolades are numerous. She was a

Rachaell’s impact on the protective security industry

finalist in the Ernst & Young Entrepreneur of the Year

is undeniable. She is not only a trailblazer but also

Awards, has been featured in national marketing

a mentor, collaborator, and advocate for change.

campaigns, and her company, National Protective

Her contributions to ASIAL and her leadership in

Services, has won multiple awards for customer

National Protective Services have set new standards

service, ethics, and training. The company is also

for excellence in the security field. Her resilience

a certified Women’s Business Enterprise through

in overcoming challenges and her commitment to

WEConnect, further demonstrating Rachaell’s

giving back to both the industry and her community

commitment to diversity and inclusion.

make her a standout leader deserving of Australia’s Exemplary Leader in Protective Security Award.

Rachaell’s leadership style is grounded in her

Rachaell continues to lead by example, proving

operational mindset and her ability to recognise

that success comes not just from professional

and nurture talent within her team. Many of her

achievement but also from lifting others along

employees have worked their way up through the

the way.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

165

CHAMPION OF CHANGE Proudly Sponsored by

Winner

Peter Gigengack WA Department of the Premier and Cabinet, Office of Digital Government He has made great strides in advancing gender equality in cybersecurity. Through mentorship, involvement with AWSN, and dedication to DEI, he has boosted women’s confidence and fostered an inclusive environment. His efforts set a high standard for diversity, making her a true Champion of Change.

Highly Commended

Jakub Zverina CyberCX For your relentless efforts in empowering women and advancing gender equality in cybersecurity, he has led transformative events such as the Protective Security workshop and AWSN career sessions, significantly increasing female participation and fostering lasting change. His mentorship and initiatives have enhanced women’s skills, confidence, and helped create inclusive environments in the industry. His dedication to diversity continues to drive meaningful progress.

FINALISTS Sam Brazier-Hollins Fujitsu

Peter Gigengack

WA Department of the Premier and Cabinet, Office of Digital Government

Ben Doyle Thales

NOMINEES David Geber

Joda Walter

Tom Gregory

David Cowan

Peter Gigengack

Chathura Abeydeera

John Penn

Mike Holm

Raymond Schippers

Sam BrazierHollins

Mark Jones

Dan Goldberg

Jakub Zverina

Jeremy Somers

Kolya Miller Jay Hira John Yates

John Yates Scentre Group

Pooya Khanmohamadi

Jay Hira

Toby Amodio

KPMG

Jakub Zverina

Edward Farrell

Ben Doyle

CyberCX

166

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

PETER GIGENGACK: A TRAILBLAZER IN CYBER SECURITY MENTORING AND ADVOCACY "Being recognised as a champion of change strengthens my determination to understand what’s next and how do we achieve a broader positive impact. I love being able to serve and contribute to the community within cyber security. The AWSN and their mentoring program has provided me with opportunities to channel my energy into building others in such a focused manner. I underestimated what a series of (what appeared to be) small actions and investments into the women in the program would make. It has been rewarding to see the amazing, talented and determined women within the program navigate and succeed in the male dominated security industry.

Two things I’m passionate about being part of mentoring programs such as the AWSN Mentoring program; One, it unlocks mentoring to people at almost any stage in their journey often I’ve seen mentoring programs that are exclusive for more senior leadership. This model creates an inclusive experience and remains accessible due to it being built on the generosity of volunteers; Secondly, I am grateful to not only be able to support growing the future cyber talent and leadership, but also ensure we build an industry that brings together diverse individuals and broad experiences to solve the challenges within cyber. I feel like I’m only just warming up!”

Peter Gigengack, Director of Cyber Security at

security has solidified his reputation as a leader and

Western Australia’s Department of the Premier

innovator in the field.

and Cabinet, Office of Digital Government, is a prominent figure in the cyber security landscape

Peter’s commitment to mentoring and fostering

with over two decades of experience. In his role,

diversity extends beyond his formal role. Within the

Peter spearheads strategic cyber security initiatives

Australian Women in Security Network (AWSN), he

and uplift programs across the Western Australian

has become a pivotal mentor, guiding numerous

public sector, guiding efforts to enhance the region’s

women across Australia to advance their careers in

cyber resilience. His extensive career in IT and cyber

cyber security. His dedication to supporting women

I S S U E 22

WOMEN IN SECURITY MAGAZINE

167

regardless of their background, receive the support they need. This inclusive mindset has led Peter to join ADHD WA as a Board Member, where he advocates for better integration of neurodiverse individuals into the workforce and aims to enhance workplace practices to support this group effectively.

Peter’s initiatives have resulted in tangible and sustainable changes. Within his organisation, his advocacy for mentoring has led to increased adoption of the AWSN Mentoring Program, with more mentors and mentees benefiting from the program’s resources. His leadership has inspired others to participate in mentoring, contributing to a broader culture of support and development within the cyber security industry. Peter’s influence extends beyond his immediate environment, promoting a more inclusive and supportive industry-wide culture.

The success of Peter’s efforts is evident in the positive outcomes experienced by his mentees. Many in the industry earned him the prestigious title of

have gained confidence and advanced their careers

Mentor of the Year in 2023. This accolade reflects his

through his guidance. For instance, his support has

unwavering commitment to advocating for diversity,

enabled several introverted and shy individuals to

equity, and inclusion, and his role as a true Male

attend networking events, leading to job opportunities

Champion of Change.

and career growth. His coaching has also facilitated career advancements and provided valuable insights

Peter’s mentorship is characterised by his proactive

into government recruitment processes.

and impactful approach. He has mentored 14 women through the AWSN program over the past

Peter’s motivation to champion change is deeply

year and currently supports 11 active mentees. His

rooted in his passion for seeing others grow and

efforts have had a profound impact, exemplified

succeed. His dedication to creating meaningful

by his participation in high-profile events and

relationships and fostering an inclusive environment

initiatives. Peter has been a panellist at several key

drives his ongoing commitment to mentoring and

industry events, including the Perth Chapter AWSN

advocacy. Peter believes in the transformative power

International Women’s Day event and the AWSN

of mentoring and strives to model this approach,

Mentoring 2024 launch. His engagement extends

inspiring others to follow suit and contribute to a

to contributing to discussions at the “Mentoring

more diverse and innovative cyber security sector.

