Women in Security Magazine Issue 30

30

MAY • JUNE 2026

DISABILITY INCLUSION: SEEING DIFFERENCE AS STRENGTH P8

YOUTH-LED CO-CREATION: THE NEXT WAVE OF SECURITY THINKING P30

SUPPLY CHAIN DATA BREACHES AND WHAT YOU AS AN INDIVIDUAL CAN DO P14

SAFE KIDS, STRONG COMMUNITIES: WHY CHILD PROTECTION IS A SOCIAL ISSUE, NOT JUST A FAMILY ONE P72

W W W. W O M E N I N S E C U R I T Y M A G A Z I N E . C O M

FROM THE PUBLISHER

F

resh off the back of an Easter long

to be managed. Youth‑led Co-creation brings

weekend, I’ve been thinking about bridges.

together high school teams, student collectives and

Not the steel and cable kind, but the ones

early‑career builders reshaping cyber from the ground

we build between people, stories and

up. Their ideas may be raw, but their clarity about the

sectors. The quiet, often unseen, work of

future of online safety is unmatched.

connecting worlds that don’t always speak the same language, but clearly share the same mission: safety,

And in Empowering Children & Parents in

trust and inclusion.

Cybersecurity we’re reminded that security starts long before job titles. Through family‑focused workshops,

This edition of Women in Security is a celebration

digital safety storytelling and community‑scaled

of those bridge builders. Individuals, teams and

campaigns, women are designing frameworks that

organisations who aren’t just leading in their own

turn fear about online risks into confidence, curiosity

lanes, but linking industries, philosophies and

and shared responsibility.

generations in ways that reshape what leadership looks like in security. They’re creating networks where

We’re also delighted to hear from our regular

cross‑pollination isn’t an afterthought, it’s the point.

columnists, including Mandy Turner, Craig Ford, Lisa Rothfield‑Kirschner, Madhuri Nandi and Karen

In Disability Inclusion we reframe what accessibility

Stephens. They’re joined by: Jay Hira, reflecting on

means in practice, spotlighting innovators designing

strength, belonging and the responsibility that comes

adaptive technology and workplaces that recognise

with leadership; Adriana Jones, who builds a bridge

neurodivergence as creative capital, not a problem

between cybersecurity, children and parents; Jo Stewart‑Rattray, who asks why security needs more

2

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

Abigail Swabey

people who connect the dots; Lisa Ventura, exploring

those who construct the bridges. Welcome to the

the convergence of AI and cybersecurity; Marina

women and men who are building the next chapter of

Toailoa, on safe kids and strong communities; and

security, together.

Simon Carabetta, with a serendipitous insight that lands in just the right part of the issue.

Throughout these pages you’ll meet Eloise Taylor, Pooja Agrawal, Chinenye V Ugochukwu, Deveka

Abigail Swabey PUBLISHER, and CEO of Source2Create

Lingam, Adeola Odunlade, Malini Rao, Dr Margarita Bel, Natasha Garner, Aleyna Doğan and Shivani Bhavsar as they share their journeys into security.

You’ll also hear from students Jerica Macaraeg, Lindsay Coudert, Nataliah Alcala‑Maharaj, Akshaya

www.linkedin.com/in/abigail-swabey-95145312

aby@source2create.com.au

Sridharan, Ishrat Qureshi and Nokutendaishe Masuku whose voices help shape the future of the field.

This is, in many ways, a bridge‑building issue; not just about the people who cross the chasms, but also about

I S S U E 30

WOMEN IN SECURITY MAGAZINE

3

CONTENTS

2

COLUMN

FROM THE PUBLISHER

Supply chain data breaches and what you as an individual can do 14 Cyber Unicorns – driving change from day one

46

Navigating the digital playground to make it a magical, but mindful, experience 78

DISABILITY INCLUSION: SEEING DIFFERENCE AS STRENGTH

8

The work that connects us: Building bridges through real cybersecurity leadership

88

INDUSTRY PERSPECTIVES Why security needs more people who connect the dots

50

Mental reset: reclaiming mind, heart and body as a woman in security 54 The convergence bridge: why AI and cybersecurity can no longer exist in separate silos

58

Bridge over troubled water

62

If doors won’t open, build the bridge together

66

Bridging the cybersecurity gap: protecting the most vulnerable in a digital world 68

WHAT’S HER JOURNEY? Deveka Lingam

18

Shivani Bhavsar

20

Aleyna Dogan

24

Adeola Odunlade

26

Pooja Agrawalla

36

Dr. Margarita Bel

38

Eloise Taylor

40

Chinenye V. Ugochukwu

42

Safe kids, strong communities: why child protection is a social issue, not just a family one

72

Grad Girls Sydney: a program to inspire

76

YOUTH-LED CO‑CREATION: THE NEXT WAVE OF SECURITY THINKING

123 THE LEARNING HUB 126 JOB BOARD

30

MAY • JUNE 2026

CAREER PERSPECTIVES The movement reshaping Australia’s cyber workforce and why women are central to it 82

Support the Future of the

AUSTRALIAN WOMEN IN SECURITY AWARDS

®

We need your support to continue this important initiative into its 8th year.

FOUNDER & EDITOR Abigail Swabey

ADVERTISING Abigail Swabey Jane Saafi

SURFING THE NET 116

The 2026 Awards will be hosted in Melbourne. To ensure this initiative continues, we invite you to partner with us as a sponsor.

ONSORSH

I

Packages ava ilable from $6,000 to $50,000 Custom packa ges tailored to your organisa tion’s needs

PP

O

Your sponsorship will help us continue to celebrate and elevate the achievements of women in security across Australia.

SP

P

JOIN US IN MELBOURNE FOR 2026

ORT

U NIT

IE

S

M A G A Z I N E C O O R D I N ATO R Jane Saafi

JOURNALISTS Stuart Corner

110

To discuss how you can support and sponsor next year’s awards, please reach out to Aby at Aby@source2create.com.au.

We look forward to partnering with you to make the 2026 Australian Women in Security Awards our best yet.

SUB-EDITOR Stuart Corner

DESIGNER Rachel Lee

STUDENT IN SECURITY SPOTLIGHT

TURN IT UP 118

Lindsay Coudert

92

Nataliah Alcala-Maharaj

96

Nokutendaishe Masuku

102

Jerica Macaraeg

106

Source2Create Pty Ltd is the publisher of this magazine and its website (www.womeninsecuritymagazine.com).

©Copyright 2025 Source2Create. All rights reserved.

Reproduction in whole or part in any form or medium without express written permission of Source2Create is prohibited.

OFF THE SHELF 120

ASSOCIATIONS & GROUPS SUPPORTING THE WOMEN IN SECURITY MAGAZINE

Thank You

TO OUR SUPPORTING ASSOCIATIONS

ABIGAIL SWABEY

KATIE WILSON

DISABILITY INCLUSION: SEEING DIFFERENCE AS STRENGTH

by Abigail Swabey, Publisher of Women in Security Magazine and Katie Wilson, Head of Marketing and Communications at Australian Disability Network

We talk a lot about resilience in security; the systems that keep running when everything around them breaks.

But resilience isn’t just a design principle, it’s a human one. If you want stronger teams, start by looking at how they include differences, not how they flatten them out.

D 8

isability inclusion used to live in the

It’s a bit like a code review. The bug you find when

compliance binder. Accessibility policy?

testing an edge case often reveals something

Tick. Closed captions? Tick. Ramp?

bigger about the whole system. Inclusion works the

Tick. Those things aren’t unimportant,

same way.

but they’re not the point. What’s shifting

now, slowly but surely, is a move from helping to

I’ve met developers shaping authentication tools

listening. Accessibility is not charity. It’s design.

with visual prompts for people who struggle with

When you make things easier for people who process

memory recall. It turns out, most users love them.

or interact differently, you usually make them easier

I’ve met managers trialling quiet zones because

for everyone.

open‑plan chaos burns everyone out. I’ve met trainers

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

F E A T U R E

rewriting content into audio or visual formats because

response processes designed so that someone who

attention works differently across different brains.

communicates differently can contribute fully, not

These aren’t ‘special conditions’. They’re smart

just be present? These are the kinds of practical

adjustments that make the workplace more human.

barriers that determine whether someone can do their job well.

FROM POLICY TO PRACTICE I sat down with Katie Wilson, Head of Marketing and

IBM, one of The Australian Disability Network’s

Communications at Australian Disability Network,

(AusDN) founding members, offers a strong example.

who has recently also taken on responsibility for

It has run a formal neurodiversity program since

technology, to ask: when you think about disability

around 2015, covering hiring, onboarding and

inclusion in security, what does it actually look like in

ongoing support. It stands out as being very practical:

practice, beyond policy and compliance?

clear, simplified instructions through internal tools, noise‑reduction solutions, flexible onboarding and

“Disability inclusion in security looks much the same

AI‑based tools that represent complex information

as it does in any other function,” Katie says. “It comes

in simpler formats. Over 13,000 employees have

down to whether an employee is genuinely set up to

completed neurodiversity acceptance training.

succeed in their role. That means clear expectations

The program spans cybersecurity, AI, data analysis

and the right tools and environment to meet them.”

and software development, not just corporate‑looking roles. IBM frames this as access to talent and

In practice, it’s about asking the right questions.

different ways of thinking. That, Katie argues, is the

Are security information and event management

shift the security sector needs to see more of.

(SIEM) platforms tested for compatibility with screen readers and other assistive technologies?

Do security operations centre (SOC) teams provide written runbooks and structured handover notes alongside verbal briefings? Are incident

I S S U E 30

WOMEN IN SECURITY MAGAZINE

9

It also helps to reframe what constitutes accessibility.

“The shift that matters is moving from a model where neurodivergence is something an employer ‘manages’ to one where it’s recognised as part of how someone thinks and works."

It’s not about “making work easier,” and it’s not an exception to how things normally run. It’s about removing barriers so people can do their work effectively. When organisations land on that framing, accessibility stops feeling like a cost and starts looking like what it is: better design that improves systems for everyone.

RECOGNISING NEURODIVERGENCE AS STRENGTH In the security world, hyperfocus, pattern‑spotting and a willingness to question the status quo are not

WHERE ORGANISATIONS GET STUCK

nice‑to‑haves; they’re often core capabilities. That’s

So, what do organisations get wrong, even when they

why neurodivergence can be a powerful asset if it’s

want to get it right?

recognised as such.

“The good news is that most organisations genuinely

Katie says this is a growing focus for AusDN.

want to get this right,” Katie says. “Where they tend to

Its research on co‑designing neuroinclusive,

get stuck is treating accessibility as a checklist or a

neuroaffirming workplaces highlights how

one‑off action.”

neurodivergent employees describe their strengths: hyperfocus, detailed and precise work, creative and

Ramps and captions are important visible changes.

big‑picture thinking, and how they have the courage

But the organisations making the most progress are

to question the ways in which things have always

the ones that look further at digital systems, internal

been done. In security, those are not soft skills; they’re

tools, workflows and culture. Even more importantly,

central to threat detection, analysis and response.

they move from talking about accessibility to talking

10

with people who have lived experience. The best

“The shift that matters is moving from a model where

outcomes at AusDN come from organisations that

neurodivergence is something an employer ‘manages’

bring people with disability into the design and testing

to one where it’s recognised as part of how someone

of their systems, not just consult them after the fact.

thinks and works,” she says. One research participant

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

F E A T U R E

put it simply: “My employer does not manage my

manager training as their top challenge in supporting

ADHD. I do.”

neurodivergent employees. That’s a clear place to start.

Workplaces that focus on outcomes rather than rigid processes see neurodivergent employees thrive. In

FROM INTENT TO REALITY

security, that could mean measuring an analyst’s

The gap between intent and action is often in the

work by the quality of their threat assessments, not by

middle layer. Senior leaders will say the right things.

whether they followed a standardised workflow that

Policy documents can read well. But the translation

doesn’t suit how they process information. The goal is

into practice of how teams are structured, how tools

to design the work around results, not around a single

are procured, how meetings are run, how performance

way of getting there.

is assessed; that’s where inclusion lives or dies.

The real opportunity for security teams is to stop

AusDN’s neuroinclusion research found that 77

thinking of neurodivergence as an edge case and start

percent of employers said they were working on

recognising it as cognitive diversity that strengthens

improving neuroinclusion, yet only 30 percent

how a team detects, analyses and responds to

offered alternative formats to standard recruitment

threats. When the environment is set up well,

assessments, and half of recruitment teams rated

everyone benefits.

themselves as only “slightly confident” in providing adjustments for neurodivergent jobseekers. The

PRAGMATIC UNIVERSAL DESIGN

intent is there. The capability and consistency need to

What kinds of workplace changes make the

catch up.

biggest difference for disabled and neurodivergent professionals?

HOW LEADERS CAN LEAD BY EXAMPLE Leaders set the tone for what’s expected. When

“The ones that are built into how work is designed,

a senior leader openly uses captions, talks about

not bolted on after someone asks,” Katie says.

flexible working as standard, or asks “What do you

AusDN’s Pragmatic Universal Design framework

need to do your best work?” in a team setting, it

uses universal design principles as a north star, but

signals that these conversations are part of how the

focuses on practical, achievable steps organisations

organisation operates, not something exceptional.

can take now.

In practice that means treating flexible work arrangements as standard, captioning meetings by default and testing digital tools for accessibility before they’re rolled out. It also means rethinking how performance is measured, so it reflects outcomes rather than conformity to a single way of working.

One of the strongest findings from AusDN’s research is that manager capability is the single biggest difference‑maker. When managers know how to have an open, straightforward conversation about what someone needs to do their best work and when that conversation is treated as routine rather than exceptional everything else follows. The research

"The real opportunity for security teams is to stop thinking of neurodivergence as an edge case and start recognising it as cognitive diversity that strengthens how a team detects, analyses and responds to threats.

When the environment is set up well, everyone benefits."

found that 81 percent of employers identified lack of

I S S U E 30

WOMEN IN SECURITY MAGAZINE

11

The same research found that 38 percent of

Late last year, Katie co‑facilitated a roundtable at

employers identified a lack of executive support

the Remarkable Tech Summit on AI and workplace

as a barrier to prioritising neuroinclusion. The

adaptations. The message was clear: people with

organisations moving furthest are the ones where

disabilities need to be in the design process, not

leaders model it, not just endorse it. That means

just consulted after the fact. If AI is going to be a

being visible, being curious and being willing to say

force for inclusion, it has to be built with, not for, the

publicly: “we haven’t got this right yet.”

communities it affects.

It also means resourcing inclusion. It cannot be

SIGNS THE CONVERSATION IS SHIFTING

sustained on goodwill alone. It needs a budget,

Katie is also open about the small shifts she’s starting

dedicated capability and a place in leadership and

to see. The fact that this article is being written at

board‑level reporting. When inclusion is part of how

all that a security‑focused publication is framing

an organisation governs and measures itself, it stops

disability inclusion as a strength, not a compliance

being a side initiative and becomes part of how the

topic says something about where the conversation

business runs.

is heading.

AI, ETHICS AND INCLUSION

Representation on screen is another area of

AI can be both a lever for inclusion and a source

momentum. “You can’t be what you can’t see,” she

of new barriers. AusDN is currently co‑designing a

says. Netflix, in Heartbreak High, cast Chloe Hayden,

framework with its members on ethical and inclusive

an autistic actor, as an autistic character, and the

AI, because the tension between the promise of AI

portrayal is layered and human. SBS crime drama

and the risks it poses for people with disability is real.

Code of Silence stars Rose Ayling‑Ellis, a deaf actor, in a role where her skills drive the plot. And Nine’s

On the positive side, AI is delivering genuinely useful

broadcast of the Paris 2024 Paralympics carried

tools: better speech‑to‑text, real‑time captioning,

Inclusively Made accreditation, meaning people with

adaptive interfaces and new ways of processing

disability were involved both behind and in front of

information that remove longstanding barriers. But on

the camera. That kind of structural inclusion in how

the other side, many AI systems are built on datasets

content is made, not just who appears is where the

and design assumptions that exclude people with

real change happens.

disability entirely; from recruitment algorithms that screen out candidates based on speech patterns or

At a practical level, automatic captions in video

gaps in employment history, to automated systems

conferencing and flexible work becoming standard

that aren’t tested with assistive technologies.

post‑COVID are changes people with disability had been requesting for years to remove barriers to their participation. Smart organisations are building on those shifts, not rolling them back.

“Start with listening. Talk to your people with disabilities. Find out what’s working and what isn’t.

You’ll almost certainly find that the barriers are more practical and more fixable than you expected.”

GETTING STARTED For organisations that want to be more inclusive but are unsure where to begin, Katie’s advice is straightforward.

“Start with listening. Talk to your people with disabilities. Find out what’s working and what isn’t.

You’ll almost certainly find that the barriers are more practical and more fixable than you expected.”

12

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

F E A T U R E

Then pick one concrete thing. Don’t try to overhaul

Diverse minds make better systems. Teams that think

everything at once. If your procurement process

differently spot different weak points. That’s how

doesn’t include accessibility criteria, fix that. If your

safer cultures, and safer societies, get built.

managers don’t know how to have an adjustment conversation, train them. If your careers page isn’t

As Katie puts it: “Inclusion doesn’t have to be

accessible, redesign it. Progress comes from action,

complicated. Test your tools for accessibility. Write

not from strategy documents.

clearer job descriptions. Ask your team what they need. Pragmatic universal design starts where you

“And connect with organisations that can help,” Katie

are, with what you can change today.”

says. AusDN exists specifically to support employers on this journey, working with organisations at every

Disability inclusion isn’t another KPI. It’s about the

stage of maturity. You don’t need to have it all figured

kind of culture we want to build. In a field obsessed

out before you start.

with finding what’s hidden and predicting the unseen, maybe it’s time to turn that instinct inward, and notice

INCLUSION AS A SECURITY CONTROL

the minds sitting right beside us, often overlooked

Different ways of thinking are not threats to manage.

but essential.

They’re the reason anything ever gets better. When security teams treat neurodivergence and disability as creative capital, that mindset shift starts rippling through everything else.

I S S U E 30

www.linkedin.com/in/katie-wilson-b55a1910/

www.australiandisabilitynetwork.org.au

WOMEN IN SECURITY MAGAZINE

13

AMANDA-JANE TURNER Adjunct Lecturer School of Social Science (Cyber-Criminology) Cybercrime is big business, thanks to technical advancement and interconnectivity creating more opportunities. This regular column will explore various aspects of cybercrime in an easy-tounderstand manner to help everyone become more cyber safe.