Matters” event in Canberra and presenting at AISA Cybercon 2024, where he highlighted the power of

Peter’s role as a mentor and advocate in the cyber

mentoring within the AWSN community.

security industry exemplifies the impact of dedicated leadership and support. His initiatives have not only

168

One of Peter’s most significant contributions is his

uplifted individual careers but have also contributed

commitment to creating a supportive and inclusive

to a broader culture of diversity and inclusion within

environment for neurodiverse and LGBTQIA+

the field. His achievements highlight the significant

individuals. His mentorship approach is rooted in

difference one individual can make in fostering an

empathy and adaptation, ensuring that all individuals,

equitable and supportive professional environment.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

Enabling Fearless Innovation Fostering female talent in cyber security and business resilience – from today’s cyber threats to tomorrow’s opportunities

sekuro.io Australia | Asia | Europe | North America

THE ONE TO WATCH IN PROTECTIVE SECURITY Proudly Sponsored by

Winner

Venessa Ninovic NSW Police Force From criminology to intelligence, she has made strategic contributions to law enforcement in cybersecurity. Her award-winning work, published in international journals and presented at major conferences, highlights her influence in protective security. Despite beginning outside the cybersecurity field, Venessa’s perseverance and innovative contributions, including work on drone security, set her apart as an emerging leader with ambitions to further shape the industry.

Highly Commended

Anastasia Grivas Paramount A rising star in cybersecurity, she is recognized for her expertise in cryptocurrency tracing and played a pivotal role in AFP Operation Nebulae.

She secured a prestigious secondment with CyberCX’s Cyber Intelligence team, where she represented the JPC3 and fostered critical collaborations in the fight against cybercrime. Her contributions mark her as a clear "One to Watch" in protective security.

FINALISTS Felicity Le

Tian Sang

Kessia Packbiers

Felicity Le

Risk & Security Management

Ciara Crimmins

Medha Mishra

Aleen Jumaa

Anastasia Grivas

Maryam Shoraka Laurie Ruymaekers

Shantelle Patturajan

Denise Stojceski

Paramount

Bec Caldwell

Amber Spence

Sandhya Gawali

Anastasia Grivas

Venessa Ninovic

Nievedha Karthikeyan

Amber Spence Insignia Financial

Venessa Ninovic NSW Police Force

Andra Cimpean The Department of the Premier and Cabinet of WA

Ayesha Qureshi NSW Department Of Communities and Justice

170

NOMINEES

W O M E N I N S E C U R I T Y M A G A Z I N E

Anjali Varghese Alexandra Cocks Ayesha Qureshi Paravathy Balachandran Urvu Janani Lyan Aljomeidi

Andra Cimpean

Nirja Mehta Amber Flynn Renae Schilg Nadiya Zacharia Geet Hira

Kirsty Van Den Berg

Ellen Brookes

Taylor Parsons

Carmen Chang

Emily MajorGoldsmith

Beverly Almeida Helen Huban

N O V E M B E R • D E C E M B E R 2024

VENESSA NINOVIC: THE ONE TO WATCH IN PROTECTIVE SECURITY the intelligence world, and it’s clear that her impact

“Being awarded the ‘One to Watch in Protective Security’ at the Australian Women in Security Awards 2024 means so much to me. It is an honour to have been nominated alongside distinguished women in the industry. Having my efforts in the intelligence space recognised, encourages me to continue working hard to achieve my goals. From presenting at conferences, to blogging and creating courses, if one person has learnt something new from my teachings, then all the effort is worth it and I am happy.“

is only just beginning to extend into the broader protective and cybersecurity sectors.

In 2022, Venessa was awarded the prestigious AIPIO Emerging Intelligence Professional of the Year award—an accolade highly regarded in intelligence circles. But her contributions to the OSINT (Open Source Intelligence) community suggest that this recognition should also encompass protective and cybersecurity. Venessa has established herself as a thought leader through her Medium blog, where she regularly shares insights with her growing community on LinkedIn and Twitter. Her work has been published in the International Journal of Contemporary Intelligence Issues, and she has spoken at several key industry events, including AIPIO, BSides Sydney, AWSN Sydney, the OSINT Symposium, and the SANS OSINT Summit. Adding to her accomplishments,

In just a few short years, Venessa has skyrocketed

Venessa developed and published a highly acclaimed

from her criminology roots into the realm of

course on Drone Security and OSINT with DroneSec,

intelligence, making her mark as a standout

which has received stellar reviews from intelligence

figure in protective security. While her current

practitioners in Australia, the United States,

role involves making strategic recommendations

and Europe.

to law enforcement on cybersecurity and online digital threats, it’s her efforts outside the office that

Despite these significant achievements, Venessa’s

have truly propelled her within the industry. Her

journey is only just beginning. Her future career

commitment to giving back by sharing her knowledge

plans and aspirations point to even greater

and experiences has earned her recognition within

accomplishments ahead, and it’s clear she is

I S S U E 22

WOMEN IN SECURITY MAGAZINE

171

172

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

poised to become a key figure in protective security

community informed about the latest developments

and beyond.

in the threat landscape. But it’s her work outside the office that truly showcases her dedication. Venessa

Venessa’s rise to prominence didn’t come without

goes above and beyond to share her research with

its challenges. She began her career in criminology,

the wider security community, recently contributing

working as a Court Officer in the NSW Court

to our last issue of the magazine with an article

system, far removed from the cybersecurity and

targeted at parents, providing practical advice on

intelligence world. However, a chance encounter

safeguarding children’s digital futures. This act

with cybersecurity through an online Capture the

highlights her genuine commitment to making the

Flag event sparked a new passion. She threw herself

online world safer for everyone, not just for personal

into learning about OSINT, its techniques, and the

career advancement.

broader world of intelligence. Despite not having a traditional background in cybersecurity, Venessa’s

Looking ahead, Venessa’s aspirations are focused

persistence and willingness to step outside her

on transitioning fully into the cybersecurity industry

comfort zone have been instrumental in her

as a cyber threat intelligence analyst. With her

success. She actively sought guidance from industry

current skills and experience in intelligence analysis

professionals and embraced networking events,

across both law enforcement and the private

overcoming her initial introverted tendencies to build

sector, she is well on her way to achieving this

meaningful connections. This determination has

goal. She has already mapped out her educational

paid off, propelling her from a beginner to a thriving

path, engaging in self-study through platforms like

intelligence analyst in a demanding field.