Supply chain data breaches and what you as an individual can do Thanks to increased reliance on software as a

You cannot put the genie back in the bottle: your data

service (SaaS), outsourced providers and supply

is out there. What you can do is reduce the damage

chain dependencies any individual or entity can be

and be extra vigilant to make yourself a much harder

significantly harmed by cyber threats, indirectly and in

target in future. Think about what has been, or may

ways outside their control. SaaS is a prime target for

have been exposed. Look at how you can secure

cyber criminals because compromising a service can

your accounts and protect your identity. And warn

compromise a wide variety of entities and individuals

your network.

using it.

Depending on the information compromised, consider Here’s what you can do if your personal information

the following tips, but remember: not all steps will

has been breached because of compromise of a third

be relevant in each situation. The right response is

party SaaS or a supply chain.

dependent on the data the breached service held and the data that was exfiltrated.

14

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

C O L U M N

• consider placing a credit ban (temporary freeze) with credit reporting agencies.

• monitor your credit report for unknown loans or accounts.

• enable transaction alerts on bank accounts.

• review statements weekly for unfamiliar activity.

• report anything suspicious immediately.

Understand that your information could be used in phishing, invoice scams and voice-based scams, either aimed at you, your colleagues or people you know. Criminals may pretend to be companies you use, pretend to be the SaaS that was compromised offering you help, or may impersonate you to target your contacts.

Protect yourself by: Criminals often use breached data for credential stuffing; trying your email/password combination on other sites. If there is a risk a password was compromised, think how you can make your credentials harder to misuse. For example:

• treating all unexpected emails/texts/calls with caution.

• never clicking links or downloading attachments from unknown or urgent messages.

• verifying requests via a separate channel.

• change passwords for impacted accounts.

• keeping your network informed.

• use unique passwords for every site (a reputable password manager will help with this).

Once data has been compromised it can circulate

• turn on multifactor authentication (MFA)

for years, even come back in ‘combo’ data dumps, or

wherever possible.

• use authenticator apps instead of SMS, if these are available.

be used repeatedly by criminals for phishing, invoice scams or other crimes. Having your information in a data breach can be challenging and distressing, but it is important to know what you have control over, what

Because personal information can be used by a

you can do and how to make yourself a hard target.

criminal to open accounts or take out loans in your name, or otherwise impersonate you, consider the

Stay safe everyone.

following actions: www.linkedin.com/in/amandajane1

• in Australia, contact IDCARE. It provides free, confidential advice and can help you develop a

www.empressbat.com

recovery plan.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

15

SOURCE2CREATE.COM.AU

AISA.ORG.AU

IS NOW AISA'S NEW PUBLISHING PARTNER Click here to read the newest edition of Cyber Today

WHAT’S HER JOURNEY?

of thought,” she says. “Over time my focus evolved from simply analysing breaches to building trust through prevention, governance and resilience.”

Deveka Lingam Technology Risk Consultant at KPMG

Her path into cybersecurity was far from linear.

Initially aspiring to study law, her interests shifted into business before eventually leading her to information systems and, ultimately, cybersecurity. “Everything unfolded gradually rather than through a fixed plan,” she explains. “As I gained exposure to different

F

security topics, I slowly discovered where I could add value, and that clarity came through experience rather or Deveka Lingam, a Technology Risk

than certainty from day one.”

Consultant, the journey into cybersecurity was not defined by a single moment of

Like many entering the field, Deveka faced early

certainty, but rather by a gradual realisation

uncertainty particularly coming from a non-technical

of the world’s growing dependence on

background. “Cybersecurity seemed so technical

digital systems and the profound consequences when

and far removed from anything I had studied

those systems fail.

before, especially since I came from a marketing background,” she recalls. “It was easy to compare

“My interest in cybersecurity began at university

myself to others who already had years of technical

where I started recognising just how dependent our

exposure and assume that I didn’t belong.”

daily lives are on digital systems and how easily real people can be affected when those systems fail,” she

However, it was this very misconception that she

reflects. “That realisation felt both intimidating and

learned to challenge. “What helped me overcome that

energising because it made me aware that the work

uncertainty was realising that cybersecurity is a field

done in cybersecurity genuinely protects something

that needs people who bring communication, critical

much bigger than any single organisation.”

thinking and problem solving just as much as deep technical skill,” she says. “Once I understood that

What began as curiosity soon evolved into purpose.

the field values a wide range of strengths and that

Drawn to the dynamic nature of the field, Deveka

different backgrounds can be an asset rather than a

found herself motivated not only by the intellectual

disadvantage, I felt more confident stepping into it

challenge, but by the opportunity to contribute

and finding my place.”

to a space that lacked diverse voices. “I became

18

increasingly motivated by the lack of women’s voices

Navigating the early stages of her career also

in cybersecurity and the opportunity to contribute to

meant confronting the overwhelming breadth of

an area that needed more representation and diversity

the cybersecurity landscape. “One of the most

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

Despite the complexity of the field, she remains

“I would tell my high school self that cybersecurity is not nearly as boring or rigid as it might seem from the outside."

grounded in what truly matters growth, mentorship and meaningful contribution. When considering career progression, her priorities extend beyond compensation. “Beyond salary, I would look closely at whether the role offers mentorship because learning from people with experience is one of the fastest ways to grow,” she explains. “Early career roles should help build long term capability through growth, exposure and guidance rather than focusing solely on

challenging aspects of entering cybersecurity as a

compensation or immediate output.”

student or graduate is stepping into the field during a time of constant change,” she explains. “There is not

For those just beginning their journey, Deveka offers

always clarity about what direction to pursue and the

a perspective she wishes she had embraced earlier.

uncertainty can make it hard to decide where you fit.”

“I would tell my high school self that cybersecurity is not nearly as boring or rigid as it might seem from the

Rather than rushing into a specialisation, Deveka

outside,” she says. “It is an ever-evolving field where

chose a different approach grounding herself in

the work can actually protect people and even save

fundamentals while remaining open to possibility.

lives through the systems it secures.”

“I learned to approach this by focusing on the fundamentals and staying open minded rather than

She also emphasises the importance of transferable

trying to choose a path too early,” she says. “With

skills. “I would remind myself that strong analytical

time, practical exposure helped me understand

and communication skills are just as important as

the areas that aligned naturally with my strengths

technical ones because they help translate complex

and interests.”

problems into practical solutions,” she adds. “Those abilities can make you incredibly valuable in the field

Today, her work reflects that mindset balancing

even before you gain deep technical experience.”

technical understanding with human-centred thinking.

She sees the future of cybersecurity as one that will

As the cybersecurity industry continues to grapple

demand not only innovation, but adaptability and

with a global skills shortage, Deveka sees both

empathy. “In the next two years I anticipate seeing

challenge and opportunity. “The skill shortage is

forms of quantum related cyber threats emerging,”

creating a lot of opportunities for graduates but it is

she notes. “I also expect a major rise in AI empowered

also raising expectations,” she says. “Organisations

bots and the misuse of them, because both attackers

want people who can adapt quickly, take initiative

and defenders are increasingly relying on automation

and apply their knowledge in practical ways from

and machine intelligence.”

the start.”

Yet, for Deveka, the most pressing concern lies in how

Her journey is a testament to the power of

these advancements intersect with human behaviour.

persistence, adaptability and self-belief in a field that

“The emerging threat that concerns me most is the

is constantly evolving. In an industry often defined

misuse of AI and technology,” she says. “AI has the

by technical complexity, Deveka Lingam is helping to

potential to make attacks more convincing, more

shape a more inclusive and human-centred future one

targeted and harder for the average person to detect.

where diverse perspectives are not only welcomed,

Social engineering powered by AI, sophisticated

but essential.

phishing and automated exploitation all worry me because they target the human side of security rather than just systems.”

I S S U E 30

www.linkedin.com/in/deveka-lingam

WOMEN IN SECURITY MAGAZINE

19

Shivani Bhavsar Application Security

W

hat begins as curiosity can

practices, vulnerability management, and mentorship

often become something far

areas that reflect not only technical depth but a

more powerful and for Shivani

broader sense of responsibility.

Bhavsar, that curiosity evolved into a purpose-driven career in

“Over time, I became more interested not just in

application security. Drawn initially to the growing

understanding attacks, but also in learning how

presence of cyberattacks reported in news articles

systems can be secured from the ground up,” she

and online platforms, she quickly recognised the deep

explains. “Today, that interest has matured into

connection between technology and everyday life, and

a career focused on application security, secure

the urgent need to protect it.

development practices, vulnerability management, and mentorship. I now see cybersecurity not only as

“My initial interest in cybersecurity was sparked by

a technical field, but also as a responsibility to help

curiosity,” she reflects. “I would often read newspaper

build safer digital environments and prepare the next

articles and online reports about the rising number

generation of professionals.”

of cyberattacks and their impact on individuals, businesses, and governments. That made me realise

Turning that passion into a profession required

how deeply technology is connected to our daily lives,

deliberate action. Shivani understood early on that

and how important it is to protect it.”

curiosity alone would not be enough; she needed to build both knowledge and community. Immersing

20

What started as an interest in understanding threats

herself in online spaces such as LinkedIn, Discord

gradually matured into a commitment to building

communities, and cybersecurity forums, she began

secure systems from the ground up. Today, her work

shaping her understanding of the industry while

spans application security, secure development

connecting with like-minded professionals.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

“I have learned that overcoming cybersecurity challenges requires both technical depth and communication skills. That mindset has helped me turn challenges into opportunities for growth and impact.”

“In the early stages of my journey, I knew that

With the ever-changing nature of cyber threats,

interest alone would not be enough. I needed to

adaptability has become one of her greatest

actively build knowledge, skills, and connections,”

strengths. She highlights that one of the most

she says. “These spaces helped me discover learning

complex aspects of her role is the constant evolution

resources, career pathways, and a community of like-

of challenges, requiring both technical expertise and a

minded professionals.”

flexible mindset.

Alongside this, she committed to hands-on learning,

“In cybersecurity, the same approach rarely works

strengthening her technical foundation through

for every issue, because threats, technologies, and

platforms like Udemy and Coursera while exploring

business environments are constantly evolving,” she

vulnerability assessment, ethical hacking, and secure

says. “Rather than relying on one fixed method, I

coding. Her academic journey at Concordia University,

try to understand the root of the problem, evaluate

where she pursued a Master’s in Information Systems

the context, and choose the approach that best fits

Security, added further structure and depth, while

the situation.”

internships and early roles allowed her to translate theory into practice.

“I have learned that overcoming cybersecurity challenges requires both technical depth and

“Those early steps built the confidence and discipline

communication skills,” she adds. “That mindset has

that eventually led me into application security,

helped me turn challenges into opportunities for

teaching, and community leadership,” she notes.

growth and impact.”

Like many in cybersecurity, Shivani’s path was not

Reflecting on her journey, Shivani shares the

rigidly defined. While her early interests leaned

importance of practical experience, adaptability,

toward bug bounty hunting and offensive security, her

and persistence advice she would offer to her

career evolved organically as new opportunities and

younger self.

experiences broadened her perspective.

“Practical skills matter just as much as academic “My journey was a combination of both intention and

knowledge,” she says. “Cybersecurity is a field where

organic growth,” she explains. “In the beginning, I was

real-world problem-solving, curiosity, and hands-on

especially drawn to bug bounty hunting and offensive

practice make a huge difference.”

security but over time, my path expanded naturally.”

She also encourages aspiring professionals not to feel That evolution has led her to a multifaceted career

overwhelmed by the breadth of the field, but instead

where she not only works in enterprise application

to start small and build consistently.

security but also teaches and mentors aspiring professionals, an extension of her belief that

“Do not be intimidated by how vast cybersecurity

cybersecurity is as much about people as it is

seems at first. Start small, stay consistent, and keep

about technology.

building. The journey becomes clearer with every step.”

I S S U E 30

WOMEN IN SECURITY MAGAZINE

21

For those entering the field, she underscores the

“I believe that balance is not just important for

importance of strong fundamentals networking,

personal well-being, but also for professional

operating systems, Linux, security principles,

effectiveness,” she shares. “By managing my time

risk management, and secure coding paired with

consciously and prioritising both productivity and

practical exposure and an openness to explore

well-being, I am able to maintain that equilibrium.”

different specialisations.

Her approach includes setting clear boundaries, “Cybersecurity is a vast and multidisciplinary field,”

disconnecting from work when needed, and making

she explains. “The best university preparation

time to recharge an often overlooked but essential

combines strong fundamentals, hands-on practice,

aspect of a high-performance career in cybersecurity.

and the flexibility to specialise over time.”

To stay ahead in such a fast-moving field, Shivani Despite the demands of the industry, Shivani is

embraces continuous learning through a combination

equally intentional about maintaining balance,

of industry news, community engagement, hands-on

recognising that long-term success depends

practice, and teaching.

on sustainability.

“Cybersecurity is constantly evolving, so staying current is not optional, it is essential,” she says. “My strategy is a combination of continuous learning, community engagement, and practical application ensuring that I remain both informed and effective.”

From a curious reader of cyberattack headlines to a dedicated application security professional and mentor, Shivani Bhavsar’s journey is a testament to the power of persistence, adaptability, and purpose.

Her story not only highlights the diverse pathways within cybersecurity but also reinforces a powerful message: that building a safer digital world is a shared responsibility, one that begins with curiosity and grows through commitment. www.linkedin.com/in/bhavsarshivani

“Cybersecurity is constantly evolving, so staying current is not optional, it is essential. My strategy is a combination of continuous learning, community engagement, and practical application ensuring that I remain both informed and effective.”

22

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

That decision to keep going laid the foundation for everything that followed. Years later, she would achieve a milestone that stood in stark contrast to that early rejection. “I might not have become a woman who, years later, placed first in a competition with thousands of participants and felt proud of it,” she says.

Aleyna’s introduction to cybersecurity began during her university years while studying computer engineering. A newly formed cybersecurity club sparked her curiosity, even though she initially felt unsure of where to begin. “At the beginning, I didn’t know where to start, but the field caught my interest,” she explains. With guidance from an experienced club president and a willingness to explore, she gradually found her footing and began shaping her direction.

Aleyna Dogan Senior Cyber Threat Intelligence Analyst - SOCRadar

As her interests developed, Aleyna focused on three key areas: Network, Cyber Threat Intelligence (CTI), and Security Operations Centre (SOC). While pursuing internships in these fields, she also found herself drawn into the demanding world of software development. “Software courses at university were

A

quite intensive, and I started getting interested in full-stack web development and did freelance leyna Dogan’s journey into cybersecurity

projects,” she says. For a time, this led her away from

did not begin with certainty or

cybersecurity but not entirely. “I realised I had already

confidence, but with a moment of doubt

developed a security mindset through coding. This

that could have easily defined her path.

awareness led me back to this field, but this time I

“I couldn’t answer a simple question in

was much more conscious and determined.”

my first cybersecurity interview,” she recalls. “It was a topic I thought I knew, but I couldn’t answer it, and

That renewed focus paid off. After pushing past

when I left the interview, my confidence was seriously

her initial interview setback, she secured her first

shaken.” For a time, she questioned whether she truly

internship in CTI, where everything began to align.

belonged in the field at all.

“I truly enjoyed analysing threats, understanding attacker behavior, and working with real cases,”

What followed, however, would become a defining

she shares. Following her internship, she joined

turning point. A friend’s blunt but honest advice

SOCRadar as a part-time CTI analyst, balancing work

reframed her perspective entirely. “It’s good that you

alongside her studies. “Balancing university and work

were rejected. Now you know what rejection means.

was challenging but highly rewarding.” Over time,

Now you need to learn how to be accepted. You can

that role evolved into a full-time position, solidifying

keep crying if you want, or you can move forward.”

cybersecurity not just as an interest, but as a career.

Reflecting on that moment, Aleyna acknowledges

24

its impact. “It was harsh, but exactly what I needed.

A defining aspect of Aleyna’s work has been her deep

If I hadn’t sat down at my computer that day and

engagement with the attacker’s perspective. “In the

continued applying, I might not be here today.”

CTI field, progressing only with technical data is

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

often not enough. Analyses without understanding

In her day-to-day work, she remains committed

the attacker’s mindset remain incomplete,” she

to staying current in an ever-evolving field.

explains. Her work on the dark web further reinforced

“Cybersecurity is a field that requires staying

this understanding. “Thinking from an attacker’s

constantly up to date,” she notes, highlighting her use

perspective became one of the most valuable parts

of platforms like Urlscan and VirusTotal, as well as

of my job. Over time, what truly makes a difference in

small automations to improve efficiency. Beyond her

this field is not what you know, but how you think.”

professional responsibilities, she is equally passionate about making cybersecurity more accessible to

Her approach to growth reflects this philosophy.

others. “I believe that accessible resources are

While she values certifications, she is clear about their

important for those who are new to this field,” she

limitations. “I believe that certifications are useful,

says, pointing to free tools and learning platforms as

but I have experienced that they are not sufficient on

valuable entry points.

their own. In the CTI field, the more cases you see and analyze, the more you improve.” She credits Capture

Her commitment to giving back extends to sharing

The Flag (CTF) competitions with sharpening both

her knowledge openly. “On my personal blog, I share

her technical and analytical abilities. Her dedication

CTF solutions, machine analyses, and cybersecurity

culminated in a remarkable achievement. “As a result

articles. Even if the content I write benefits just one

of these efforts, I completed a cybersecurity academy

person, it becomes a great source of motivation for

organised by a bank in Türkiye, where approximately

me.” For Aleyna, this reinforces a deeper truth about

4,000 people applied, by finishing in first place.”

her work. “Because for me, cybersecurity is not just a job, but also a passion and a hobby.”

Looking back, Aleyna is candid about what she wishes she had known earlier. “I wish I had started in this

As she looks toward the future, she remains

field earlier,” she reflects, before turning her focus

pragmatic about emerging technologies. “Artificial

outward to encourage others, especially women

intelligence does not create entirely new types of

considering cybersecurity. “Most of the time, we may

attacks, but rather makes existing attacks faster and

hold ourselves back in technical fields or think that

more scalable,” she explains, particularly noting its

we are not good enough. One of the reasons for this

impact on phishing and social engineering.

can be that we did not have the same opportunities in terms of access to technology and guidance from

For those just starting out, her advice is grounded in

an early age.” Despite this, her message is clear and

experience and clarity. “Memorising information is

empowering. “This field offers far more opportunities

not enough. Moving forward without understanding

than we think. That is why I believe that, as women,

the logic behind a topic will leave you weak in real

we need to take a more active role in cybersecurity, be

scenarios. What matters is not how much you know,

more visible, and be more active. To exist in this field,

but how well you can apply it.”

it is not about being perfect, but about continuing.”

Aleyna Dogan’s journey is a powerful reminder that Alongside the intensity of her role, Aleyna has also

success in cybersecurity is not defined by flawless

learned the importance of balance. “After the social

beginnings, but by resilience, curiosity, and the

isolation of the pandemic, I started to add more

decision to keep moving forward especially when it

conscious routines to my life,” she says. Simple

would be easier to stop.

habits, such as stepping out for a coffee or going for a walk, have become essential moments of reset.

“Buying myself a coffee outside and going for a walk has become one of my most important habits where I

www.linkedin.com/in/aleyna-dogan

margheritaviola.com

clear my mind and recharge.”

I S S U E 30

WOMEN IN SECURITY MAGAZINE

25

Adeola Odunlade Cybersecurity Professional (SOC Analyst)

A

deola Odunlade’s journey into

by the Cybersafe Foundation. It was here that her

cybersecurity did not begin with a

foundation in cybersecurity was solidified. “Through

long-standing technical ambition or

that experience, I received structured training and

a carefully mapped-out career plan.

mentorship, which really shaped my foundation in

Instead, it started with a moment of

cybersecurity and gave me the confidence to pursue it

curiosity one that many might overlook. “My interest

professionally,” she explains. What began as curiosity

in cybersecurity didn’t start in the usual way,” she

transformed into purpose. “It is no longer just about

reflects. “It actually began during one Cybersecurity

curiosity. It is about impact, a way to protect people,

Awareness Month. There was so much content

organisations, and the digital spaces we rely on

everywhere at the time, conversations, posts, and

every day.”

campaigns, and it really caught my attention.”

Like many entering cybersecurity, Adeola quickly What could have remained a passing interest quickly

realized that interest alone would not be enough.

became something more intentional. Adeola chose

The transition into a professional career required

to lean into that curiosity, enrolling in an introductory

discipline, sacrifice, and consistency. “One of the

course that would ultimately reshape her path. “What

most pivotal steps I took was committing fully to

started as a simple attempt to just learn something

continuous learning,” she says. “I knew early on that

new quickly became something I genuinely enjoyed,”

cybersecurity was not a field you could approach

she says. “The more I learned, the more I realised this

casually.” She immersed herself in foundational

was a field I could see myself growing in.”

knowledge, balancing theory with hands-on labs and simulations. “There were periods where I had to give

26

That early spark evolved into a defining opportunity

up sleep, spend long hours studying, and consistently

when she was selected for the CyberGirls program

push myself beyond what felt convenient.”

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

but I also continuously improve my analytical skills

"Cybersecurity can feel overwhelming when you are just starting out. There were moments when I questioned whether I was on the right path. I learned to manage those doubts by focusing on progress rather than perfection, breaking things down into smaller, more manageable steps and celebrating the little wins along the way. Seeing people who had once been in my position, gave me reassurance that it was possible.”

so I can think critically beyond the tools,” she says.

Over time, she has come to embrace a key truth that many in cybersecurity learn through experience: “You do not need to know everything. What matters more is knowing how to approach a problem, where to look, and how to respond effectively under pressure.”

Her path into this technical role was not without hesitation. In fact, Adeola initially envisioned herself in a less technical area of cybersecurity. “When I first started, I was actually leaning towards GRC because I was a bit intimidated by the technical side,” she admits. “I assumed it would be too complex or difficult for me.” But exposure and experience gradually shifted her perspective. “I discovered that I not only understood the technical work but genuinely enjoyed it, the investigations, and the problem-solving aspects made the work exciting for me.”

Moments of doubt were inevitable, particularly in the early stages. “Cybersecurity can feel overwhelming when you are just starting out,” she says. “There

Yet, her growth was not shaped by technical learning

were moments when I questioned whether I was

alone. Community played an equally critical role. “I

on the right path.” Instead of allowing uncertainty to

made a conscious effort to connect with others in the

take hold, she reframed her approach. “I learned to

field, attend events, and learn from people ahead of

manage those doubts by focusing on progress rather

me,” she shares. Reflecting on her early journey, she

than perfection, breaking things down into smaller,

credits “continuous learning, community, intentional

more manageable steps and celebrating the little

sacrifice, and staying consistent” as the pillars that

wins along the way.” Support from the community

transformed her ambition into reality.

once again proved invaluable. “Seeing people who had once been in my position, gave me reassurance that it

Today, as a SOC Analyst, Adeola operates at the

was possible.”

frontline of cybersecurity an environment defined by urgency, complexity, and constant change. “One of

At the core of Adeola’s journey is a deep appreciation

the most challenging aspects of my role is dealing

for learning not just as a phase, but as a constant.

with the constant flow of alerts while trying to quickly

She emphasises the importance of strong

distinguish between what is a real threat and what is

fundamentals for anyone entering the field. “A

just noise,” she explains. The pressure is relentless,

strong understanding of networking makes it much

requiring both speed and precision. “The volume can

easier to understand where vulnerabilities can exist

be overwhelming at times, and the pressure to make

and how attacks happen,” she explains. She also

the right decision quickly is very real.”

highlights operating systems, security principles, and problem-solving as essential areas, alongside an

To navigate this, she has developed a mindset

often-overlooked skill: communication. “Being able to

that balances structure with adaptability. “I rely on

explain risks, findings, or incidents clearly is just as

established processes for investigation and triage,

important as the technical side.”

I S S U E 30

WOMEN IN SECURITY MAGAZINE

27

Looking ahead, Adeola is clear-eyed about the

energy. “I have learned that rest is not optional. It is

future of cybersecurity. “Over the next two years,

necessary,” she says. By setting clear boundaries

I believe automation and AI will have one of the

and prioritising time to recharge, she ensures

biggest impacts,” she notes, acknowledging both the

sustainability in both her career and personal life.

opportunities and risks they present. She also points

“When you take care of yourself properly, you think

to the growing importance of cloud and identity

more clearly, respond better under pressure, and

security, as well as the increasing sophistication of

show up stronger in your role.”

social engineering attacks. “More and more attacks are focused on exploiting users, credentials, and

Adeola’s journey has also been shaped by the power

access controls,” she says, reinforcing the need for a

of community and representation. She credits

broader, more adaptive security mindset.

organisations and individuals who are actively working to make cybersecurity more accessible. “The

Despite the demands of her role, Adeola finds genuine

cybersecurity community has had a huge influence

fulfilment in the work she does. “The aspect of my

on my career,” she says. “It reminded me early on that

current role that brings me the most satisfaction is

you do not have to figure everything out alone.”

knowing that the work I do contributes to protecting systems, organisations, and people,” she shares. It

As she looks to the future, she remains focused on

is this sense of purpose, combined with her love for

growth, both practical and professional. Certifications

problem-solving, that continues to drive her forward.

such as Security+ and CySA+ are part of her plan, but

“There is something very fulfilling about taking

she is clear about their role. “Certifications are most

something uncertain or potentially risky and helping

valuable when they support real skill development.

make sense of it.”

My goal is to keep building in both areas so that my growth is not only visible on paper, but also reflected

Equally important is her commitment to balance

in the quality of work I can do.”

in a field that can easily consume one’s time and For those considering a transition into cybersecurity, her advice is grounded in realism and encouragement.

“There is something very fulfilling about taking something uncertain or potentially risky and helping make sense of it.”

“Start with the fundamentals and give yourself time to build a strong foundation,” she says. “Be patient with yourself… if you stay curious, persistent, and willing to learn, progress will come.”

If she could speak to her younger self, her message would be simple yet powerful: “Do not be intimidated by how complex cybersecurity seems, you do not need to have everything figured out to get started.”

Adeola Odunlade’s journey is a testament to what can happen when curiosity is followed with intention, when doubt is met with persistence, and when growth is supported by community. It is not a story of instant certainty, but of gradual discovery, one that continues to unfold with purpose, impact, and quiet confidence.

www.linkedin.com/in/adeolaodunlade

28

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

YOUTH-LED CO-CREATION: THE NEXT WAVE OF SECURITY THINKING

by Abigail Swabey, Publisher of Women in Security Magazine

There’s something electric about watching a new generation take ownership of security. They aren’t waiting for permission.

They’re building from the ground up. Patching, testing, coding, advocating teaching themselves and each other as they go.

I

n the past, youth programs in cyber were about

parents about privacy through games. An early-

awareness; now they’re about co-creation. High

career engineer from Queensland is developing

school teams at the AustCyber YouthTech

authentication for visually impaired users, because, in

Challenge are designing real-world solutions for

her words, “security shouldn’t punish difference.” None

data misuse. Student collectives through the

of this fits neatly under corporate structures yet, and

ACS Foundation’s Big Day In are turning ideas from

that’s precisely what makes it fresh.

hackathons into fully fledged privacy apps. And initiatives like AWSN’s Girls in Cyber Program are

Youth brings boldness. It asks awkward, necessary

proving that early exposure isn’t just about skills;

questions: why cyber awareness talks stop at Year

they’re about identity, confidence and belonging.

10, or why most incident-response training assumes adult literacy. It wants to rewire how we teach risk,

These ideas might be raw, but they carry something

not as something to be feared, but as an attribute of

rarer: clarity. Talk to these teams and you’ll hear how

digital citizenship.

firmly they connect security to humanity. They care about digital ethics and social safety as much as

And when you pair the energy of youth with the wisdom

firewalls and code. For them, cybersecurity isn’t just

of seasoned mentors, something remarkable happens.

locking things down; it’s keeping people open and

Intergenerational mentorship stops being about

protected at the same time.

transferring knowledge and becomes genuine creative exchange. Experienced practitioners bring structure and

30

There’s a group in Tasmania running school

reality checks; young innovators offer speed, imagination

workshops on online boundaries. A Melbourne

and the audacity to ask, “why not?” Together the

university team is building tools that teach

young and the wise design new ways forward.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

F E A T U R E

Across Australia, that partnership is growing. Through

The need is real. Older Australians are increasingly

UNSW’s SecEd Lab and government-backed Digital

being targeted, with scam losses rising sharply.

Trust youth initiatives, students are working side-by-

That makes the role of younger family members

side with professionals to test emerging security tools

even more important. When teenagers help explain

and rewrite the narrative around tech leadership. The

threats in plain language, cybersecurity stops being a

results? Faster experimentation, community-driven

specialist issue and becomes part of the household

solutions and a feeling that the future of cybersecurity

conversation. It becomes a shared responsibility.

is co-written, not inherited.

And that is far more powerful than a one-off awareness campaign.

For established professionals, the challenge is to make space. Renewal isn’t replacement, it’s

What young people bring to this work is not just

recognising that younger voices aren’t disrupting the

enthusiasm, it’s real-time digital intuition. They are

field, they’re expanding it.

often the first to experience emerging technologies such as generative AI, which means they see both

Because the future of online safety isn’t just waiting

the opportunities and the risks as these unfold.

in universities; it’s already being built in classrooms,

They also understand usability in a way organisations

community halls and garages across the country.

sometimes overlook. If a security measure is clunky, disruptive or too complicated, they know it will fail in

I sat down with four industry leaders involved in a

practice, no matter how strong it looks on paper.

range of programs across Australia to gather their perspectives on the matter.

That perspective is valuable because it keeps security close to everyday behaviour. It reminds the sector that

CYBERSECURITY AT HOME

the most effective solutions are not always the most

Stacey Beer, Palo Alto Networks

complex ones. They are often the ones people can actually use.

For Palo Alto Networks’ CyberFit Nation a series of online cybersecurity workshops for “Australians and New Zealanders, from early childhood to the boardroom,” youth-led co-creation is not a side note, it sits at the centre of the work.

At the heart of the initiative is a simple idea: cybersecurity should be accessible to everyone, not just experts. Since its launch in 2021 the focus of CyberFit Nation has been on giving Australians of all ages the skills to navigate an increasingly complex digital world. But what makes the model stand out is the way young people are being brought into the design process.

A strong example is the upcoming Grandparents’ Kit. Rather than creating something for older Australians in isolation, Palo Alto Networks worked with students to help co-create the content. That shift matters. It means the material is not only technically sound, but also simple, practical and grounded in the way real families talk about digital safety.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

31

The strongest opportunity for intergenerational

She sees this in the small but telling ways young

collaboration, from this view, sits in the space

people interact with technology. Some are quick to

between young people and older Australians.

show how they got around game system security for

A teenager’s digital fluency paired with a

extra credits. Others help shape security awareness

grandparent’s life experience can create something

sessions that connect effectively with their

technology alone cannot: trust. That trust becomes

generation. They are not passive participants. They

the foundation for conversations at home, where

are active testers of ideas, and they are unafraid to

cyber safety is no longer separate from family life, but

speak plainly when something does not make sense.

part of it.

That willingness to challenge is what makes youth-led The organisational lesson is just as clear. If

ideas valuable. If organisations want to build security

young people’s voices are to be heard, they need

solutions that people can use without frustration, then

to be involved early, while ideas are still forming.

young people need to be involved. They often see

Participation alone is not enough. The shift has to

simpler, more intuitive approaches where others have

be from consultation to influence. Young people also

overcomplicated things. They also help keep ideas

need to see what changed because of their input.

relevant to the times, which matters not just for future

Otherwise, engagement becomes symbolic, and

preparedness, but for trust.

symbolic does not build momentum.

Jacqui points to a cybersecurity education session In practice, good youth engagement looks ordinary,

with primary school students as a reminder that

and that is the point. It might be a student noticing a

insight does not wait for adulthood. An eight-year-

deepfake or suspicious message and then explaining

old asked why systems need to ask for personal

the warning signs to a friend, parent or grandparent.

information. A ten-year-old asked why false data

That is where learning moves beyond awareness and

could not be entered instead of true when information

into action. The impact is then no longer limited to

is requested. Another asked whether writing

one person. It spreads through families and

information on paper would make it safer from

communities.

hackers.

YOUTH BRING CLARITY

“These questions reflect the depth of critical

Jacqui Loustau, founder and CEO of

thinking already emerging at a very young

AWSN, says young people contribute

age,” she says. “They challenge longstanding

in ways that are often more direct than

assumptions about how security systems

many expect.

are designed.”

“I’m continuously surprised by the

For Jacqui, the opportunity for collaboration

perspectives and questions young people

across generations is obvious. Different

bring,” she says. “Their thinking is often

generations use different applications, adopt

practical, simple and grounded in real use.”

different technologies and communicate in different ways. Those differences should be

For Jacqui, that practicality is part of their strength. Young people are digital

treated as strengths, not obstacles. When multiple generations are around the table,

natives, but not in a vague or fashionable

different ways of thinking emerge naturally

sense. They understand what technology

and complement one another.

actually does for them, where it helps, where

32

it gets in the way and where systems fall

She offers a clear example. AWSN’s Gen X

short. That makes them useful co-creators,

team developed security education materials

not just learners.

for primary and secondary schools, then

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

F E A T U R E

handed the brief to a Gen Z student. The student

learning cybersecurity, they are applying it.

transformed the content into something far better than expected: simple, engaging and genuinely

What makes their contributions especially valuable

relevant to the audience.

is the way they understand lived digital experience.

Young people know how technology is actually used.

Had the team done it alone the uptake would likely

They know how people trust it, respond to it and make

have been slower and the material less effective.

decisions in real time. In a field shaped increasingly

Experience matters, but so does freshness. In this

by social engineering and human behaviour, that kind

case, the intergenerational collaboration not only

of insight is essential.

accelerated the work, it lifted the outcome.

“Technical capability alone is not enough,” The lesson for organisations is that young people

Leanne says. “Effective security depends on

need environments where they can speak up, ask

understanding people.”

questions and challenge ideas safely. They need context, guidance and room to explore. They also

She sees this in teaching and outreach all the time.

need communication that fits how they work, which

When students are given the chance to contribute

may mean being more concise, more informal, or

through cyber clinics, industry projects or peer-

using messaging instead of meetings.

led initiatives they identify risks, behaviours and user challenges that more traditional approaches

Just as importantly, organisations should avoid

sometimes miss. This is where mentorship

isolating young voices by bringing in only one. Having

becomes critical. With support from peers and

multiple young participants creates peer support,

industry professionals, students begin to move

confidence and a stronger collective perspective. That

from participation to leadership. They gain not only

is what meaningful inclusion looks like. Not token

knowledge, but judgement.

presence, but real participation.

The biggest opportunity for collaboration, in her view,

LEARNING IN PRACTICE

sits at the transition point between education and

Associate Professor Leanne Ngo, Director of

employment. Internships, work-integrated learning,

Student Engagement and Employability at La Trobe

industry projects, entrepreneurship and start-up

University’s School of Computing, Engineering and

environments all matter because they give young

Mathematical Sciences, sees youth co-creation

people the chance to work on real problems and

already happening in real time.

engage with professionals across different stages of their careers.

“Young people are already contributing to real security outcomes, not in theory, but in practice,” she says.

These experiences also widen the view of what

“When they are trusted with responsibility, they step

cybersecurity can be. Not every role is technical.

into it.”

Some sit in human factors, governance, risk or leadership. Young people need to see that breadth

At La Trobe that trust is built into both the curriculum

early so they can understand where they fit and how

and student-led ecosystems. Through the Women

they can contribute.

in Cybersecurity Student Chapter, the Cybersecurity Society and other technology and AI-focused

Leanne is clear that mentorship remains central, but

groups, students work with industry and community

it has to be more than advice. It needs to provide

organisations to design and deliver real-world

strategic insight, practical guidance and a genuine

solutions. These could be community cyber clinics

pathway forward. The system works best when

improving digital safety or applied projects addressing

education, industry, community and innovation

organisational IT challenges. Students are not just

pathways are connected, not siloed.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

33

Her view of good youth engagement is similarly

bullying, community tensions and social challenges

systemic. It is not a program, it is a connected

are all part of the picture. Young people understand

system. The challenge in cybersecurity is not a lack

these pressures in a way adults often do not, because

of interest. It is a lack of continuity between outreach,

they are living them.

education and workforce entry.

That is why their input matters. When youth are At La Trobe that continuity is supported through early

invited into workshops, forums, mentoring programs

exposure, student leadership, industry engagement

and community safety initiatives, they can help

and early career pathways, backed by research

identify risks early and shape solutions that are

into what drives participation and progression. The

relatable and effective. They bring ideas with energy,

scale is significant too, with initiatives reaching over

but also with an understanding of what will actually

100,000 high school students, more than 600 women

land with their peers.

and non-binary individuals, and over 215 students through work-based learning placements.

She is especially clear that youth engagement has to be enjoyable, not just informative. Young people

As learning accelerates, particularly with AI,

learn best when learning is interactive and fun.

engagement must evolve with it. Simply providing

They respond to experiences that feel relevant and

access to knowledge is no longer sufficient. What

practical, not lectures delivered from a distance. That

matters is how we support people to apply that

is one reason community-based approaches can work

knowledge, develop judgement and move into

so well. They create a sense of connection as well

meaningful roles.

as learning.