BlueTeamLabs and planning to pursue certifications from institutions like SANS. True to her collaborative

Venessa’s influence on the protective security

nature, Venessa intends to document her career

landscape extends well beyond her immediate

growth and share her knowledge with others who

professional responsibilities. Through her blog

wish to make a similar transition. Her goal is to

posts, presentations, and published course, she has

inspire and guide those looking to break into the

fostered global discussions on emerging intelligence

cybersecurity field, just as she has done.

techniques, tools, and insights. Her work on detecting and analysing deepfakes—particularly the methods

Beyond her personal career ambitions, Venessa

she has developed for scrutinising audio, video, and

is also eager to expand her contributions to the

image-based fakes—has been a notable contribution

protective security industry by creating new

to the protective security industry. This expertise has

educational resources. She aims to develop courses

been shared not only through her blog and podcasts

tailored to Australian intelligence practitioners, filling

but also at conferences where she has sparked

gaps in local knowledge that she has identified.

critical discussions on the future of cyber threats.

By offering tools and techniques specific to the Australian market, Venessa hopes to equip her

Venessa continues to demonstrate excellence and

community with the skills they need to stay ahead in

drive innovation in the protective security sector.

an ever-evolving security landscape.

She regularly shares trends and insights with her team, discussing new cyber threats such as

Venessa is undoubtedly a rising star in protective

phishing tactics, deepfakes, and emerging tools

security, and with her relentless drive and forward-

like the Flipper Zero. These conversations are vital

thinking approach, she is well on her way to shaping

to keeping her peers and the broader cybersecurity

the future of the industry.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

173

CONVERGED SECURITY RESILIENCE CHAMPION Proudly Sponsored by

Winner Meg Tapia Novexus She exemplifies exceptional leadership in converged security by bridging cyber and physical disciplines, enhancing resilience against disinformation threats. Her expertise fosters collaboration, strengthens defences, and advances security convergence globally through proactive education and strategic insights.

Highly Commended Sandy Ortmanns University of South Australia For her outstanding leadership in integrating Governance, Personnel, Physical, and Cyber Security at UniSA, her work in developing security training, managing a defence facility, and addressing Foreign Interference and Influence has greatly strengthened UniSA's security culture and resilience. Recognized by key security bodies, her holistic approach ensures continuity and resilience, marking her as a true Converged Security Resilience Champion.

FINALISTS

NOMINEES

Roseline Christopher

Meg Tapia

Sekuro

Sandy Ortmanns University of South Australia

Meg Tapia

174

Sam Moody Mandy Stanbridge Sandy Ortmanns

Novexus

Frances Bouzo

Sammie Yuan

Roseline Christopher

Australian Army

Sammie Yuan

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

CHAMPIONING CONVERGENCE: MEG TAPIA'S VISION FOR INTEGRATED SECURITY IN AN INTERCONNECTED WORLD Meg Tapia, the Managing Director of Novexus,

compromise the safety of critical infrastructure. It’s

is on a mission to reshape how organisations

all about helping people grasp that the boundaries

think about security in our interconnected world.

between online activities and physical security are

Recently recognised with the Converged Security

more blurred than ever.

Resilience Champion award, she’s been making waves in the field by integrating digital and physical

One of the biggest hurdles she faces is breaking

security in innovative ways. With a background

down the siloed thinking that often separates cyber

in foreign policy and national security, Meg leads

and physical security functions. Many organisations

a boutique advisory company that helps clients

still struggle to understand the physical-digital

navigate the ever-changing landscape of national

nexus, which can lead to fragmented approaches

security threats, especially the complex issues

to security. Meg has been proactive in tackling

surrounding disinformation.

this challenge head-on, investing significant effort into communication and education. Thanks to her

What sets Meg apart is her passion for raising

dedication, she’s seen real changes: executives are

awareness about the connections between cyber

starting to identify disinformation as a risk that

and physical security. Through engaging speaker

needs to be on their corporate radar, and analysts

sessions and information-sharing events, she’s

are getting better at spotting and responding to

been tirelessly working to help both corporate

disinformation threats.

and government audiences understand that threats in the digital realm can have serious, real-

Collaboration is at the heart of Meg’s approach.

world consequences. Meg often points out how

She’s made it a priority to bring together teams from

manipulated narratives can spark violence or

both the cyber and physical security domains. By

I S S U E 22

WOMEN IN SECURITY MAGAZINE

175

promoting a more holistic understanding of national

Her expertise hasn’t gone unnoticed on the global

security threats, she’s helped organisations recognise

stage. Meg has been invited to speak at high-

disinformation as a vulnerability that requires

profile events, including the OECD Disinformation

proactive measures. This kind of teamwork leads to

Conference in Paris and the Swedish Defence

more effective incident responses and better overall

Institute’s Cognitive Warfare Symposium. It’s clear

risk management, ultimately enhancing resilience in

that her voice is making a difference in shaping how

an increasingly complex security environment.

we approach security challenges today.

What’s also impressive about Meg is her

In a world where the lines between digital and

commitment to advancing the idea of security

physical threats are increasingly blurred, Meg Tapia is

convergence. She doesn’t just talk about it; she

leading the charge for a more integrated approach to

lives it. By actively participating in conferences and

security. Her work not only highlights the importance

discussions, she shares valuable insights and best

of understanding these connections but also sets a

practices for integrating cyber and physical security.

new standard for resilience in the face of emerging

She believes that collaboration and cross-functional

threats. As she continues to advocate for converged

strategies are essential, and she’s dedicated

security, there’s no doubt that she’s a true champion

to sparking dialogue around the importance of

for innovation in the field.

converged security.