Without connected, evidence-led pathways, Leanne

Youth-led ideas are valuable because they bring

warns, we do not just lose interest. We lose

authenticity, relevance and innovation. Marina says

capable people.

adults should not assume they always know the answer. Young people often see trends, pressures and

And that, she says, is where the real gap is to

emerging risks before organisations do. They also

be found. “It is not only a capability gap. It is a

think differently, bringing fresh minds and modern

recognition gap. We expect young people to be job-

perspectives to older problems.

ready, while hesitating to give them the responsibility that would help make them so.”

Whether the issue is cyber safety, youth crime prevention, mental wellbeing or community inclusion,

COMMUNITY SAFETY AND YOUTH VOICE

youth perspectives can help shape solutions that

For Marina Azar Toailoa, founder of the Mummy

resonate with other young people. And when young

Safety Project, youth-led co-creation extends

people feel heard, they are more likely to stay engaged

beyond cybersecurity into the broader work of

and grow into leaders themselves.

community safety.

For Marina, the strongest opportunities for “At Mummy Safety Security Project we strongly

collaboration come when lived experience meets

believe that young people are not just the future,

wisdom. Young people bring energy, insight and

they are the present,” she says. “They deserve to be

innovation. Older generations bring guidance, life

empowered, heard and actively involved in creating

experience and professional knowledge. That

safer communities.”

combination can be powerful, in schools, sporting clubs, shopping centres, local councils, mentoring

Marina’s focus is grounded in the lived reality of the

programs and community events.

environments young people move through every day. School settings, online spaces, peer pressure,

34

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

F E A T U R E

This is where intergenerational work becomes more

That means opening internship doors to more than

than a concept. It becomes a practical way to bridge

just computer science students. It means pairing

understanding, reduce stigma and create stronger

mentors across generations. It means funding

pathways for youth development, crime prevention

youth projects as prototypes with value, not school

and safer communities.

exercises to be admired and forgotten. It means inviting young people into panels, roundtables

She is also direct about what organisations need

and leadership spaces early, when what they say

to do. Tokenistic consultation is not enough. Young

still matters.

people need to be met in the places where they already are schools, youth centres, sporting grounds,

Cybersecurity has always been about anticipation.

shopping centres and online communities. They need

These young builders already see what comes next.

to be listened to properly, not just invited into a room

The sector’s task is not to catch up to them. It is to

for appearances.

make space beside them.

That also means creating youth advisory groups,

Because safety is not static. It keeps changing. And

involving young people in decision-making and paying

the next translation is already being written—by the

them where appropriate. Most importantly, it means

generation that is growing up inside it.

acting on what they say. Young people know when they are being heard and when they are being used

WAYS TO SUPPORT YOUTH‑LED CO‑CREATION

for the appearance of inclusion. Action builds trust.

• Open internship doors to multidisciplinary

Nothing less will do.

backgrounds, not just computer science.

• Pair mentors across generations, not just

Good youth engagement, in Marina’s view, is inclusive, consistent, empowering and enjoyable. It looks like workshops, sport, mentoring, leadership opportunities and community events where young people feel safe, respected and inspired. It gives them belonging and purpose.

hierarchies.

• Treat youth projects as prototypes worth funding, not classroom exercises.

• Include young builders in panels, awards, and roundtable representation matters early.

• Support grassroots competitions like AustCyber YouthTech and ACS Big Day In, where creativity

At the heart of it all is a simple belief: when young

meets real‑world testing.

people are empowered, they are more likely to choose positive pathways, protect themselves and others and step into leadership with confidence.

A SHARED DIRECTION Across all four contributors, the message is strikingly consistent. Young people are already shaping security. They are not waiting to be invited into the future. They are helping build it now.

What they bring is not just energy or optimism.

They bring practical intelligence, lived digital experience, community insight and the courage to question assumptions that older systems have left untouched. In return, they need more than praise. They need real pathways, real responsibility and real influence.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

35

a time when she intentionally stepped away from identity and access management (IAM), seeking

Pooja Agrawalla Co-Founder & Chief Product Officer at Kreesalis

to broaden her experience across other areas of cybersecurity. But no matter where she turned to fraud investigations, compliance reviews, or security incidents she found herself circling back to the same root cause. “No matter the context, everything kept tracing back to identity,” she says. “In many ways, I didn’t choose IAM, it kept choosing me.”

P

Like many in the industry, her journey began without ooja Agrawalla, widely known as “The IAM

a fixed roadmap. Early in her career, she immersed

Girl,” is a cybersecurity leader and product

herself in IAM programmes, focusing on provisioning,

builder at Kreesalis, focused on identity,

access control, and compliance. At the time, IAM was

trust, and governance. With over 24 years

often treated as a background function necessary,

of experience, she has spent her career

but rarely strategic. Yet Pooja’s curiosity pushed her

bridging the gap between robust security and digital

to look deeper. Across organisations, she began to

innovation. Her work centers on rethinking identity

notice a recurring and unsettling pattern: “Systems

beyond access management—positioning it as the

were functioning as designed. Controls were in place.

core of modern security, risk, and compliance.

Access was technically correct. And yet, outcomes were not always aligned.”

In a field often defined by firewalls, alerts, and breaches, Pooja Agrawalla’s journey into cybersecurity

That observation became a turning point. “The issue

has been shaped not by what was broken but by what

was not access, it was trust,” she explains. It was a

appeared to be working perfectly.

realisation that shifted her entire perspective. Valid identities, even those with legitimate permissions,

“Most security failures I’ve seen had one thing in

could still introduce risk when their behaviour went

common. Nothing was broken. The identity was valid.

unexamined. Whether it was insider activity, third-

And yet, something didn’t add up,” she reflects. It is

party access, or routine approvals, the real challenge

this quiet inconsistency, this gap between correctness

wasn’t gaining entry, it was what happened after.

and consequence, that would come to define her path and ultimately her purpose.

From that moment on, identity ceased to be a technical layer and became something far more

36

Pooja did not set out to become what many now

significant. “Identity was no longer just a control layer.

recognise her as: “The IAM Girl.” In fact, there was

It became the centre of trust, risk, and accountability,”

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

she says. This reframing allowed her to see IAM

process; it is the very foundation upon which trust is

not as a niche specialism, but as the foundation of

established and measured.

modern security.

Her insights are particularly relevant in an era shaped Her growing expertise led her to design and

by artificial intelligence, automation, and the rapid

implement IAM programmes across enterprise

growth of non-human identities. The challenge, she

environments, working closely with teams to

believes, is no longer simply about granting access,

strengthen their security posture. Yet despite the

but about continuously validating it. “The biggest risks

diversity of organisations and systems, the same

today are not external threats trying to break in. They

issues persisted. “Access granted but not revisited.

are already inside operating through identities we

Approvals becoming routine rather than risk-aware.

chose to trust.”

Exceptions accumulating without clear ownership.

Non-human identities remain under-governed.” These

Despite her depth of experience, Pooja’s advice to the

weren’t isolated problems, they were systemic.

next generation remains grounded and refreshingly simple. “Focus less on roles, and more on problems

Driven by a desire not just to fix gaps but to rethink

worth solving,” she says. It’s a philosophy that

the system itself, Pooja made a pivotal transition

reflects her own journey, one driven not by titles,

from practitioner to builder. As Co-Founder and Chief

but by curiosity, persistence, and a willingness to

Product Officer, she stepped into entrepreneurship

question assumptions.

with a clear mission: to redefine how identity functions in a world of increasing complexity and

Looking ahead, she is certain that the future of

accelerating threats.

cybersecurity will be defined by how organisations manage identity. Not as a checkbox exercise, but as

Today, she sees the cybersecurity landscape

a dynamic, living system of trust. And if her journey is

undergoing a profound transformation. “We are

anything to go by, the answers will not lie in what is

witnessing a fundamental shift from access to trust,

visibly broken but in what quietly doesn’t add up.

from compliance to continuous proof, from static controls to adaptive, real-time validation,” she says.

www.linkedin.com/in/pooja-agrawalla

In this new paradigm, identity is no longer a backend

I S S U E 30

WOMEN IN SECURITY MAGAZINE

37

Dr Margarita’s academic journey has been instrumental in shaping her multidisciplinary perspective. Through research roles at globally respected institutions, including Harvard, University of Warsaw, Tel Aviv University’s Blavatnik Cyber Research Center, and Taras Shevchenko National University of Kyiv, Dr. Bel developed a deep intellectual foundation that continues to inform her work. This combination of applied expertise has enabled her to approach cyber and AI challenges with both analytical precision and strategic foresight.

In industry, Dr. Bel has demonstrated remarkable

Dr. Margarita Bel Executive Leadership at the Forefront of Cyber and AI Security, Human-Centric Innovation, and Strategic Transformation

executive momentum across diverse leadership roles. As Chief Innovation and Validation Officer at Easy Cyber, she contributes to the advancement of next-generation cybersecurity capabilities, focusing on innovation strategy, validation frameworks, and the development of trusted technologies. Her work reflects the growing need for credibility, adaptability, and resilience in cyber and AI systems at an

A

enterprise level. t a defining moment of global

Her leadership experience also includes serving as

technological transformation where

Director of Business Development at TrustPeers

accelerated innovation, rising cyber

Cyber on Demand, where she played a key role in

complexity, and the expanding

strategic growth, and as Head of Projects at Check

influence of artificial intelligence are

Point Software Technologies Ltd., gaining hands-on

reshaping the world, Dr Margarita Bel stands among

experience within one of the world’s most recognised

a distinguished class of leaders guiding the future

cybersecurity organisations. These roles strengthened

with clarity, intelligence, and purpose. Her journey

her ability to bridge innovation with operational

reflects the emergence of a new leadership paradigm,

execution, and strategy with tangible results.

one that unites strategic vision, technological depth, and an unwavering commitment to human-

Beyond industry, Dr. Bel has made significant

centered progress.

contributions to institutional development. As Director of Cyber Training at IsTec - Cyber Security &

38

A Harvard Fellow, Oxford AI alumna, and a scholar

Advanced Solutions, she had been shaping the next

recognised by both the Ministry of Science of Ukraine

generation of cyber professionals, while her role as

and the Polish Government, Dr. Bel’s path is marked

Associate Professor and Head of the Department

by exceptional academic rigor and international

at the Kyiv State University, Institute of Information

distinction. Her work spans cybersecurity, AI security,

Technologies, further expanded her expertise in

innovation, and strategic transformation, positioning

organisational leadership and transformation. These

her at the intersection of disciplines that are

experiences reflect Dr Margarita belief that true

defining the digital age. Her career is a carefully built

progress lies at the intersection of technology and

architecture of knowledge, leadership, and impact.

human understanding.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

At the core of Dr. Bel’s leadership is a defining

Reflecting on the philosophy that guides her work, Dr.

conviction: technology achieves its highest value

Margarita Bel shares:

when guided by intelligence, responsibility, and

“For me, cybersecurity has always been larger

human purpose. Her work consistently emphasises

than technology alone. It is about protecting trust.

that cybersecurity and AI are not isolated technical

It is about enabling institutions to grow securely. It

domains, but interconnected systems that must align

is about helping people navigate complexity with

with trust, resilience, communication, and societal

confidence. Today, as AI continues to accelerate

well-being. This philosophy has become a signature

digital transformation, “I believe this human-centered

of her leadership, one that positions her as a key voice

dimension has become even more important.

in shaping a future where innovation serves humanity.

Cybersecurity, AI, innovation, and leadership must move together” she explains.

Dr Margarita’s international outlook further amplifies her impact. Across academia, industry, and cross-

As a woman in security, I also believe representation

border collaboration, Dr. Bel has contributed to

matters. Visibility matters. Voice matters. Many

initiatives that connect institutions, experts, and

women bring extraordinary expertise, strategic

innovation ecosystems worldwide. Her ability

thinking, and leadership to this field, and each story

to bridge the scholarly and the operational, the

shared helps expand the horizon for others. I’m happy

technological and the human, distinguishes her as a

through my journey to encourage more women to

leader of uncommon range and influence.

step forward, lead boldly, and recognise that their perspective is needed in shaping the future of security

As a thought leader, her contributions extend into

and technology.

critical conversations about AI, cyber psychology, and the evolving relationship between humans and

My advice to others is clear: keep learning, keep

intelligent systems. Her recent publications, including

building, and keep trusting the value of your unique

“AI Security: Why It Must Become a Strategic Priority”

path. Careers evolve. New opportunities emerge.

(2026), “From AI Risk to Human Resilience: Building a

Disciplines intersect in unexpected ways. What

Human-Centric AI Operating System” (2026), “Talking

matters is to stay committed to excellence, remain

to Machines: What Communication with Sentient

open to growth, and lead with both intelligence

AI Could Mean for Humanity” (2025) and “Sentient

and humanity.

AI: The Dream, the Hype, and the Real Possibilities” (2025), reflect her unique ability to explore complex

The future of security will be shaped by leaders

technological questions through both strategic and

who understand technology deeply and people

philosophical lenses. Dr Margarita’s work challenges

thoughtfully. I am honored to contribute to that

conventional thinking while opening new pathways for

future through cyber and AI security, innovation,

understanding the future of intelligent systems.

validation, academy, strategic transformation and I remain inspired by the responsibility and possibility of

For women in cybersecurity and AI, Dr. Bel’s journey

this Mission.”

carries powerful significance. She represents not only excellence and achievement, but visibility and forward

Dr. Margarita Bel’s journey is a powerful reflection

momentum in fields that are shaping global security

of leadership at its highest level globally informed,

and transformation. Her story demonstrates that

intellectually grounded, and deeply purposeful. As

women are not only participating in these domains,

cyber and AI continue to shape the architecture

they are leading them, redefining them, and setting

of the future, her work stands as a guiding force,

new standards for what leadership looks like in the

demonstrating that the most meaningful progress is

digital age.

achieved when innovation is aligned with humanity. www.linkedin.com/in/dr-margarita-bel

I S S U E 30

WOMEN IN SECURITY MAGAZINE

39

connecting the dots until something clicks. That instinct toward finding the story in the data is what made me realise I had found the right industry.”

Unlike many who feel pressured to fast-track their way into cybersecurity through expensive certifications, Eloise took a more measured and accessible approach. “I didn’t go out and spend thousands on certifications straight away. I started with affordable courses just to get comfortable with

Eloise Taylor Senior Manager, Security Operations

the language of security, because you can’t have meaningful conversations in a field when you don’t understand the vocabulary.” That foundation gave her the confidence to immerse herself in the community, though not without hesitation.

“I remember walking into early events and wanting to be invisible. I felt like a fraud - like I shouldn’t have

E

been there, and that if anyone asked who I was or what I did, they’d immediately know I didn’t belong,” loise Taylor’s cybersecurity journey was

she admits. “So I kept my head down, sat in on the

anything but conventional, and that is

talks, and absorbed as much as I could.” Over time,

precisely what makes her story resonate.

her perspective shifted. “What I eventually learned is

Now a Senior Manager in Security

that being honest about where you are gets you a lot

Operations, her journey began far from

further than trying to perform expertise you don’t have

command centres and incident response calls. “When

yet. The security community is genuinely welcoming

I first moved to Canada, I worked in retail because

when you lead with curiosity rather than pretending to

that’s what was available to me on a temporary visa,”

know things you don’t.”

she reflects. “From there I moved into HR recruitment, which paid the bills but left me feeling disconnected

Like many entering the field, Eloise faced moments

from where I actually wanted to be. I knew I wanted to

of doubt and rejection. “Constantly,” she says

be closer to tech, I just hadn’t figured out how yet.”

candidly. “And the rejection that comes with trying to break into a new field is genuinely hard. You can

40

The turning point came when she joined a defence

be doing everything right and still hear nothing back,

and technology consulting organisation as a cyber

and that wears on you.” It was one pivotal interview

project manager. It was here that the pieces began to

that changed her trajectory. “I just decided to be

fall into place. “Starting as a cyber project manager

completely honest. Not because I was trying some

gave me visibility into almost every area of security,

clever strategy, but because the energy in that virtual

and over time I started to understand what actually

room felt safe, and I didn’t want to inflate myself and

excited me about the field,” she explains. “I was drawn

then fail on the job. So when I didn’t know something,

to the investigative nature of security work - piecing

I said how I’d work it out rather than pretending

together fragments of information from different

I already had the answer.” That authenticity paid

sources until a bigger picture starts to form. Think

off. “That leader saw my transferable skills and my

of it like building a murder board in a crime thriller,

willingness to grow, and they took a chance on me.”

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

Eloise never followed a rigid career plan, and she

genuinely want each other to succeed.” Over time,

believes that flexibility became one of her greatest

those connections have become anchors. “You run

strengths. “No clear plan at all. I didn’t have a

into the same people at different points in your career,

dream job title or a five year roadmap. I followed

and each time you’re both a little further along. It’s a

opportunities, said yes to things that made me a little

bit like catching up with friends you only see once a

nervous, and paid attention to what energised me

year, except those conversations often shape your

versus what drained me.” Security operations, she

direction in ways you don’t fully appreciate until later.”

explains, wasn’t a destination she had mapped out.

“It’s somewhere I ended up because I kept moving

Today, her greatest accomplishment comes not

toward what felt meaningful. Looking back, that

from personal achievement, but from the growth

flexibility was an advantage. Rigid plans can close you

of those around her. “Leading my team,” she says

off to opportunities that don’t fit the box you’ve drawn

without hesitation. “When someone lands a project

for yourself.”

they were nervous about, or shares where they want to take their career over the next few years, that hits

Reflecting on her younger self, Eloise offers a

differently than any personal milestone I’ve reached.”

perspective grounded in self-trust rather than

For Eloise, leadership is deeply personal. “It’s those

hindsight correction. “Honestly I wouldn’t tell her to

specific conversations where someone realises

ditch geography and start coding. I was completely

they’re more capable than they thought they were.

absorbed in its extreme weather, geology, all the

That never gets old.”

nerdy things and I wouldn’t change that for the world.”