176

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

www.convergint.com/au Be part of a dynamic, cutting-edge team in the Security & AV ecosystem.

YOUR NEXT CAREER MOVE

STARTS HERE! APPLY NOW

CYBERSECURITY CHAMPION Proudly Sponsored by

Winner

Vannessa Van Beek Avanade Her unparalleled mentorship and advocacy for diversity have not only transformed cybersecurity teams but also set new benchmarks for leadership and empowerment in the industry. Through her leadership and advocacy, she has made significant strides in cybersecurity, driving innovation and increasing female representation across various organisations. Her unwavering dedication to promoting diversity and enhancing cybersecurity practices underscores her exemplary role in the industry.

Highly Commended

Jana Dekanovska Crowdstrike As a trailblazer in cybersecurity, she has become a key voice in cyber threat intelligence. Her dedication to advancing the field through education and mentorship has made her a role model, especially for young women.

Through impactful public speaking, she has inspired many and showcased cybersecurity as a rewarding career. Her passion and commitment to empowering others truly exemplify what it means to be a Cybersecurity Champion.

FINALISTS Nivedita Newar

Minya Vasili

Mandy Stanbridge

Amber Wu

UNSW

Hadar Warshitzky

Vicky Sharp

Stephanie Owen

Vannessa Van Beek

Kristina Blazevska

Asou Aminnezhad

Cathy Jenkins

Avanade

Lissette Star

Jennifer Thomas

Kate Glasson

Chantelle Ralevska

Samantha Van Stokrom

The Lottery Corporation

Asou Aminnezhad Microsoft

Jana Dekanovska

178

NOMINEES

Vannessa Van Beek

Kirstie Lemmon

Zian Fernandes

Jana Dekanovska

Gabriela Guiu-Sorsa

Kate Glasson

Crowdstrike

Laura Christie

Karley Donnelly

Shammi Shah

SA Power Networks

Deanne Hoare

W O M E N I N S E C U R I T Y M A G A Z I N E

Naima Hassen

Karley Donnelly Rashmi Bisl Kelsy Zalfelds

Vidhu Bhardwaj

Kat Loaiza Del Pozo

Anna Furlong

Tiana Inman

Brianna Marlow Rujuta Kulkarni Nivedita Newar Annie-Mei Forster Dibya Sinha Harriet Farlow Salma Hamad Eimear Leyne Belinda Noel Shirin Jacobs

N O V E M B E R • D E C E M B E R 2024

VANNESSA VAN BEEK: CYBERSECURITY CHAMPION AND ADVOCATE FOR WOMEN IN TECH and the power of collective action in building a more

“Hearing my name was a whirlwind of emotions. The moment of hearing my name called felt like time stood still. Like the phoenix, I’ve faced challenges and setbacks, each time rising stronger. The award felt like a celebration—not just of my work, but of the entire cybersecurity community and the people who have supported me along the way. It’s a moment I’ll carry with me, a reminder of the power of perseverance, growth, and the ability to rise."

inclusive and diverse cybersecurity field.

Her dedication to transforming security operations is evident in her leadership and initiatives. Vannessa managed a Security Operations environment protecting 20 Australian organisations for three years post-COVID, witnessing firsthand the toll chronic stress takes on professionals in this high-pressure field. From a colleague who worked 700 hours over two months during a cyber incident to security professionals grappling with health issues like migraines, sleep deprivation, and even life-altering diagnoses, Vannessa saw the hidden human stories behind cybersecurity. These experiences shaped her mission to prioritise the mental and physical wellbeing of those working in the field.

Vannessa Van Beek’s advocacy for gender diversity in cybersecurity has led to a transformative shift

To combat this, Vannessa has championed the

at the ASIA PerthSec conference, resulting in a

use of AI and automation in Security Operations

marked increase in women speakers. Her impactful

Centers (SOCs), creating environments that

talks and publications explore the intersection of

are both effective and sustainable. Her work in

psychology, wellness, AI security, and cybersecurity,

maturing threat detection capabilities reduced the

enriching the industry’s understanding of how these

corporate risk profile of over 20 critical operations

elements intertwine. Through her efforts, Vannessa

organisations across Australia, serving sectors like

has demonstrated the importance of representation

law enforcement, education, and healthcare. By

I S S U E 22

WOMEN IN SECURITY MAGAZINE

179

led to engaging over 1,400 IT professionals, fostering a culture where security was prioritised across organisations.

Vannessa’s influence extends into securing the design of technological solutions. She led a change program at Avanade Australia, ensuring that security was integrated into every solution delivered across domains like modern work, cloud, ERP, and AI. By embedding baseline controls, secure coding practices, and rigorous testing into every application, Vannessa ensured that these solutions were built to withstand cyber threats from the ground up. Her involvement in deal reviews and direct leadership with solution architects solidified security’s role early in the design and build process, an approach that has become a model for security-first thinking in the industry.

One of Vannessa’s most forward-thinking contributions has been her work in integrating AI and automation into security operations. As part of Microsoft’s early access program for Copilot for Security, she designed a Minimal Viable Product offer that integrates generative AI into SOC workflows. By modernising the top three runbooks used in incident response, she reduced execution time from three hours to six minutes, demonstrating the power of AI in easing the burden on security professionals.

The pilot program, which Vannessa helped shape, is set to expand globally, offering transformative capabilities to SOCs worldwide. Her leadership in this area highlights the potential of AI to not only enhance security defences but also improve the quality of life for those working on the front lines of cybersecurity. testing rules, addressing gaps in the Mitre ATT&CK framework, and implementing additional global rules,

Despite these successes, Vannessa has faced

her team improved threat protection coverage by

significant personal and professional challenges.