She sees a clear thread now. “That curiosity and

That perspective was shaped, in part, by experiencing

analytical thinking, the desire to understand complex

the limits of pushing too hard. “There was a period

systems and find patterns in them, quietly carried

earlier in my career where I was working around 80

into everything I’ve done since. You don’t always see

hours a week. I hit a wall frustrated, exhausted, not

the through-line until you look back.” Her advice is

having time to eat, and most importantly missing time

simple but powerful: “What I would tell her is to keep

with my daughter.” It was a moment that forced her to

following the path she enjoys rather than the one

reset. “Security will take every hour you give it if you

that’s expected of her.”

let it, so you have to be intentional about protecting the hours that belong to the rest of your life.” Now,

Looking ahead, Eloise sees a shift that will redefine

her priorities are clear. “For me that’s weightlifting,

the profession. “We’re all becoming engineers whether

travelling, watching football, and above everything

we signed up for it or not, and I think that’s a good

else, being present for my daughter. Those aren’t

thing,” she says. “The ability to automate, script, and

things I fit in around work. They’re what makes the

build is becoming essential across security roles, not

work sustainable long term.”

just for developers.” This evolution, she notes, goes deeper than tools or programming languages. “It’s not

Eloise Taylor’s journey is a testament to the power of

just about picking up Python. It’s a fundamental shift

curiosity, honesty, and adaptability. It is a reminder

in how security professionals approach problems.”

that there is no single path into cybersecurity, and that sometimes the most meaningful careers are built

Despite the technical demands of the field, Eloise

not by following a plan, but by learning to recognise

credits her success not to tools or titles, but to

the patterns along the way.

people. “The community, without question,” she says when asked about the biggest influence on her career. “There’s something about the security world

www.linkedin.com/in/eloise-j-taylor

I didn’t expect when I first came into it. People here

I S S U E 30

WOMEN IN SECURITY MAGAZINE

41

Chinenye V. Ugochukwu Senior Cybersecurity Architect

C

hinenye V. Ugochukwu, a Senior

layer to my understanding and strengthened my

Cybersecurity Architect, describes her

interest. Over time, I developed a much broader view

journey into cybersecurity as one driven

of the field, from hands-on operational security to

by curiosity. “I first found my way into

governance and strategic design.”

cybersecurity out of pure curiosity. I

started my career in a financial institution, working in

Early in her career, Chinenye credits her growth to

an IT systems control role, and that’s where I began

curiosity driven learning and hands-on experience.

paying closer attention to how systems were secured

“One of the most pivotal things I did was ask

and how risks were handled. The more I learned, the

questions. Working in a small team really helped there

more I realised I wanted something more challenging

was always something happening, and learning was

and meaningful. That curiosity eventually pushed

very hands-on. As new challenges came up, I had the

me to move into the IT security team within the

chance to observe, get involved, and gradually take

same organisation.”

on more responsibility. That practical exposure made a huge difference. It helped me build confidence

The transition into security was not without

and gave me a much deeper understanding of

challenges. “It was a completely different role, and I

cybersecurity concepts beyond what I could have

had to quickly build both technical and governance

learned from theory alone. Looking back, that

knowledge. But as I settled in, everything started

curiosity-driven approach, being willing to ask, watch,

to click. Cybersecurity felt dynamic, impactful, and

try, and learn, was what transformed my initial

deeply tied to keeping the business resilient,” she

interest into a real professional path in cybersecurity.”

reflects. Her career path has since spanned multiple

42

organisations and disciplines, including Identity and

Like many professionals in the field, Chinenye has

Access Management, Application and Data Security,

faced moments of self-doubt. “In the first few years

and Security Architecture. “Each role added a new

of my career, I didn’t really struggle with uncertainty.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

W H A T ’ S

H E R

J O U R N E Y ?

Reflecting on what advice she would give her younger

“One of the most pivotal things I did was ask questions. Working in a small team really helped there was always something happening, and learning was very hands-on.

As new challenges came up, I had the chance to observe, get involved, and gradually take on more responsibility. That practical exposure made a huge difference."

self, Chinenye emphasises mindset and support: “Believe in yourself, no matter what anyone thinks.

Cybersecurity is a journey, and nobody steps into it already knowing everything. Self-doubt and external noise only slow you down, so trust your abilities and stay focused on your own growth. I’d also remind myself to pay attention to the kind, supportive people, the ones who see your potential and help bring out the best in you. Most importantly, with the right mindset, anything is achievable. Stay curious, keep learning, and stay open to new challenges. You can build the career you want. The path doesn’t have to be perfect; it just has to be yours.”

Chinenye is also deeply thoughtful about the future of cybersecurity. “One major concern is the rise of deepfakes and identity deception. As AI-driven voice

Everything felt new and exciting, and I was learning

and video generation becomes more sophisticated,

quickly enough that I didn’t stop to question myself.

attackers can impersonate executives, employees,

But as time went on and the responsibilities grew, I

or trusted partners with alarming accuracy. Another

started experiencing moments of self-doubt. That’s

trend is the growing challenge of continuous threat

when imposter syndrome began to creep in. I’d

exposure. Modern environments cloud services, APIs,

catch myself wondering whether I was doing enough

third-party integrations constantly expand the attack

or if I was even on the right path.” Her strategy for

surface. Continuous Threat Exposure Management

overcoming this was steady, incremental progress:

is becoming essential, giving organisations the

“I focused on taking things one step at a time. I

ability to identify vulnerabilities and risks in real

grounded myself in continuous learning, building

time. Regulatory pressure is also a significant factor.

my skills, asking questions, and staying close to the

Cybersecurity is no longer just a technical issue; it’s a

practical work that helped me grow. That approach

governance and accountability issue.”

slowly helped me rebuild my confidence. Those moments of uncertainty actually strengthened me.

They pushed me to stay intentional about my growth and helped shape the strength I rely on today.”

Chinenye’s career unfolded organically rather than along a rigid plan. “When I started my journey in cybersecurity, I didn’t have a clear picture of the exact roles I wanted to pursue. I began in a small team where we handled a wide range of security responsibilities. After about two years, I moved into a more structured environment where roles were more defined. My path unfolded quite organically from there, shaped by the opportunities and challenges I

“Believe in yourself, no matter what anyone thinks. Cybersecurity is a journey, and nobody steps into it already knowing everything.

Self‑doubt and external noise only slow you down, so trust your abilities and stay focused on your own growth."

encountered along the way.”

I S S U E 30

WOMEN IN SECURITY MAGAZINE

43

“Mindset makes a significant difference. Anyone can transition into cybersecurity, regardless of their background. The field accommodates a wide range of skills, including governance, risk management, compliance, communication, and analysis."

When considering career moves, Chinenye looks

important to me. I try to be intentional about creating

beyond salary: “I pay attention to the company

clear boundaries and understanding the difference

structure, where cybersecurity sits within the

between work time and personal time. That structure

organisation. Inclusion is also a major factor,

helps me stay productive while protecting time for

especially in how the organisation supports women in

rest, family, and personal growth. Taking things one

cybersecurity. I also look closely at the learning and

step at a time helps me stay effective professionally

development opportunities available. Cybersecurity

while maintaining my wellbeing.”

evolves quickly, so continuous learning isn’t optional, it’s essential.”

To stay current, she takes a multi-layered approach.

“I stay active in cybersecurity groups and professional

Mentorship has played a key role in her journey.

communities, attend webinars and conferences,

“One of the biggest influences on my career came

and leverage accessible learning platforms like

very early, when I started working as an IT Security

YouTube, technical blogs, and articles. Connecting

Analyst. My manager gave me tasks I didn’t initially

with professionals whose skills I admire is equally

know how to solve and encouraged me to research,

important. Continuous learning and certifications are

experiment, and figure things out on my own.

essential; the field moves quickly, and staying relevant

Mentorship from professionals like Liliia Karpenko,

means committing to ongoing skill development and

Zechariah Akinpelu, and Kim Sylvie helped shape my

a mindset of constant growth.”

perspective and strengthen my confidence. Their support helped me navigate career decisions, broaden

For those transitioning into cybersecurity,

my knowledge, and continue growing within the

Chinenye has clear guidance: “Mindset makes a

cybersecurity field.”

significant difference. Anyone can transition into cybersecurity, regardless of their background.

Chinenye also shares the importance of balance.

The field accommodates a wide range of skills,

“Maintaining a healthy work/life balance is really

including governance, risk management, compliance, communication, and analysis. My advice is to start small, focus on learning consistently, and build on your existing strengths. Surround yourself with the right people, mentors, and supportive communities.

With curiosity, persistence, and the right mindset, the journey into cybersecurity can be both achievable and rewarding.”

www.linkedin.com/in/nenye-u-29536880 x.com/Forgedinsecurit

44

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

DO YOU WANT TO CONTRIBUTE? EDITORIAL THEMING & DEADLINES MONTH

THEME

EDITORIAL SUBMISSION

ISSUE LIVE

JULY/AUG 2026 ISSUE 31

COURAGEOUS CONVERSATIONS

MAY 24TH

JUNE 28TH

SEPT / OCT 2026 ISSUE 32

UNLEASHED

SEPTEMBER 3RD

OCTOBER 24TH

NOV/DEC 2026 ISSUE 33

UNCHARTED TERRITORY

NOVEMBER 14TH

DECEMBER 19TH

Send submissions to: JANE@SOURCE2CREATE.COM.AU

WOMENINSECURITYMAGAZINE.COM

CRAIG FORD Craig is an experienced cyber security professional with various qualifications including two master’s degrees. He is the Head Unicorn (co-founder and director) of Cyber Unicorns, in which he acts as a vCISO to clients such as Baidam Solutions, Wesley Mission, PCYC, Hungry Jacks and Ipswich City Council. He was CTO (Chief Technology Officer) for Baidam Solutions between January 2022 to June 2023, where he led the technical services team, helping to build out the internal services capability for Baidam. Craig was QLD chair for AISA for two years until he was appointed to the national board of directors in December 2022.

Cyber Unicorns – driving change from day one Cyber Unicorns was born out of a need to make a

Learning to be safe in this world is as important as

difference. In July 2023 I stepped away from a great

learning to swim. We all (most of us anyway) learn to

job as CTO with an absolutely amazing team who

swim. So, if we find ourselves in a situation where we

I still call family (Baidam). I still love what they do,

are in water and need to save ourselves, we can. If we

what they believe in, and I still support their mission

can’t swim, our chances of survival are very low. It’s

whenever I have the opportunity to do so.

that simple.

Why did I leave a safe job, one I loved with a team I

Most of us learn to ride a bike. We learn to walk

truly admired? It was simple: I had to.

before we learn to run. Cybersecurity needs to be one of these primary skills. As soon as they start to

Okay, maybe it was not that simple, but let me tell you

interact with any digital platforms—games, phones,

why I created Cyber Unicorns and what we have been

apps—at home or at school, every child needs to start

up to. Through this story my decision to leave Baidam

being taught how to navigate the online world rather

might make more sense.

than being let free and left to work things out the hard way.

In July 2023 I decided to end my role as CTO of Baidam and to create Cyber Unicorns. The company

Cyber Unicorns has attacked this challenge from

had one purpose, and a mission I needed to stand up

several angles. First, we have the books. The Shadow

for; a mission that was, and still is, part of who I am.

World is an amazing resource to help parents and

It drives me to get up and work hard every day. Not

schools educate children (and themselves) on

for money, not for ego, not because I think others feel

the dangers of the digital world. It has 19 topics:

I should.

sextortion, cyber bullying, online gaming, and many more.

My role is to educate children, parents, teachers, seniors and everyone in between. Why? Because to

We have donated more than 8,000 copies to schools

truly make a difference in this world, we need to teach

around the country to do our part in ensuring that

everyone how to be safer in the online world. We don’t

children have access to this resource. And we have

need everyone to be cybersecurity professionals.

not stopped there.

That’s not what it’s about. It’s about developing life

46

skills that can help us all stay safe in the modern

Cyber Unicorns now also has a cyber education

world we need to navigate.

course aligned with the Australian National

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

Craig is a published author with three different book series – ‘A Hacker I Am’ cyber education series, ‘Foresight’ is his Cyberpunk/hacker fantasy novel series and then there is ‘The Shadow World’, a co-authored kids cyber education book. He is a freelance cyber security journalist and is a regular columnist with the Women in Security Magazine, as well as a freelance contributor for Cyber Today, Top Cyber News, SecureGov, Careers with STEM and Cyber Australia magazines.

C O L U M N

Curriculum available on our online education platform

me get this material into the hands of the children

that schools across Australia (and the world) can

who need it, maybe I will succeed.

access and use to teach children and school staff. It links video topics to required learnings and references

So, I hope you now understand why I made that crazy

further education via The Shadow World to provide

decision to step out of my comfort zone, to take a

learning beyond the course itself.

dive off the cliff and give this everything I have to help the next generations (and some of the, current, older

The current course is designed for primary (junior)

generation) be as safe as they can be, understand the

school students but is being expanded to provide

risks and the things they can do themselves.

coverage through to senior levels. This is a resource that has been missing for schools, students and

www.cyberunicorns.com.au

parents. Now they have it. www.linkedin.com/in/craig-ford-cybersecurity

In addition, we have educational material for parents, seniors and the general public. We also have

www.facebook.com/CyberUnicorns

additional exciting capability in development that will expand our offerings, because I need to make a

www.instagram.com/cyberunicorns.com.au

difference in this space. And, with all of you helping

I S S U E 30

WOMEN IN SECURITY MAGAZINE

47

INDUSTRY PERSPECTIVES

JO STEWART-RATTRAY

WHY SECURITY NEEDS MORE PEOPLE WHO CONNECT THE DOTS

by Jo Stewart-Rattray, Oceania Ambassador, ISACA

In cybersecurity and digital trust we often talk

women aspiring to leadership roles and supporting

about skills shortages, emerging threats and new

professional networks in places where access to

technologies as though they are separate challenges.

opportunity was not always easy. I have also worked

Increasingly, I think they point to the same underlying

with women in Africa who were building careers in

problem: too often, we still work in silos.

technology and governance while overcoming barriers that were both professional and deeply personal.

Security can sit apart from business strategy.

Governance can be treated as something separate

In all of these settings the issue was never a lack

from technology. Leadership pathways can be narrow

of talent. More often, it was a lack of access: to

and hard to access. And too many capable people,

networks, to visibility, to leadership opportunities and

particularly women and others from underrepresented

to people who could say, with conviction, “You can do

communities, are still left on the edge of a profession

this, and you belong here.”

that needs their perspective. What we need is not only more talent; we also need more people who can

As Ruth Bader Ginsburg said: “Women belong in all

connect the dots.

places where decisions are being made. It shouldn’t be that women are the exception.”

WHAT BRIDGE BUILDING LOOKS LIKE IN PRACTICE

That is where bridge builders come in. They help

For me, bridge building has never been an abstract

people move from capability to opportunity. They

idea. It has been made real by the people and

make sure good people are not overlooked simply

communities I have worked with over many years.

because they are not already in the room. They also make our profession stronger by broadening the mix

I have had the privilege of working alongside

of voices shaping it.

ISACA chapters in Papua New Guinea, mentoring

50

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

WHY THIS MATTERS NOW This matters even more today, because our profession is under pressure from every direction.

Artificial intelligence is changing the way organisations operate. Cyber threats continue to grow in scale and complexity with geopolitical uncertainty all around. Many organisations are still struggling to find and keep skilled people. At the same time, women remain underrepresented across technology and cybersecurity, particularly in senior roles. That is not only disappointing; it also has practical consequences.

When teams are too narrow, blind spots grow. When systems are designed without a broad range of perspectives, bias can be built in rather than designed out. We are already seeing that happen in areas such as AI where uneven representation can shape the way tools are developed, applied and governed. If we want

as SheLeadsTech, which create opportunities for

secure, trustworthy systems, we need more diverse

women to connect, learn from one another and build

voices helping shape them.

confidence in their own leadership.

We also need people who can work across disciplines;

But we should be honest, mentoring on its own is

people who understand that, in the real world, cyber,

not enough. People also need sponsorship. They

audit, risk, privacy, governance and business strategy

need leaders who will back them, recommend them

do not sit in neat, separate boxes.

and make room for them. Advice matters, but so does advocacy and practical assistance to make a

WHY MENTORING MATTERS

difference for individuals.

One of the most effective ways to build those connections is through mentoring. Throughout my

If we want more diverse leadership in security we

own career, mentoring has made a real difference.

cannot simply tell people to be confident. We have to

I have seen how the right advice at the right time

make pathways more visible and more accessible.

can shift someone’s confidence, broaden their view of what is possible, or encourage them to put

LOOKING BEYOND THE USUAL PATHWAYS

themselves forward for an opportunity they might

We also need to think more broadly about where

otherwise have ignored.

security talent comes from. Some of the strongest people I have worked with did not begin in

I have also seen the value of professional

cybersecurity. They came from governance, audit,

communities such as ISACA and initiatives such

operations, technology education, compliance

“Women belong in all places where decisions are being made.

It shouldn’t be that women are the exception.” - Ruth Bader Ginsburg

I S S U E 30

WOMEN IN SECURITY MAGAZINE

51

and other adjacent fields. They brought a different

That means moving away from siloed thinking and

way of thinking, and that made teams better and

recognising that cybersecurity, governance, risk and

more robust.

emerging technologies shape digital trust together.

It also means recognising that the profession will be

That is especially important in regional and rural

better served when more people can see a place for

communities where traditional career paths are not

themselves in it.

always available. Technology can help open doors through online learning, certifications, mentoring and

ISACA has long played a role in bringing together

global networks. But access to those opportunities

professionals across these areas, and that matters.

still depends on people being encouraged and

But building bridges is not the job of one organisation

supported along the way.

alone. It is something all of us can do in our own teams, networks and communities.

This is one reason bridge building matters so much.

It helps turn potential into progress and challenges

WHAT WE DO NEXT

the idea that there is only one ‘right’ path into

Each of us can help make this profession more

the profession.

connected. We can each make a difference. That might mean mentoring someone early in their career.

A STRONGER PROFESSION WILL BE A MORE INCLUSIVE ONE

It might mean recommending a capable colleague

Inclusion is sometimes spoken about as though it sits

two people who should know each other, or creating

alongside the real work. In my view, it is part of the

space for a different voice to be heard.

for an opportunity. It might mean bringing together

real work. A professional community that draws on a wider range of experiences, backgrounds and ways

Security is, and has always been, about more than

of thinking will be better equipped to respond to risk,

systems and controls. It is also about people,

adapt to change and make sound decisions.

trust and the choices we make about who gets to participate.

Those differences include gender diversity, of course, but they also include cultural diversity, neurodiversity, regional perspectives and diversity of thought.

ABOUT THE AUTHOR Jo has over 25 years’ experience in the security

Creating that kind of community takes deliberate

sector. She consults in risk and technology issues

effort. It means making workplaces more accessible.

with a particular emphasis on governance and

It means paying attention to who gets heard and who

cybersecurity as a director with BRM Advisory.

gets overlooked. It means making sure leadership

Jo is the Oceania Ambassador for global IT

reflects more than one kind of career path or

professional association, ISACA, and an ISACA

communication style. Most of all, it means listening

Hall of Fame inductee. Jo is the former Vice

properly to people whose perspectives may be

President, Communities of the Australian

different from our own and learning from them.