40%, a significant advancement given the wave of

Feelings of imposter syndrome, unconscious bias,

cyberattacks during that period.

and the tragedy of losing two family members to violence shaped her journey. As the only woman in

180

Beyond threat detection, Vannessa amplified security

many security risk discussions, she has encountered

awareness by leading her team to publish over

microaggressions, such as being excluded from

100 advisories for Security Operations customers,

informal networks or interrupted during meetings.

ensuring these were actioned by on-site teams.

Yet, Vannessa has transformed these experiences

Her belief that “security is everyone’s business”

into opportunities for advocacy and mentorship.

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

She is known for her “Assume she is technical and

Her impact on the cybersecurity industry is

capable of breathing fire” T-shirts, which empower

undeniable. From her technical expertise in maturing

her female technical leads and challenge stereotypes

threat detection and integrating security into every

with humor and passion. By nurturing others and

facet of operations to her innovative approach in

building inclusive environments, she has become a

using AI to transform security workflows, Vannessa

leader who champions underrepresented voices and

is a trailblazer in her field. Her ability to balance

ensures that all team members feel valued.

technical excellence with a focus on people— mentoring the next generation of cybersecurity

Vannessa’s leadership style is grounded in empathy,

leaders, advocating for mental health, and fostering

resilience, and empowerment. Her integration of

inclusive work environments—sets her apart as a

Brene Brown’s “Dare to Lead” principles has shaped

visionary leader.

a team culture where individuals are encouraged to take on challenges, grow in their roles, and pursue

In a field often defined by the relentless pace

their career aspirations. Through mentorship

of change, Vannessa Van Beek stands out for

programs like the Microsoft Women Rising initiative,

her commitment to sustainability, diversity, and

Vannessa has guided over 50 women, many of whom

innovation. Her work is not only about improving

have achieved significant career advancements

security systems; it’s about building a future where

under her leadership.

the people behind those systems can thrive.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

181

MOST INNOVATIVE EDUCATOR IN CYBERSECURITY Proudly Sponsored by

Winner

Emma Kirby Macquarie Group She has transformed cybersecurity education, emerging as a thought leader with persona-based training and large-scale events engaging over 6,000 staff members. Her initiatives, including partnerships with digital education programs, have reduced phishing click rates and boosted reporting. By using AI for personalised learning and expanding cyber awareness, she ensures education remains inclusive and adaptable to evolving threats. She is truly an innovative educator.

Highly Commended

Cybermarvel NSW Department of Education Cybermarvel program is leading the way in online safety and cybersecurity education in primary schools across Australia while inspiring high school students through career initiatives that address the cyber skills shortage early on. Through diverse resources, virtual classrooms, lesson plans, and teacher training for Safer Internet Day and Cyber Security Awareness Month, Cybermarvel is making a significant impact in raising cybersecurity awareness among students, staff, and parents.

FINALISTS

NOMINEES

Reema Roche

Cybermarvel

Dr Sarah Bennett

Linda Li

Cloud Security Alliance

NSW Department of Education

Reema Roche

Hannah Gately

Cybermarvel from NSW Department of Education

Phriendly Phishing

Hannah Gately Cyber Security NSW

Laura Christie Bupa

Linda Li Tesserent

Emma Kirby Macquarie Group

Caitriona Forde

Abed Hamdan

Melanie Youngson

Nivedita Newar

W O M E N I N S E C U R I T Y M A G A Z I N E

Laura Christie

Emma Kirby Caitriona Forde

Cait Cyber Safe

CyberCX

182

David Lee

Chantelle Ralevska

Solange Fecci Melanie Youngson

N O V E M B E R • D E C E M B E R 2024

EMMA KIRBY: TRANSFORMING CYBERSECURITY EDUCATION WITH INNOVATION AND IMPACT audience. She doesn’t just focus on formal training

"I’m honoured to have won the award for “Most Innovative Educator in Cybersecurity”.

I’m very thankful for all the support I’ve received throughout my career, from my incredible female role models to the male champions of change. I’m also really proud to work at Macquarie Group who is truly committed to diversity, equity and inclusion."

but incorporates hands-on, practical experience that staff can apply in their daily roles. One standout example is the customised persona-based training which personalises education based on individual needs. This level of customisation, informed by a PhD research study, ensures that each team member—from interns to directors—gets the specific cybersecurity knowledge they require.

Emma is a firm believer in making cybersecurity accessible to all, and her efforts in outreach reflect that. From educating not-for-profit organisations

Emma Kirby’s recognition as the Most Innovative

to sponsoring university programs, Emma has

Educator in Cybersecurity at the Australian Women in

been pivotal in raising cybersecurity awareness

Security Awards is well-deserved. As the leader of the

and fostering new talent. One of her proudest

Cyber Strategy & Culture team at Macquarie Group,

achievements is her involvement in Macquarie’s

Emma has consistently pushed the boundaries of

sponsorship of ySafe’s Digital Experts Academy,

what cybersecurity education can be, both within

which has reached 133 schools and over 3,600

her organisation and in the wider community. Her

students, equipping young people with essential

forward-thinking approach has transformed how

digital safety skills.

cybersecurity awareness is delivered, combining her passion for inclusion and education with cutting-

Emma has also spearheaded the growth of

edge technologies and initiatives.

Macquarie’s annual CyberSafe Week, a global event open to its 20,000 staff. She has expanded

Over her three years at Macquarie, Emma has taken

participation with a range of external experts and

a holistic approach to cyber education, integrating

thought leaders, engaging staff on emerging threats

innovative learning programs tailored to her

and helping colleagues learn something new about

I S S U E 22

WOMEN IN SECURITY MAGAZINE

183

cybersecurity - a testament to Emma’s ability to make

Looking ahead, Emma is focused on continuing to

complex topics engaging and accessible.

push boundaries in cybersecurity education. She sees the growth of AI as a significant opportunity

Emma's educational efforts are designed for a

to further personalise training, offering tailored,

diverse range of audiences, from specialists to

real-time feedback to employees to keep their skills

the general public. She has delivered cyber safety

sharp. She’s also passionate about expanding

sessions for parents and carers, equipping them with

cybersecurity knowledge beyond traditional corporate

tools to help their children navigate the online world

environments, believing that a more informed society

safely. She’s also engaged with universities, and ran

will ultimately lead to safer communities.

a Capture the Flag competition, helping students explore careers in cybersecurity in an interactive and

In every way, Emma’s work embodies the innovative

rewarding way.

spirit that earned her this prestigious award. She’s not just educating; she’s transforming how people

Collaboration is at the heart of Emma’s work. She

think about and engage with cybersecurity, ensuring

has formed partnerships with organisations like

that knowledge is shared broadly and inclusively

the Cyber Leadership Institute and the Australian

across the industry and community. As the

Women in Security Network to create professional

landscape of cyber threats evolves, Emma’s agile and

development opportunities for emerging talent.

creative approach will no doubt continue to inspire

Emma also supports not-for-profits by holding

and protect.

cyber safety sessions, helping them build in-house awareness programs to mitigate risk.

“Starting my career as a graduate, I was fortunate to have talented women mentors, which boosted my confidence and career growth, and helped me create impactful services in Cybersecurity.”

Jillian Lum Senior Manager, Cybersecurity at Macquarie

Find out more at macquarie.com/careers

184

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

UNSUNG HERO AWARD Proudly Sponsored by

Winner

Shyvone Forster Department of Home Affairs For her extraordinary contributions to cybersecurity through her leadership in designing and managing security operations centres and pioneering key initiatives. Her proactive and innovative approach has greatly strengthened critical infrastructure. Her dedication to mentoring, commitment to diversity, and resilience in a demanding industry set her apart as a true leader. Beyond enhancing security measures, her influence has nurtured the growth of many young professionals, leaving a lasting impact on the cybersecurity field.

Highly Commended Nikola Orgill Deloitte As a former professional footballer turned cybersecurity leader, she stands out for her innovative problem-solving skills, commitment to mental health and work-life balance, and advocacy for gender diversity in tech. His impactful transition into cybersecurity, leadership in Crisis and Resilience, and dedication to fostering a supportive work environment highlight his status as an Unsung Hero.

Special Recognition Karen Sullivan Northern Beaches Council For her exceptional work in IT infrastructure, including proactive security measures, mentoring her team, and advocating for diversity and inclusion, she has made significant contributions to the cybersecurity field. Her efforts in reducing incidents and enhancing security highlight her impactful role in the industry.

186

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

UNSUNG HERO AWARD Proudly Sponsored by

FINALISTS Danielle Rosenfeld-Lovell Telstra

Nikola Orgill Deloitte

Julie Priest Solis

Shyvone Forster Department Of Home Affairs

Sheavy Kaur Royal Air Force Association

Karen Sullivan Northern Beaches Council

Bharathi Anagha Coles Group

NOMINEES Alison Gunn

Angie Murray

Nicole Murdoch

Abby Taleppadi

Nicole Stephensen

Reshmi Devi

Danielle Rosenfield-Lovell Sheavy Kaur

Ambiy Rajeswariamma

Tenille Verrier

Kate Buskes

Pranali Mandewalkar

Margaret Ornsby

Sulata Bhattacharjee Karen Sullivan Radha Ramadev Michelle Gatsi Ellie Samadzadeh Daniela Koulikov Emily Borgo Saleshni Sharma Mary Tokic Julie Priest Tanu Bains

I S S U E 22

Christelle De Lavigne

Bharathi Anagha Natasha Steele Naima Hassen Shyvone Forster Kate Ellis Juliana Bachtold Irene Robinson Angela Champion Urvi Janani Nitharsha Vanatheva Nikola Orgill

WOMEN IN SECURITY MAGAZINE

187

SHYVONE FORSTER: THE UNSUNG HERO OF CYBERSECURITY

lasting impact on government departments and the

Receiving the Unsung Hero award is deeply meaningful after more than 20 years in cybersecurity, often as the only woman in the room. This recognition reflects not just my personal journey, but also the privilege of mentoring others and watching their passion for cybersecurity grow. It symbolizes resilience, progress, and the joy of helping shape the next generation in this field I love. I am truly honoured and humbled by this recognition."

broader security sector.

What sets Shyvone apart is her genuine passion for understanding complex challenges and forging ahead with a clear vision and a courageous mindset. Her communication style—clear, warm, and engaging—has inspired countless others along the way. Whether she’s rallying her team behind a shared vision or guiding individuals through tough times, Shyvone has a unique talent for bringing out the best in those around her. She has consistently demonstrated her commitment to fostering a supportive, energised team environment, where everyone feels empowered to stretch, grow, and challenge themselves. Her leadership is grounded

Shyvone Forster is a true trailblazer in the world of

in a thoughtful balance of calculated risk, sound

cybersecurity. Her journey through the IT security

business judgement, and technical expertise, making

industry, and its evolution into the cybersecurity

her a standout figure in the industry.

sector as we know it today, is marked by her

188

relentless drive to challenge the status quo and

Shyvone’s ability to lead through collaboration is

reshape the way the industry approaches security.

one of her most defining traits. She regularly leads

From spearheading the transformation of “Trusted

workshops, engages with vendors, and participates

Access” models to the innovative “Zero Trust”

in cybersecurity promotional events, all while

framework, Shyvone has been at the forefront of

advocating for increased training and employment

revolutionary change. Her work in establishing Cyber

opportunities in the sector. Her commitment to

Security Operations Centres in two of Australia’s

nurturing the growth of her team and colleagues

most respected federal agencies, as well as her

is unwavering. She has become a popular mentor,

efforts in positioning cybersecurity policy and

particularly to cadets, graduates, and new starters,

advisory teams as key centres of influence, has left a

due to her skill in breaking down complex concepts

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

and translating them into actionable plans. Her mentorship has left a lasting impact on those she’s worked with, from young professionals to seasoned veterans.

Of course, no journey to success is without its challenges, and Shyvone has faced her share of obstacles. Whether it’s managing conflict, competing for limited resources, or influencing key decisionmakers, she has always navigated these hurdles with integrity and resilience. In a fast-paced, competitive industry where resources and recognition are highly sought after, Shyvone has remained steadfast in her values. She has shown remarkable strength of character, staying true to her principles while driving difficult projects to completion. Her ability to balance the demands of a competitive environment while maintaining harmony within her teams has been instrumental in her continued success.