Computer Society and Ambassador of the National Rural Women’s Coalition. She regularly

SECURITY WORKS BETTER WHEN PEOPLE ARE CONNECTED

provides strategic advice and consulting to the

As the profession continues to change I believe

education, retail and government sectors.

banking and finance, utilities, healthcare, tertiary

one thing is becoming clearer: security will not be strengthened by technical capability alone. It will be strengthened by people who can connect disciplines,

www.linkedin.com/in/jo-stewart-rattray-gaicd-4991a12

connect communities and connect generations.

52

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

ABIGAIL SWABEY

MENTAL RESET: RECLAIMING MIND, HEART AND BODY AS A WOMAN IN SECURITY

by Abigail Swabey, Publisher of Women in Security Magazine

Recently, I’ve had to run a mental reset for myself.

the small, but deliberate, mental resets I’m building

As the CEO of a boutique media house running

into my routine. This article is about reclaiming your

projects like the Australian Women in Security

mind, heart and body when you’re in the thick of the

Awards, publishing magazines like this one and

security game, and using that reset as a quiet act of

simultaneously managing client events and

leadership, not a luxury.

campaigns all year round, I’ve found myself physically and mentally drained and running on autopilot, even

Women in security are used to being ‘on’:

though I have some absolutely unbelievable staff.

heads‑on‑screen, phones buzzing, threats brewing just out of view. The job demands mental agility,

This year feels like it’s moving at breakneck speed

emotional stamina and physical resilience, often in

with curveballs being thrown at me from all directions.

environments that still feel like a minority space. That

I’ve simply not had the space to pause, see things

constant, high‑alert state is exhausting. It shows

clearly or process what’s happening. It could also be

up as late‑night scrolling, “one more email”, skipped

the fact that I’m still working at a crazy pace trying to

lunches, fractured sleep and a gnawing feeling you’re

prove my value and feel like I’m getting nowhere.

running on fumes.

While I’m still mid‑journey on finding answers to what

A mental reset isn’t about ‘fixing’ stress overnight.

quietness and reset mean for me, I keep thinking

It’s about creating deliberate, repeatable shifts in

about you all: women in security holding complex

your mental, emotional and physical habits so you

roles, leading teams and showing up under pressure

can show up for the work, and your life, without

every day. So, instead of keeping these reflections

burning out.

to myself, I wanted to share what I’m learning, and

54

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

WHY WOMEN IN SECURITY NEED A RESET

Here’s what a simple mental reset can look like.

Cybersecurity and physical security roles are high‑pressure, 24/7, high‑stakes and often

• Scheduled ‘off‑brain’ windows: 15–20 minutes

under‑resourced. Research shows cybersecurity

in the day where you step away from screens,

professionals regularly report elevated stress,

passwords, patches and inbox chaos. Use this

fatigue and burnout, which can impact personal

time for a walk, a short, guided meditation or a

life, relationships and long‑term health. For women

non‑tech conversation.

in security, those impacts can be combined with

• Ritualised transitions: create a clear ‘end‑of‑shift’

under‑representation, imposter‑taste‑in‑the-mouth

moment. Close your laptop, write one ‘done’ list,

moments, and extra emotional labour: being the ‘first

shut a door or listen to a specific song, so your

female this’ in the room, explaining your expertise

brain registers that you’re not still on‑call, even if

twice and navigating cultures that still don’t always feel like they were built for you.

the phone is nearby.

• Boundaries around ‘always‑on’ culture: turn off non‑critical notifications outside working

A mental reset begins with acknowledging that you’re

hours, insert ‘focus blocks’ in your calendar,

not just tired, you’re drained in multiple dimensions.

and communicate those boundaries with your

The good news: when you reset your mind, your

team so you’re not the only one protecting your

emotions follow, and your body catches up faster.

mental space.

CREATING SPACE FOR YOUR BRAIN

For a woman in security, creating space for your brain

Mental health in security is no longer ‘nice‑to‑have’;

is also a quiet act of leadership. When you visibly

it’s an operational requirement. Tired brains misread

protect your headspace, you give others permission

alerts, miss nuances in logs and struggle with

to do the same.

complex decision‑making, which can quietly erode your organisation’s cyber resilience.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

55

NAMING WHAT YOU’RE CARRYING The emotional load in security is heavy: ongoing risk,

GROUNDING YOUR BODY IN THE SECURITY GAME

breach after breach, seeing your peers dismissed, and

Long shifts, cursor‑hand tension, bad posture,

the pressure to prove yourself over and over again.

caffeine dependence and skipped meals subtly but

Many women absorb this quietly, translating it into

steadily erode your physical resilience. And when your

stress, irritation or numbness.

body is compromised, your mind and emotions follow.

An emotional reset is about naming it

A physical reset can be as simple as:

without judgment.

• Micro‑movement practices: 5–10‑minute stretch • Short check‑ins with yourself: at the end of the day, ask: “What did I feel most today — frustrated, proud, exhausted, invisible?” Just naming the emotion diffuses some of its power.

• Vocalising needs: share honestly with a trusted peer, partner or coach; “I’m burnt out on

or mobility routines between incidents, or a brisk 10‑minute walk after a big meeting.

• Hydration and nourishment that feels like a reward: keeping a good water bottle and snacks that feel like self‑care, not punishment.

• Sleep hygiene: a consistent wind‑down routine.

incident‑response Sundays” or “I feel like I have to

No screens, low light, maybe a short meditation,

work twice as hard to be heard.”

sound bath or journal entry to signal to your

• Creating safe spaces: seek or build communities;

nervous system that the threat level has dropped,

internal women‑in‑security groups, informal chats,

even if the world hasn’t. My all-time favourite is

mentoring circles—where you can be honest about

a 20 minute sound bath. It helps me reset and

mistakes, doubts and wins alike.

empties my mind for rest.

Emotional reset is not a weakness. In security, it’s

When women in security start treating their bodies

what keeps you self‑aware, empathetic and less likely

as part of their ‘defence strategy’, not decoration or

to lash out or shut down under pressure.

afterthought, they show up sharper, calmer and more sustainable long‑term.

A RESET IS NOT A LUXURY, IT’S A NECESSITY A mental reset isn’t an indulgent ‘self‑care moment’ separate from your security work; it’s integrated into it. Healthier minds notice anomalies earlier. Calmer emotions recover from setbacks faster. Stronger bodies keep you alert through long shifts and incident responses. And when women in security normalise reset practices, they quietly reshape the culture around them turning “you have to be on‑call all the time” into “we protect our people while we protect our perimeter”.

This issue of Women in Security Magazine is a reminder: you don’t need to wait for a breaking point to reset. You can start small, one clear boundary, one honest conversation, one 10‑minute stretch, one night of proper sleep and let that be the first line of defence you reinforce.

56

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

EXCLUSIVE

ADVERTISING PACKAGE For the past four years, Source2Create has proudly delivered Women in Security Magazine to the industry free of charge, championing diversity, inclusion, and the incredible contributions of women in cybersecurity. As we continue to grow, we now need partners to help us sustain and expand this vital platform.

By supporting this package, you’re not just backing us—you’re investing in the magazine, its community, and the future of women in security.

To ensure we can keep delivering this high-value publication, we’re introducing a nominal fee for $900 Ex GST, an exceptional package that provides extensive coverage and visibility.

WHAT'S INCLUDED? OFFICIAL PARTNER RECOGNITION Your logo will be prominently displayed at the beginning of the magazine in our “Partner of the Issue” panel.

GLOBAL AUDIENCE REACH Your brand will be seen by 5,000+ global subscribers through our free, bi-monthly digital publication, dedicated to supporting and showcasing women in security.

2 FULL-PAGE ADVERTS Feature your brand in two issues of your choice between March and December.

2 JOB POSTINGS Advertise up to two job opportunities in the magazine and across our social media platforms, reaching a highly engaged cybersecurity audience.

ONLINE BANNER ROTATION on WomenInSecurityMagazine.com

This high-value package ensures maximum visibility for your brand while directly supporting the continuation of Women in Security Magazine.

Join us in making an impact—partner with us today!

EMAIL JANE@SOURCE2CREATE.COM.AU

LISA VENTURA

THE CONVERGENCE BRIDGE: WHY AI AND CYBERSECURITY CAN NO LONGER EXIST IN SEPARATE SILOS

by Lisa Ventura MBE FCIIS, Chief Executive and Founder, Unity Group Solutions Limited/AI and Cyber Security Association There is a conversation that urgently needs to

to a category of risk that neither their AI governance

happen in organisations around the world, and it

teams nor their security teams were fully equipped to

is not happening anywhere near fast enough. In

address individually.

boardrooms, in technology departments and in risk committees, artificial intelligence and cybersecurity

TWO TEAMS, ONE THREAT LANDSCAPE

are still being treated as separate disciplines with

Consider what the threat landscape looks like in

separate teams, separate strategies and separate

2026. Threat actors are using AI to generate highly

budgets. This division is not just inefficient. It

convincing spear-phishing emails at scale, to create

is dangerous.

deepfake audio and video that can bypass identity verification, and to automate vulnerability discovery in

I have spent years working at the intersection of these

ways that dramatically accelerate the pace of attacks.

two fields, and the gap between them remains one of

At the same time, organisations are deploying their

the most urgent and under-discussed problems in our

own AI systems, often rapidly and with insufficient

industry. When I founded the AI and Cyber Security

security review, creating new attack surfaces that

Association (AICSA) as the world’s first global trade

traditional cybersecurity frameworks were never

association focused specifically on AI-security

designed to address.

convergence, I did so because I could see the industry

58

needed a dedicated space in which to build a bridge

Yet, in many organisations, the team responsible

between AI and cybersecurity. Without it, I could see

for AI governance is focused on ethics, compliance

organisations would continue to expose themselves

and model fairness while the cybersecurity team is

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

focused on network security, endpoint protection and

They have appointed people who can speak both

incident response. Neither team has full visibility of

languages. They have ensured AI deployment

what the other is doing, and neither has been given

decisions have security review built in from the start,

explicit responsibility for the space in which their

not bolted on afterwards. When they integrate a

disciplines overlap. That overlap is exactly where

new large language model into a business process

some of the most significant risks now live.

they assess the security implications of that integration with the same rigour as the commercial or

WHAT CONVERGENCE ACTUALLY MEANS

operational implications.

Convergence is not simply about getting AI teams and a necessary starting point. It is about fundamentally

THE ROLE OF WOMEN IN BUILDING THIS BRIDGE

rethinking how organisations structure their approach

For women working in security the convergence of

to risk when AI has become both a defensive tool and

AI and cybersecurity represents both a challenge

an offensive weapon.

and a significant opportunity. The skills that make

security teams to talk to one another, although that is

exceptional security professionals the ability to think In my book, Artificial Intelligence in Cybersecurity,

systemically, to communicate risk in human terms,

published by Kogan Page on 3 April 2026, I explore

and to build relationships across organisational

how the relationship between AI and security is

boundaries are precisely the skills required to

evolving across every dimension: from the way AI is

navigate and lead convergence.

being used to detect threats and automate response to the ways in which adversaries are exploiting AI

Women in security have long been bridge-builders,

to make their attacks more sophisticated and more

often out of necessity. We have had to build

scalable. What became clear throughout my research

credibility and trust in environments that did not

for the book was that the organisations best placed to

always make it easy to do so. We have learnt to

manage this landscape are those which have made a

work across disciplines, and to find common ground

deliberate and structural commitment to convergence

between people who do not naturally share a frame

at leadership level.

of reference. Those are exactly the capabilities that convergence requires.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

59

The AI-security space is nascent so there is real

LISA ON SOCIAL MEDIA

opportunity to shape its direction. The governance frameworks, the professional standards and the

@cybergeekgirl

shared vocabulary of this converged discipline are still being written. Women who position themselves at the

www.linkedin.com/in/lisasventura/

intersection of AI and security whether through their work, their advocacy or their continued professional

www.facebook.com/lisasventurauk

development will be the architects of this new converged discipline.

www.instagram.com/lsventurauk

BUILDING THE BRIDGE IN PRACTICE

bsky.app/profile/cybergeekgirl.bsky.social

If you are wondering where to start, the answer is closer than you think. Begin by learning the language

You can find examples of the talks she done

of the other side. If you are a security professional,

previously and of interviews, panel discussions and

invest time in understanding how AI systems are built,

moderating/chairing events on her YouTube channel:

deployed and governed. If you work in AI governance or data science, invest time in understanding the

www.youtube.com/@CyberSecurityLisa

threat landscape and the security controls your organisation relies upon. Whichever your discipline, you do not need to become a deep expert in the other.

AI AND CYBER SECURITY ASSOCIATION’S CHANNELS

What you require is sufficient understanding to ask the right questions, and to know when to bring the

x.com/AICyberSecAssoc

two disciplines together. www.linkedin.com/company/aicybersecassoc

At an organisational level, advocate for structures that make convergence possible. Push for AI

www.facebook.com/aicybersecassoc

deployments to include security review. Raise the question of who in your organisation is responsible for AI-enabled threats, and whether that responsibility is clearly defined. These conversations are not always

ABOUT LISA VENTURA MBE FCIIS

comfortable, but they are necessary.

Lisa Ventura MBE FCIIS is Chief Executive and Founder of Unity Group Solutions Limited and

The bridge between AI and cybersecurity will not build

Founder and CEO of the AI and Cyber Security

itself. It requires intent, structural commitment and

Association (AICSA). Her book, Artificial

professionals who are willing to stand in the space

Intelligence in Cybersecurity, is published by

between the two disciplines and hold them together.

Kogan Page (April 2026).

That is bridge-building in its truest sense, and it is one of the most important things our industry can do right now.

60

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

LET US HELP YOU OVERCOME YOUR BUSINESS DATA CHALLENGES

Our team understand the importance of time and efficiency when it comes to data projects.

Core Services Database creation Database admin cleaning Database appending services Data enrichment Data verification Telemarketing services CONTACT US!

0415 500 580

Aby@source2create.com.au source2create.com.au

SIMON CARABETTA

BRIDGE OVER TROUBLED WATER

By Simon Carabetta, National Cyber Security Training Advisor

On the 26th of January 1970, legendary folk duo,

becoming far more nefarious and harder to defend

Simon and Garfunkel, released their seminal hit

against. Simply put, we keep people safe. That’s

album, Bridge Over Troubled Water. The album has

the ‘why’.

sold over 25 million copies worldwide, making it one of the best-selling albums of all time. At the time of its

Back in 2019 I was lucky, and privileged enough to

release, it was the best-selling album ever,

gain my first role in this industry, which has been my home for the past seven and a half years. I

However, at the end of 1970, the year in which the

transitioned from high school teacher to cybersecurity

album was released, Elvis Presley covered the title

awareness trainer. (Okay I’ve told this story many,

song in his 12th studio album, That’s The Way It Is. He

many times but it links to my article, trust me.)

performed the song live soon after, with Paul Simon in attendance. Immediately after this performance

In 2020 I was even luckier. I was offered the role of

Simon uttered the words, “How the hell can I compete

project and engagement coordinator with AustCyber,

with that?”

which became the CyberWest Hub. I loved that role, and still look back fondly on the times when I had

Which brings me to the point of this piece, in my

opportunities to help build and grow our industry, not

favourite cybersecurity industry publication, Women

just in WA, but throughout Australia. I got to work

in Security Magazine. That point is: we shouldn’t

with startups, academics, not-for-profits and very

compete. We’re not in this industry to boost egos,

cool cybersecurity professionals, some of whom have

boost salaries, boost our professional profiles. We

become lifelong friends.

choose cybersecurity because it’s a purpose, a mission if you will. There is no ‘I’ in cyber, but there

In 2021 I even had the amazing honour of being

is a ‘Y’.

awarded the Male Champion of Change title at Source2Create’s own Australian Women in Security

62

Why cyber? We choose the mission because it’s

Awards, a title I still hold proudly and dearly. And I vow

important. We defend organisations and individuals

to continue advocating for change in cybersecurity

from the many present threats; threats that are

every day.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

It was during this time that I made one major mistake:

regarded as one of the greatest song-writing duos of

I let my ego get in the way and dictate my direction. I

all time. Elvis Presley is also widely regarded as one

resigned from my role believing that something bigger

of the greatest rock stars and singers of all time. Was

and better was out there. It wasn’t.

Elvis a great songwriter? Not really. Did Simon and Garfunkel have flair and rock star appeal? Not really.

It took me a good two years of soul searching in the industry to finally come to the realisation that

Each was a master of their own area within the wider

everything I was doing, every job I applied for, every

music industry. Similarly, we should all recognise that

time I involved myself in industry events, every time I

we each have our own specialisation and area within

spoke about past achievements was ego driven.

cybersecurity. This isn’t to say we stay in that lane all the time, but that we should certainly never gatekeep

Was I building bridges? Perhaps some, inadvertently.

our domain.

But was I intentionally building them? No, I wasn’t.

My last message in this article is to say to each and I kept seeing others achieve and I kept asking myself

every cybersecurity professional out there today: build

the same question my namesake asked (apparently,

a bridge and guide others. Take down the walls and

I was named after Paul Simon): “How the hell can I

gates that isolate your specialisation.

compete with that?” Now, in 2026, I’m more settled, more about building bridges (yes, I have also burnt

We’re all members of a team. There is no ‘I’, but there

some, but that’s a story for another time) and I’m

is a ‘Why’. Ask yourself every single day before work:

more about guiding others over troubled waters to the

why cyber? That will help you drop your ego at the

safe shores of a cybersecurity career.

door and be the team player we all desperately need in our industry.