Shyvone’s achievements have not gone unnoticed.

She is widely recogniSed as an early leader in identifying emerging cybersecurity technologies and approaches, setting up and managing Cyber Security Operations Centres, policy and governance

law, and business management, Shyvone brings

frameworks, and digital forensic investigative

a unique and well-rounded perspective to her

capabilities in several of Australia’s most respected

leadership in cybersecurity. Her ability to integrate

federal government agencies. Beyond her work

knowledge from these various fields into her work

in these technical areas, Shyvone has become a

makes her a truly innovative leader.

respected voice in the cybersecurity community, regularly speaking at industry events and career

Ultimately, it is Shyvone’s authenticity, adaptability,

roadshows, where she advocates for cybersecurity

and forward-thinking leadership that sets her apart

career pathways and employment opportunities. Her

from others in the industry. Over the past 15 years,

dedication to sharing her knowledge and promoting

she has led transformative changes that have had

the industry is just another example of her passion

a profound impact on both government operations

for fostering growth and innovation.

and the cybersecurity sector as a whole. Her ability to navigate change, inspire others, and maintain a

For Shyvone, cybersecurity is not just a career—

clear focus on achieving successful outcomes has

it’s a calling. Her passion for the field is evident

made her an indispensable leader. Shyvone’s tenacity,

in everything she does. It’s fueled by her deep

positive outlook, and unwavering commitment to

curiosity, her desire to explore uncharted territories,

her team and her work have made her a deserving

and her determination to break new ground. She is

recipient of this year’s Unsung Hero Award. Her

never deterred by challenges or the fear of trying

contributions to the field of cybersecurity are nothing

something new. In fact, it’s this willingness to take

short of remarkable, and her legacy of excellence

bold steps that has defined much of her career.

continues to inspire all who have had the privilege of

Drawing on her diverse background in engineering,

working with her.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

189

NEURODIVERSITY IN CYBERSECURITY EXCELLENCE CHAMPION Proudly Sponsored by

Winner

Cayley Wright Deloitte Her advocacy for neurodiversity in cybersecurity drives inclusion and equity within her organisation and beyond. She champions equitable practices and leads initiatives like the cadet program, opening doors for neurodivergent individuals. Her advocacy, public speaking, and mentoring efforts have fostered a more inclusive environment, empowering others to thrive. Through her leadership, she has successfully integrated neurodivergent talent and inspired change, making her a very deserving recipient of this award.

FINALISTS

NOMINEES

Angela Champion

Mina Zaki

White Rook Cyber

Claudia Foley Tesserent Cyber Solutions By Thales

Cayley Wright

Angela Champion Cayley Wright Claudia Foley

Deloitte

Mina Zaki KPMG

190

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

CHAMPIONING INCLUSION: CAYLEY'S IMPACT ON NEURODIVERSITY IN CYBERSECURITY engagements, panel discussions, or day-to-day interactions, Cayley shares personal stories that resonate deeply with her audience. Her openness about her own neurodivergence encourages others to acknowledge their challenges and seek the support they need. One particularly poignant story involves a colleague who felt overwhelmed by his inability to start tasks. Cayley, drawing on her experience with ADHD, offered practical advice that shifted his mindset and gave him the tools to manage his work more effectively. This is just one example of The inaugural Neurodivergent in Cyber Champion

how Cayley makes a difference, not only by offering

Award couldn’t have found a more fitting recipient

solutions but by showing that success is possible,

than Cayley, whose tireless advocacy and hands-

even in the face of cognitive hurdles.

on initiatives have created a lasting impact both within her organisation and the wider cybersecurity

As an Inclusion and Diversity Talent Officer, Cayley

community. Cayley is not just a leader in name; she

has championed neurodivergent-friendly policies and

actively embodies the principles of inclusion and

practices within Deloitte. She has been instrumental

equity, particularly for neurodivergent individuals. Her

in shaping the company’s recruitment and hiring

work has revolutionised the way Deloitte approaches

processes, making them more equitable for all. Her

diversity, ensuring that everyone, regardless of

work in this area ensures that Deloitte’s approach to

cognitive differences, has the opportunity to thrive

talent acquisition is inclusive, giving neurodivergent

and succeed.

individuals a fair shot at success. She has also led the cadet program, which opens doors for

Cayley leads by example, fostering understanding

neurodivergent individuals to enter the cybersecurity

and acceptance in every environment she

field, a sector that can often feel daunting and

touches. Whether it’s through her public speaking

exclusive. Under Cayley’s leadership, this program

I S S U E 22

WOMEN IN SECURITY MAGAZINE

191

has not only provided valuable career opportunities

panels and sharing her insights on neurodivergence.

but also highlighted the unique strengths that

Her contributions have helped raise awareness about

neurodivergent individuals bring to the table.

the challenges and opportunities neurodivergent individuals face, furthering the dialogue on

Cayley’s influence extends beyond policy; her

inclusivity in cybersecurity and beyond. Through

mentorship is equally transformative. She provides

these engagements, she is not only advocating for

one-on-one mentoring to neurodivergent individuals,

systemic change but also educating others, ensuring

ensuring they feel valued and supported in their roles.

that neurodivergent individuals are recognized and

Her approach creates a safe space where people

valued for their contributions.

can discuss their needs without fear of judgement, which fosters an environment where everyone feels

What makes Cayley truly deserving of this award is

they belong. This level of care and attention has been

the scale and difficulty of what she has achieved.

particularly impactful in fields like cybersecurity,

Changing entrenched practices and attitudes within

which can be fast-paced and demanding. Cayley’s

an organisation, especially in an industry as fast-

mentees, many of whom have transitioned into

paced and demanding as cybersecurity, is no small

permanent roles, often credit her with giving them

feat. Yet, Cayley has done just that, paving the

the confidence and tools they needed to excel.

way for neurodivergent individuals to feel included and empowered. Her leadership, innovation, and

Her leadership goes even further with her innovative

unwavering commitment to equity have created a

‘ways of working’ discussions. At the start of every

ripple effect that will continue to influence Deloitte

project, Cayley ensures that team members are

and the broader industry for years to come.

given the opportunity to express their preferred working styles. This simple but effective initiative

There is no slowing down for Caley, she remains

has allowed neurodivergent employees to work in

deeply committed to fostering a more inclusive

ways that best suit their needs, whether that means

future for neurodivergent individuals. Her advocacy,

flexible hours, remote work, or accommodations that

mentorship, and leadership are a testament to her

help them perform at their best. Her approach is a

belief that everyone, regardless of their cognitive

testament to her understanding of the diverse ways

differences, deserves a place at the table. For these

in which neurodivergent individuals operate, and her

reasons, Cayley is not just a deserving recipient of

commitment to fostering a supportive and inclusive

the Neurodivergent in Cyber Champion Award—she

work environment.

is an inspiration to all who strive to create a more inclusive and equitable world.

Cayley’s work has had tangible outcomes.

Neurodivergent individuals who have gone through Deloitte’s cadet program and benefited from her mentorship have flourished, not only in their roles but also as contributors to the cybersecurity industry.

They bring fresh perspectives and unique problemsolving abilities, enriching their teams and the projects they work on. The success stories that have emerged from these programs are a direct result of Cayley’s dedication to inclusion and her belief that everyone deserves the chance to shine, regardless of their cognitive differences.

Her impact reaches beyond Deloitte as well. Cayley regularly participates in industry events, speaking on

192

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

PROTECTIVE SECURITY CHAMPION Proudly Sponsored by

Winner Nadia Hammoud NBN Co For her leadership in advancing gender equality and enhancing safety in protective security, her innovations, including a welfare check app and a domestic violence policy, highlight her dedication to empowering women and non-binary individuals. Her resilience and impactful leadership exemplify the positive change she brings to the field, establishing her as a remarkable leader whose approach should be emulated across the industry.

FINALISTS

NOMINEES

Asou Aminnezhad

Anonymous (Westpac Group)

Microsoft

Nadia Hammoud NBN Co

Anonymous

Priya Eluru Asou Aminnezhad Nadia Hammoud

Westpac Group

Priya Eluru Avanade

I S S U E 22

WOMEN IN SECURITY MAGAZINE

193

EMPOWERING CHANGE: NADIA HAMMOUD'S JOURNEY AS A PROTECTIVE SECURITY CHAMPION Nadia Hammoud is not just a name in the protective

the Assistant Commissioner of Police to develop

security industry; she’s a force for change. As the

a mentoring program for women in policing. This

winner of the Protective Security Champion award,

initiative promoted not only career development and

Nadia has made it her mission to support and

upskilling but also created events that catered to

empower women and non-binary individuals in an

women’s needs.

industry that has often struggled with diversity and inclusion. Her dedication and passion shine through

Nadia’s impact extends beyond formal programs.

her work and the initiatives she champions.

She actively engages with women in policing, eager to listen to their stories and provide support. She

Nadia currently links the crucial roles of cyber and

particularly enjoys helping those who are considering

operations in a converged security function, which

a transition from policing to corporate roles, offering

integrates physical, personnel, and IT security under

assistance with resume building and job interview

a shared accountability to the Chief Security Officer.

techniques. For Nadia, it’s about making the journey

Her career has been marked by a commitment to

smoother for those who follow in her footsteps.

creating pathways for others, particularly those who face systemic barriers.

One of her most innovative contributions is the development of an app designed to enhance the

194

One pivotal moment in her journey came when she

safety and well-being of field engineers at nbn.

decided to channel the bias and discrimination

Traditionally, these engineers would receive multiple

she encountered into actionable change. After

welfare check calls throughout their shifts, often

experiencing challenges in her career, she became

concluding with a late-night call to confirm their safe

involved with the Victorian Equal Opportunity and

arrival home. This process was not only disruptive

Human Rights Commission (VEOHRC) to address

but could lead to delays in communication. Nadia’s

gender equality at Victoria Police. As the Chair of

app allows engineers to log off securely and notify

the committee overseeing the VEOHRC review

the security team that they made it home safely,

recommendations, Nadia took ownership of the

without the need for a late-night phone call. One

process and budget. She collaborated closely with

engineer even called the program an “absolute

W O M E N I N S E C U R I T Y M A G A Z I N E

N O V E M B E R • D E C E M B E R 2024

lifesaver,” highlighting how practical solutions can significantly impact employees’ lives.

Nadia’s work doesn’t stop there. She has been instrumental in developing a domestic violence policy for women and non-binary staff at nbn. Following a distressing incident involving a female field worker, she conducted a detailed Security Risk Assessment and pushed for a personal duress alarm system. This initiative is currently being trialed, demonstrating her commitment to creating a supportive environment for all employees.

What drives Nadia is a deep-rooted belief in being a “power for good.” She reflects on her career and emphasises the importance of not accepting the status quo. Instead, she advocates for positive change, ensuring that the barriers she faced do not hinder others. Even after leaving the police force, her legacy lives on through the continued success of her programs, which empower countless women and promote a more inclusive environment.

Throughout her journey, Nadia has faced her share of challenges, including racism and discrimination.

She recalls an instance during her career when a colleague made a derogatory joke about her ethnicity, but rather than allowing that to define her, she transformed her anger into advocacy for change. Her resilience and determination to make a difference set her apart as a true change champion.

As she continues her work at nbn, Nadia remains passionate about the future of diversity in the protective security industry. She envisions a landscape where diverse voices are not only welcomed but celebrated, ensuring that everyone can reach their full potential.

Through her tireless efforts and unwavering commitment, Nadia Hammoud is not just breaking down barriers—she’s paving the way for a brighter, more inclusive future in the protective security sector.

Her journey is a powerful reminder that change is possible when we dare to speak up and take action.

I S S U E 22

WOMEN IN SECURITY MAGAZINE

195

9 OCT 2025