But let’s go back to Elvis’ rendition of that famous song and the lesson we can take from Paul Simon’s reaction. Simon and Garfunkel are still widely

I S S U E 30

www.linkedin.com/in/simoncarabetta

WOMEN IN SECURITY MAGAZINE

63

MEET THE JUDGES FOR THE 2026

Tara Dharnikota CISO at Victoria University

Alana Lundy CIO and CISO for Department of Social Services

Cairo Malet Senior Manager / Deliver Lead - Cyber Security Services at Fujitsu

Dai Head Awa Me

Helen McLeish Chief Cyber Security Officer at East Metropolitan Health Service WA

Jackie Montado Chief Digital and Technology Officer at Wesfarmers Industrial and Safety

James Ng CISO at Insignia Financial

Jasmin Principa Con at Deci

Maxine Harrison CISO from Department of Energy, Environment and Climate Action

Meagan O'Mahony Director of Security at Zip Co

Mona Sidhu Cyber Security Education and Awareness Manager at NSW Department of Education

Nadia Region Manag Amazon

Sam Fariborz CISO at David Jones

Sana Rashed CISO at HSBC

Sharin Yeoh Technical ISO at Systematic

Tams ICF Exec Diversity Coachi

WOMENINSECURITYAWARDS.COM.AU |

6 AUSTRALIAN WOMEN IN SECURITY AWARDS

Dr Greg Adamson CISO at Department of Transport and Planning

isy Wong of Security areness at edibank

Derek Winter CISO at UNSW

Doris Tidd CISO at Intellihub

n McCrudden al Recruitment nsultant ipher Bureau

Jenna Whitman Head of Security Operations and Deputy CISO at Vocus

John Taylor Group Executive | CIO | CTO | CISO

a Hammoud nal Security ger - APAC at n Web Services

Neha Sharma Industry CISO

Nikita Newell CISO at Lendlease

Peter Gigengack Director Cyber Security | Capability at the Department of the Premier and Cabinet of WA

sin Jowett cutive Coach & y Consultant at ing To Thrive

Tamsyn Harris Director of Scam Prevention at Optus

Tharaka Perera CISO at Estia Health

Wayne Rodrigues Board Member Membership Director at ISACA Melbourne Chapter

#2026WISAWARDS

Hayley van Loon CEO of Crime Stoppers International

Kate Raulings Lukasz Gogolkiewicz CISO Head of Cyber Security at Environment Protection for Accent Group Authority Victoria

Roxanne Pashaei Director Cyber Security Operations at Western Sydney University

JAY HIRA

IF DOORS WON’T OPEN, BUILD THE BRIDGE TOGETHER

by Jay Hira, Cyber Director – Financial Services, KPMG A reflection on strength, belonging and the responsibility that comes with leadership.

I grew up believing that strength was something you

“A show of strength,” she said, “is not flying like

earnt on your own.

Superman or fighting to win. Strength lies in building a strong community of people around you. That is the

Where I came from, survival shaped that belief early.

superpower you need to learn.”

You worked harder. You aimed higher. You learnt to compete, because falling behind often meant

I heard the words, but, at that time, I did not

disappearing altogether. For years, I carried that

understand them. It took years, and being in many

mindset with me. I believed progress came from

rooms where decisions were made, for their meaning

persistence alone, from finding the right door and

to become clear.

pushing until it opened.

We like to believe that hard work is sufficient, that Then, one afternoon, that belief fractured.

talent rises and that merit speaks for itself. These are comforting beliefs. They are also incomplete.

I was twelve years old, sitting beside my grandmother in an autorickshaw on the way to the hospital. I

I learnt this the hard way. Capability and commitment

had fallen from a terrace while trying to prove I was

are rarely the problem. Progress stalls when people

stronger than my friends. For a brief moment, I had

do not know the rules because no one has taken

felt powerful. That feeling disappeared the instant my

on the responsibility of explaining them, when their

wrist hit the ground.

voice is present but not weighted, when decisions are shaped elsewhere by those already closest to power.

She was quiet for most of the ride. When I finally tried to explain myself, she stopped me.

66

W O M E N I N S E C U R I T Y M A G A Z I N E

Access, I have learnt, is not the same as belonging.

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

Being invited into the room does not guarantee you will be heard. Being present does not mean you participate in decision making. Representation without influence is fragile, and often fleeting.

Belonging requires something more enduring than representation; it requires agency.

For a long time, I waited for the doors to open.

Eventually, I realised that waiting was a choice I had made.

What changed was not my ambition, but my understanding of responsibility. Progress does not

My grandmother taught me that strength is

come only from individual contributions. It comes

proven, not through individual wins but through the

from people who choose to widen the path for others;

communities we build. Years later, I understand her

quietly, consistently and with intent.

with greater clarity.

Sometimes that means bringing someone into a

When doors don’t open for you, building the bridge

conversation from which they have been excluded.

together is not an act of defiance, it is an act

Sometimes it means speaking a name in a room

of leadership.

from which that person is absent. Sometimes it means explaining rules that have never been written down, but always enforced. These moments rarely

www.linkedin.com/in/jayhira

attract attention. They are also the moments when careers change direction. This is the work that shapes cultures.

ABOUT THE AUTHOR Jay Hira is a cyber security practitioner, lifelong

I am acutely aware that I did not succeed alone. There

learner, and advocate for inclusion. With nearly

were people who spoke for me before I had a voice.

two decades of global experience, he has helped

There were people who trusted my intent before

more than 100 organisations transform cyber

others trusted my credentials. There were people who

risk into opportunity by making security simple,

used their influence, not to advance themselves but to

accessible, and a driver of growth. Known for his

create space for me to advance. Their actions stayed

pragmatic, people-first approach, Jay simplifies

with me long after those moments had passed. I carry

complex challenges to deliver actionable

those memories with me.

advice that empowers teams and strengthens resilience. He values diverse perspectives

This is why I mentor with intent, not optics. It is

and believes the best solutions arise from

why I sponsor rather than simply advise, and why I

collaboration and continuous learning. Jay’s

pay attention to who is missing when decisions are

experience spans across the spectrum of attack,

being made. It is also why I invest time in making

defence, architecture, governance, strategy, and

cyber security simpler and more accessible, not

transformation, with a strong focus on building

as a charitable gesture, but as a commitment

high-performing, inclusive teams. He simplifies

to participation.

security, inspires authentic leadership, and ensures security serves as a force for good in

Because, once you see where the gaps are, neutrality

every organisation.

is no longer an option.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

67

ADRIANA JONES

BRIDGING THE CYBERSECURITY GAP: PROTECTING THE MOST VULNERABLE IN A DIGITAL WORLD

by Adriana Jones, Engineer, Cybersecurity Advocate and founder of The Innocent Souls Project (TISP) Before transitioning into cybersecurity I worked in construction. With a background in civil engineering I’ve always been fascinated by how bridges function.

At their core bridges connect two points and enable weights to be carried safely between these points.

But what makes them truly effective is not just the connection, it’s the precision. Every structural component must work in unison. If one fails, the entire system is compromised.

Cybersecurity faces a similar challenge. If we are to build a meaningful bridge between cybersecurity and the broader community, particularly parents, educators and children we must understand that there is no single solution to the problem. We are dealing with a system, one that requires multiple components working together seamlessly to ensure information is not only transferred but understood, trusted and applied. This is the foundation of The Innocent Souls Project.

68

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

It was founded with the mission to translate

• an educator may be responsible for guiding

cybersecurity into something practical and

children’s digital behaviour without formal training

accessible. It focuses on making digital safety

in cybersecurity.

tangible for those who need it most. The reality is that traditional cybersecurity frameworks were never

Children, however, represent the most critical,

designed for everyday families or early childhood

and vulnerable, audience. Their interaction with

environments, yet these are the frontlines where risk

technology is not just technical; it is behavioural

is rapidly increasing.

and psychological. They are exposed to risks such as grooming, manipulation and social engineering

COMPONENT ONE: UNDERSTANDING THE AUDIENCE

long before they have the cognitive ability to

Most cybersecurity initiatives fail at the first step:

requires more than awareness; it requires early, age-

they speak at people, not to them. Parents, carers,

appropriate intervention.

recognise such risks. Addressing these risks

educators and childcare professionals are often technical background to do so. Treating them as one

COMPONENT TWO: STRATEGIC COMMUNICATION

group is a mistake. Each has different responsibilities,

Once the audience is understood, the next challenge

different levels of exposure to technology and

is to communicate effectively with it. Cybersecurity

different pressures.

language is often complex, technical and

expected to manage digital risks without having the

inaccessible. Translating it into something meaningful For example:

requires creativity, strategy and a deep understanding of human behaviour. This is where The Innocent Souls

• a parent may struggle with managing screen time and social media risks.

• a childcare worker may handle sensitive data

Project differentiates itself. It incorporates a multilayered approach to ensure cybersecurity practices are adapted.

without understanding data security principles.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

69

• For children. The project has developed audio-

storytelling, education and behavioural insight, the

based storytelling tools designed to subtly

project ensures information is not just received, but

introduce concepts like online grooming and

acted upon.

social engineering. Rather than relying on fear-based messaging these resources help

WHY THIS MATTERS NOW

children develop, understand and retain critical

Children are growing up in a digital environment that

thinking skills.

evolves faster than the systems designed to protect

• For educators and childcare professionals. The

them. While industries invest heavily in securing

Innocent Souls Project’s CyberSafety Program

infrastructure and data, the human layer especially

addresses a major gap in the sector: limited

within families and early education remains critically

awareness of cybersecurity, data privacy and

underdeveloped. This is the gap. It is precisely where

digital risk. It equips professionals with practical

The Innocent Souls Project operates.

knowledge aligned with their duty of care, enabling them to identify and respond to both online and

The project is not just an awareness initiative. It is

offline threats.

a structured approach to embedding cybersecurity

• For parents. The project delivers targeted content that highlights the realities of children’s exposure

thinking into everyday life, starting with those who are least equipped yet most at risk.

to digital platforms. It goes beyond awareness, guiding parents towards decisive, informed

If we do not achieve this goal the repercussions will

actions to protect their children in an increasingly

be far from theoretical. They will manifest as real

complex online environment.

human consequences affecting the most vulnerable among us. The Innocent Souls Project is dedicated to

COMPONENT THREE: DELIVERY THAT DRIVES IMPACT

preventing this from happening in our society.

Even the best message fails if it is delivered poorly.

Different audiences absorb information in different

au.linkedin.com/company/tisp-the-innocent-souls-project

ways. A one-size-fits-all delivery model is ineffective, particularly in cybersecurity awareness. The success

www.instagram.com/tisp_project

of any initiative depends on meeting people where they are, both intellectually and emotionally.

theinnocentsoulsproject.com.au

The Innocent Souls Project prioritises accessibility over complexity, engagement over instruction and practical application over theory. By combining

70

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

MARINA AZAR TOAILOA

SAFE KIDS, STRONG COMMUNITIES: WHY CHILD PROTECTION IS A SOCIAL ISSUE, NOT JUST A FAMILY ONE

by Marina Azar Toailoa, Founder of the Mummy Safety Security Project

I began the Mummy Safety Security Project because

This understanding is consistent with leading child

I worked on the frontline and witnessed too often the

protection frameworks. The United States Centers

harm that can be inflicted when children are exposed

for Disease Control and Prevention (CDC) states

to risk.

that preventing child abuse and neglect depends on creating safe, stable, nurturing relationships and

In real life abuse, grooming, neglect, exploitation and

environments, and that everyone has a role to play.

preventable safety failures do not occur in isolation.

They occur in homes, online spaces, schools,

UNICEF similarly explains that violence against

neighbourhoods, transport settings, community

children occurs in every country and across all

venues and other everyday places where adults

segments of society, and that coordinated action

and systems are meant to recognise danger and

from governments, schools, justice systems, health

respond early.

services, community organisations, parents and the media is required to counter it.

Through analysing security incidents and the gaps

72

that allowed offenders to cause harm I came to

In Australia, the Safe and Supported national

one clear conclusion: child protection is not only

framework recognises that keeping children

a parenting issue or family concern; it is a broader

safe means strengthening families, supporting

social responsibility that requires education, vigilance

communities and addressing the wider systems that

and collaboration across the whole community.

place children at risk of harm.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

These perspectives make one thing very clear: when

This is the heart of my work. The purpose of the

a child is harmed the problem is rarely limited to one

Mummy Safety Security Project is to protect children

household. Often, social silence, weak safeguards,

through education and collaboration. I teach children

poor communication, missed warning signs or

age-appropriate ways to stay safe and I empower

system failures allow the danger to spread.

parents to continue those safety conversations at home. My approach is shaped by real-life frontline

One of the greatest myths in child protection is the

experience, not theory alone.

belief that ‘good families’ naturally keep children safe and that everything else is a private matter. In

I have seen how small oversights can become major

reality many children who experience harm come

vulnerabilities, how offenders identify opportunities,

from families who love them but do not always have

and how communities often react only after a tragedy

the information, support or confidence to identify

instead of before it. Being a voice for the voiceless

risk early.

means refusing to wait until harm is visible beyond doubt. It means helping adults understand that

Some parents do not know how offenders manipulate

prevention is not fear-based parenting; it is informed,

trust. Others feel uncomfortable discussing body

calm, practical protection built into everyday life.

safety, online safety, boundaries, consent, secrecy or coercive behaviour in age-appropriate ways. Some

A community that takes child protection seriously

assume their child will automatically speak up if

does not place the burden on parents alone. It asks

something is wrong, even though fear, confusion,

whether schools are teaching protective behaviours

shame, loyalty or grooming can keep children silent

clearly and consistently. It asks whether sporting

for long periods.

clubs, faith communities, childcare settings and youth organisations have strong safeguarding practices

That is why education matters so deeply. Child

and adults who know what warning signs to look

protection becomes stronger when parents are

for. It asks whether neighbours, extended family

empowered with practical knowledge and when

members and local leaders know how to respond

children are taught, in age-appropriate ways, how to

when something feels wrong.

recognise unsafe situations, trust their instincts and seek help from safe adults.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

73

This linkage matters, because communities are not all the same, and protection strategies must be responsive to lived realities. Families experiencing disadvantage, trauma, disability, violence or social isolation may face additional barriers to safety.

Aboriginal and Torres Strait Islander children and families, in particular, must be supported through culturally informed, community-led approaches that address both present risks and the effects of past system failures.

Therefore a serious social response to child protection does not simply demand that families It also asks whether services are connected enough

‘do better’; it invests in the conditions, supports and

to respond before risk becomes a crisis. The CDC

partnerships that make safety more achievable.

notes that communities can support child safety by increasing access to childcare and education,

The messages at the centre of this article are simple

creating safe supervised spaces, supporting

but urgent. Safe children are created by strong

evidence-based parent education and discouraging

communities. Families remain central, but they

violence more broadly.

cannot, and should not, carry this responsibility alone.

If we want to reduce harm we must educate children

These are not small additions to family life; they

without frightening them, equip parents without

are part of the protective environment every child

blaming them and build communities that recognise

deserves. Importantly, child protection is also

risk early and act together. We must listen to lived

a question of culture. UNICEF highlights that

experience, learn from real-world incidents and close

communities must tackle harmful behaviours and

the gaps that offenders exploit. Above all, we must

social norms, not only individual incidents.

remember that many children cannot advocate for themselves. They depend on adults to notice, to

When societies minimise children’s fears, excuse

teach, to speak and to act.

predatory behaviour, normalise secrecy, ignore online exploitation or dismiss disclosures because they

That is why I continue this work. Through the Mummy

are inconvenient they create the conditions in which

Safety Security Project I aim to bring real-life insight,

abuse can continue. In contrast, strong communities

evidence-based safety education and collaborative

create cultures where children are believed, parents

action into the spaces where children and families

are supported, professionals are accountable and

need them most.

safety education is normal rather than optional. In such communities, protective conversations happen

Protecting children is not a side issue, and it is not a

before an emergency.

responsibility that begins and ends at the front door of one home. It is a social duty. When we treat it that

Adults understand that child protection is active, not

way, we do more than prevent harm. We build safer

passive. They know that silence protects offenders

children, stronger families and stronger communities

while informed collaboration protects children. The

for everyone.

Australian Safe and Supported national framework is especially valuable because it links child safety with prevention, early intervention, stronger workforce

www.linkedin.com/in/marina-azar-toailoa-66259511a

capability, shared decision-making and culturally safe responses.

74

W O M E N I N S E C U R I T Y M A G A Z I N E

www.instagram.com/mummysafetysecurityproject

M AY • J U N E 2026

MELANIE NINOVIC

GRAD GIRLS SYDNEY: A PROGRAM TO INSPIRE

by Melanie Ninovic, Student Engagement Coordinator for Grad Girls at Women 4 Stem Not-for-profit organisation Women 4 STEM has been

• develop their personal and professional skills,

delivering programs to increase the participation,

build their personal brand and create standout

retention and advancement of women in STEM

job applications.

since 2005.

• receive guidance on career pathways.

• network with industry-leading sponsors through

One such initiative, Grad Girls, is designed to inspire and empower female and gender-diverse students to explore careers in STEM. After ten successful years in Victoria, the program has now been launched in Sydney, officially commencing on 15 April.

76

partner-led events and a dedicated careers expo.

• connect with like-minded students and professionals.

• gain valuable insights into their chosen industry and graduate job ready.

The approximately 40 students participating in the

At the official launch students had the opportunity to

program’s inaugural year will have the opportunity to:

meet and hear from talented industry professionals.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

I N D U S T R Y

P E R S P E C T I V E S

The event opened with

The launch also provided students with support in

Melanie Northrop,

building their professional brand: photographers on

program director, who

site captured headshots and volunteers assisted with

described the experiences

LinkedIn profile development.

students can expect in the year ahead: a wide range

One of our volunteers, Melanie Ninovic, moderated a

of events, networking

panel exploring the many pathways into and through

opportunities and ways

a career in STEM. She was joined by Amy Berridge,

to connect with the

Motorola Solutions, Helisha Patel, Logicalis; Nita

program’s volunteers, all

Norman, IAG and Aditi Jain, Cognizant.

of whom have careers in STEM. We then heard from Canva’s Jasmina Zito, threat intelligence and red team lead, who described her unconventional journey into cybersecurity, the challenges she faced along the way, and who gave some insights into her current role.

The panellists shared their diverse career journeys.

Some had roles in agriculture and some in retail.

Following this, students had the opportunity to

Others had considered entirely different paths, such

connect with our partners: Clicks IT Recruitment,

as accounting.

Motorola Solutions, IAG, Cognizant and Logicalis.

They offered valuable career advice, industry insights

A consistent message throughout the discussion

and practical tips on applying for graduate programs.

was the importance of embracing opportunities as they arise, rather than holding back due to self-doubt.

The panel discussion highlighted that many women often lack the confidence to advocate for themselves, particularly in professional environments.

At its core, the purpose of the Grad Girls program is to inspire, educate, and empower female and gender‑diverse students to pursue and succeed in STEM careers.

Grad Girls would like to extend a sincere thank you to all the volunteers and partners who contributed to this significant milestone. We look forward to an exciting year ahead. www.linkedin.com/in/melanie-cybers

I S S U E 30

WOMEN IN SECURITY MAGAZINE

77

KAREN STEPHENS Karen Stephens is the co-founder and CEO of BCyber. After more than 25 years in financial services, Karen moved into SME cybersecurity risk management. She works with SMEs to protect and grow their businesses by demystifying the technical aspects of cybersecurity and helping them to identify and address cybersecurity and governance risk gaps. She was named inaugural Female Cyber Leader of the Year at the 2023 at the CyberSecurity Connect Awards in Canberra and has been a finalist in 2024 and 2025 in the Australian Cyber Awards for Cyber Security Professional of the Year - Professional and Financial Services.

C O L U M N

Navigating the digital playground to make it a magical, but mindful, experience Back in 2024 I posed a question common in many

As parents and/or guardians we are the primary

families: “How young is too young to start a cyber

privacy custodians for our children. While it is natural

safety journey?” My answer has not changed: “You are

to want to share milestones like births, first days of

never too young to begin.”

school, graduations, etc on social media, we must be mindful of the digital footprint we are creating for

Cybersecurity isn’t only about complex code; it’s

our children.

about modelling good cyber behaviour and building habits that protect our children’s privacy; now and in

So, welcome to the new job you didn’t know you

the future.

had: that of the Family Privacy Custodian (FPC).

You’re now playing the long game for your child’s

When my children were young, I often found myself

digital future. So, before you hit ‘share’, run through

serving as the family chauffeur for kindergarten

this checklist to ensure you are putting their data

playdates. My music, deemed ‘cringeworthy’, was

privacy first.

turned down so as not to upset young ears. However, this meant I was privy to back seat conversations,

WARNING: By asking these questions, you are

which went something like this:

choosing a path that, while perhaps not always the most popular, is the safest for a child’s digital journey.

Child A: Did you want to play <insert well known game>? (NOTE the visitor had brought along their own

The ‘starter’ FPC pre-post checklist (You can add

wi-fi enabled iPad — I have no words!)

your own items)

Child B: No. My Mum won’t let me.

Child A: Why?

• Does your post reveal hidden identifiers?

Child B: Randoms!

Even if your child’s face isn’t clear, check if the

Child A: Randoms? What are Randoms?

background shows your home address, car licence

Child B: I don’t know, but my Mum doesn’t like them, so

plate, school name, sports team or other identifier.

neither do I.

• How will their future adult self feel? Ask yourself if this image or story is something they would be

I can only guess that this was the result of my regular

comfortable having a future employer or partner

“if you don’t know someone in real life, you don’t know

seeing ten or twenty years from now.

them online” rant (I mean, discussion). So, while the

78

• Am I playing the long game? Remember; once

message had been finessed, the underlying theme

information is online, it is pretty much permanent.

was clearly being absorbed.

Consider if a specific moment needs to be public

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

or if it should remain a private family memory.

• Could your post be used for ‘unauthorised activities’? Be mindful that photos and information can be harvested by people you don’t know for purposes you would never condone.

• Have I considered the deepfake risk?

• Use parental controls wisely. Frame parental controls as a helpful tool for safety rather than a restriction to ‘work around’.

• Prioritise password hygiene. Teach children the importance of strong, private passwords from the start.

Acknowledge that personal information and

• Establish tech-free zones. Create boundaries

images can now be easily and realistically

such as keeping devices out of bedrooms.

manipulated by AI. • Is this an oversharing trap? While a wish to share

The internet can be a magical place of wonder,

news like births or graduations is understandable,

but it requires a foundation of safety. By starting

evaluate if you are sharing too much detail about

the discussion early and putting data privacy first

your child’s daily routine or year group.

you are giving your children the tools they need to navigate the digital landscape with confidence. After

And while I’m on my soapbox…

all: you can never be too young to start your cyber safety journey.

Empowering your children means moving beyond ‘policing’ towards modelling good behaviour. Children are more likely to follow the rules when they see their

www.linkedin.com/in/karen-stephens-bcyber

parents and/or guardians doing the same. Here are practical ways to guide your family’s cyber journey.

• Respect age minimums. Social media platforms

www.bcyber.com.au

x.com/bcyber2

karen@bcyber.com.au

youtube.bcyber.com.au/2mux

have age requirements for a reason; stick to them.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

79

CAREER PERSPECTIVES

HOLLY BRETHERTON

THE MOVEMENT RESHAPING AUSTRALIA’S CYBER WORKFORCE AND WHY WOMEN ARE CENTRAL TO IT

by Holly Bretherton, Industry Initiatives Manager, ACS and Senior Responsible Officer, Cyberpath

Australia is on the cusp of one of the most significant

1.

define clear cyber roles and competencies.

transformations the cybersecurity profession has

2.

establish recognised learning and

ever seen. CyberPath, a national pilot program funded through the Australian Government’s Growing and

career pathways.

3.

Professionalising the Cyber Security Industry program, is reshaping how cyber capability and standards are

assessment and accreditation.

4.

defined, assessed and recognised.

reduce barriers to entry and support diverse talent.

5.

The initiative is led by the Australian Computer

validate practitioner capability through

align Australia with international standards and workforce expectations.

Society (ACS) in partnership with the Australian Information Security Association (AISA), the

Unlike traditional accreditation schemes, CyberPath

Australian Cyber Collaboration Centre (Aus3C) and,

is a once‑in‑a‑generation opportunity to shape what

critically, the Australian Women in Security Network

it means to be a cyber professional in Australia. It is

(AWSN), a strategic consortium partner that helps

designed to be industry‑led and community‑driven,

ensure diversity and inclusion are embedded from the

ensuring practitioners, career changers, students

ground up.

and skilled migrants all have a voice in shaping the future workforce.

At its core, CyberPath is building a national professionalisation framework that will:

82

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

C A R E E R

P E R S P E C T I V E S

Women remain significantly under-represented in

• Embedding diversity and inclusion by design

cybersecurity and systemic barriers such as unclear

Unlike frameworks that retrofit inclusion,

roles, hiring practices, inconsistent expectations and

CyberPath integrates inclusion from the

non-inclusive cultures continue to limit participation

beginning. AWSN’s role as a consortium partner

and progression. RMIT research, based on 2021

ensures women’s voices shape every stage

Census data, estimated women represented 17

of development.

percent of the Australian cybersecurity workforce.

• Reducing imposter syndrome through clear standards

CyberPath has the potential to directly address

Ambiguity fuels imposter syndrome. Clear

challenges through:

competency frameworks help practitioners understand what ‘good’ looks like, providing

• Creating clarity where ambiguity harms women

confidence and direction: particularly

Ambiguous job titles, inconsistent expectations

important for women who often face additional

and informal hiring practices often disadvantage

confidence barriers.

women, especially those entering via nonclarity, transparent competency expectations and

WHY WOMEN MUST BE CENTRAL TO THE CO‑DESIGN PROCESS

standardised assessment models, reducing bias

CyberPath is not being built behind closed doors.

and leveling the playing field.

It is an iterative, collaborative, national effort that

traditional pathways. CyberPath can provide

• Recognising diverse pathways into cyber

depends on broad participation. The program’s

Many women enter cyber through career

consultation strategy spans educators, employers,

changes, adjacent roles or self-directed learning.

practitioners, career changers, DEI groups and more.

CyberPath’s support for recognition of prior

Women must be active participants in this process for

learning (RPL) and recognition of prior experience

several reasons.

(RPE) ensures capability beyond formal qualifications is recognised.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

83

• Ensuring standards reflect women’s real experiences Women often face barriers such as limited

adjustments support women balancing multiple responsibilities.

• A national standard that reduces bias in hiring

access to mentors, biased promotion practices,

and promotion

carer responsibilities and reduced access to

Standardised role definitions and competency

sponsorship or professional development.

expectations reduce reliance on subjective

Without women’s input, these realities risk

hiring practices, ‘culture fit’ assessments, and

being overlooked.

• Influencing how competency is defined

informal networks.

• Strengthened professional identity and

and assessed

reduced attrition

Assessment models can unintentionally reinforce

CyberPath can strengthen belonging and reduce

bias. Women’s involvement is critical to ensuring

isolation, factors that disproportionately affect

assessments are inclusive, flexible and reflective

women. CyberPath can give people a clearer

of real-world capability rather than narrow

sense of who they are in their work, strengthening

definitions of expertise.

belonging through common standards, language

• Shaping learning pathways that support women’s progression

and values.

• A platform for women’s voices and leadership

The program’s mandate includes reducing barriers

AWSN’s leadership role as a consortium partner

to entry and retaining diverse talent. Women’s lived

signals that women are central to Australia’s cyber

experience is essential to designing pathways

capability, providing visibility and influence for

that are flexible, accessible and supportive across

future generations. This visibility matters.

career stages. professionalised workforce

THE FUTURE OF CYBER BELONGS TO ALL OF US

CyberPath can strengthen professional identity,

CyberPath represents a rare opportunity to build a

career progression and recognition. Women

national profession from the ground up. It is a living

must help define what leadership and lateral

framework, shaped through ongoing consultation, and

progression looks like in a professionalised cyber

its success depends on broad participation. Women

workforce so that pathways are not built around

across the ecosystem are encouraged to be part of

outdated or exclusionary norms.

the CyberPath journey and to help define it.

• Defining what leadership looks like in a

HOW CYBERPATH IS ADVANCING THE REPRESENTATION OF WOMEN While the framework is still being codesigned,

REGISTER EOI’S AND STAY INFORMED HERE: cyberpath.acs.org.au

several principles are emerging as critical to ensuring inclusivity.

CONTACT THE CYBERPATH PROGRAM TEAM AT:

• Clear, portable, recognised credentials Competency based accreditation provides external

cyberpath@acs.org.au

validation and portability across employers, particularly valuable for women returning from

AUTHOR'S DETAILS:

career breaks or transitioning into cyber.

• Inclusive learning and assessment pathways

www.linkedin.com/in/holly-bretherton-9852978

Flexible evidence portfolios, recognition of informal learning, neurodiversity-affirming assessment practices and reasonable

84

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

UNLEASHed

? us in jo to y ad re .

26 20 . ne ur bo Mel Step into the spotlight as a champion of Australia’s vibrant, diverse, and resilient security sector.

By joining the Australian Women in Security Awards as a sponsor, you’ll be recognised as a leader driving innovation and inclusion—while supporting the remarkable trailblazers shaping cyber, IT, and protective security.

Help foster a future where everyone can thrive.

Become a sponsor.

Register your interest today!

Contact Aby at aby@source2create.com.au womeninsecurityawards.com.au

TO THE SPONSORS PHOTO BOOTH SPONSOR

CATEGORY SPONSOR

EMERALD SPONSOR

EMERALD SPONSOR

WOMENINSECURITYAW

S OF THE CATEGORY SPONSOR

CATEGORY SPONSOR

CATEGORY SPONSOR

EMERALD SPONSOR

EMERALD SPONSOR

MERCHANDISE SPONSOR

WARDS.COM.AU | #2026WISAWARDS

MADHURI NANDI Madhuri is a cybersecurity leader with nearly two decades of experience across strategy, governance, risk, compliance, product and engineering. She was recognised with a Global Cyber Security Leader of the Year award. She holds a master’s degree in cybersecurity digital forensics and serves as head of security at Nuvei and as chair of the AWSN board. She is the author of the Cyber Smart book and creator of a cybersecurity awareness framework. She is known for her strong voice in inclusive leadership, mentorship and community building.

The work that connects us: Building bridges through real cybersecurity leadership Security does not fail in isolation. Failure often begins

into decisions, turning policy into something teams

in the spaces we do not pay enough attention to:

can follow, and making sure that what is designed

between teams, between intent and execution, and

holds up in the way people really work. That is

between what we design and how things actually

bridge building.

work. In those spaces, what is missing is rarely another control, it is a connection. This reflects

I have seen bridge building play out in different ways

broader industry patterns. The 2024 Data Breach

over time. In one instance, a control was technically

Investigations Report by Verizon shows that more

in place, access reviews had been completed,

than two thirds of breaches involved a human

reports had been generated and everything appeared

element, reinforcing the argument that many security

compliant. However, when we looked closer, the

challenges are not purely technical but rooted in how

reviews were happening without full context. Teams

people, systems and decisions interact.

were approving access without clear visibility, and ownership was not well understood. No individual

In cybersecurity we spend a lot of time strengthening

control measure was broken, but these control

systems, but the work that makes those systems

measures were not achieving their goals.

effective is quieter. It is translating risk assessments Bridge building in cybersecurity is often misunderstood. It does not entail collaboration or communication alone. It requires the intentional connection of risk to business decisions, governance to day-to-day operations, and accountability to clearly defined ownership. Without these connections, even well-designed frameworks struggle to deliver outcomes.

One of the most common examples of the lack of these connections is in governance. Controls are often treated as comprising policies to be documented and requirements to be met. In reality, governance works only when actively lived.

88

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

C O L U M N

In one case, third-party risk assessments were

security considerations were raised only at later

being completed consistently, vendors were

stages. By involving a broader set of voices earlier,

providing evidence, policies were being reviewed and

including those closer to delivery, the conversations

compliance requirements were being met. However,

changed. Risks were understood sooner and solutions

there was limited visibility into how these controls

became more practical and easier to adopt. It was

were being maintained over time. So we moved

not a major structural change, just a shift in who was

from a one-time validation approach to ongoing

included and when.

governance by introducing periodic monitoring, clearer ownership across teams and simple

Similar gaps exist outside organisational

dashboards to track control effectiveness. The control

environments. Awareness of cybersecurity is growing,

itself did not change significantly, but how it was

but understanding does not always keep pace.

sustained did.

Many people know risks exist but few feel confident navigating them. Whether it is parents guiding their

Bridge building also shows up in the make-up of

children or individuals making decisions about privacy

conversational groups. In many organisations,

and digital behaviour, there is often a gap between

decisions are made in spaces that are not always

knowing and doing. Bridging that gap does not

visible and often the same voices dominate. Bridge

require complexity. It requires clarity and the ability to

building requires intentionally elevating voices

translate security into something people can relate to

that are not always represented in these spaces to

and act upon.

ensure decisions are shaped by a broader range of experiences and perspectives.

If there is one thing I have learnt it is that progress in cybersecurity does not always come from building

This bridge building includes recognising different

more. It comes from forging connections between

ways of thinking and working and creating

existing components, more clearly, more intentionally

environments where diverse cognitive and

and in a way that people can sustain.

accessibility needs are not just accommodated but are valued. I have seen the impact of bringing the

www.linkedin.com/in/madhurinandi

right people into the room early. In one case, a project was progressing with strong technical direction but

I S S U E 30

WOMEN IN SECURITY MAGAZINE

89

STUDENT IN SECURITY SPOTLIGHT

LINDSAY COUDERT

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

When I first considered cybersecurity, I, like many others I have to be honest, imagined it as hacking in

Lindsay Coudert is currently studying a Bachelor of Counter Terrorism, Security and Intelligence (Cyber Security) at Edith Cowan University Bachelor of Counter Terrorism, Security and Intelligence (Cyber Security) student at Edith Cowan University

a black hoodie, typing furiously on a keyboard what movies often portray. In reality, the field is much broader and more dynamic than that stereotype.

There are technical roles, but also analytical, investigative, and communication focused roles.

Discovering Digital Forensics and Incident Response (DFIR) has been especially exciting for me because it allows me to combine my love for solving crimes with cybersecurity. This broader understanding has made my journey much more enjoyable and fulfilling.

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice

I usually start by breaking the stereotype of

I aspire to work in Digital Forensics and Incident

cybersecurity being just a ‘hacker in a hoodie typing

Response ideally within an intelligence agency.

fast on a keyboard,’ which is what most people

My motivation comes from a deep fascination

see in movies, along with the “we’re in” once they

with forensic investigation, understanding crimes,

break into the mainframe. I explain that the field is

uncovering hidden evidence, and solving complex

actually incredibly diverse and that there are roles

puzzles. In high school I aspired to be a medical

that are highly technical, analytical, investigative, and

examiner and unfortunately situations came up

even strategic.

with family issues, but when I found cyber security through TAFE and I found myself really enjoying the

I highlight the thrill of uncovering cyber threats, protecting critical information, and solving complex puzzles that can

Forensics in the Advanced Diploma and it was a way for me to satisfy that dream but in a different sector so computer crimes instead of homicides which

have real-world impact.

really satisfied that opportunity of investigating and

To make it relatable, I

solving crimes.

often share experiences

categories to fit different

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

people’s skill sets which

I was really lucky and incredibly fortunate to get

from our Student Cybersecurity Club at ECU especially through CTFs which has multiple

92

helps people understand that

such a large amount of support from my friends,

there are places for a variety

especially those I met through the cyber security

of interests.

industry and have started my university journey

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

with. They were really supportive and encouraged

finished 10th and 13th respectively, in 2024 I was

me every step of the way especially when things

the only TAFE student on the team, which made that

got difficult.

placing on a nationwide level even more meaningful.

They have been incredible and I was nominated as

My family on the other hand didn’t take it well

their Industry Liaison when we first decided to have

because it went against the fact that they wanted me

our executive committee so the amount of trust that

to work with horses they wanted control over me, but

was placed in me to help them kickstart the club on

I had such a large support network I made it happen

their journey as their own official club was something

and I made it work, I loved what I study at Tafe, it’s

I was really proud of.

what drove me to pursue a Bachelor’s and even the possibility of a Masters by Research down the line.

What aspect of your cybersecurity studies excites you the most, and why?

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

My favourite aspect of my current course is the

For me the most memorable event would have to be

part of my TAFE studies. It is an area of work I find

when I started to attend RedRoom weekly events at

where you have to be curious and enjoy diving deep

ECU, it’s been so beneficial in my Capture The Flag

into investigations which is something I really enjoy

journey we competed in the Australian Cyber Games

doing, especially since I love reading my true crime or

in both 2024 and 2025 where the teams I was on

about air crash investigations. I really enjoy picking

I S S U E 30

digital forensics and Incident Response; I haven’t yet done that unit at university. I have done it as a

WOMEN IN SECURITY MAGAZINE

93

LINDSAY COUDERT

any. Especially with the focus on Intelligence in the

What is your preferred source for staying informed about cybersecurity trends and general information?

course I am doing which rewards finding information

Podcasts especially Darknet Diaries, Click Here, Risky

that is turned into an actionable report.

Business, Hacked to name a few. I love my podcasts;

up things to read and listen to and finding out what happened and how it happened, the why if there is

I love listening to something as I am on the train or

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

studying. My favourite of those is Darknet Diaries.

I am very active in the cyber community particularly

and websites, I follow CrowdStrike’s reports, Krebs

with organisations such as AISA, Students of Cyber

on Security, and the hacker news. But I would go to

and STOTM where I am one of the current members

podcasts typically that’s usually going to be my first

of the administration team members. It’s been really

source of information.

I really enjoy the way Jack presents and the way he brings in the investigators, the perpetrators and his overall ability to explain a scenario . For blogs

beneficial to be in these communities. You learn

speakers which has been beneficial to our members.

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

I’ve helped organise a guest speaker for AISA WA,

I have done a bit of looking at the start of my career,

and I was able to use my social networking for the

unfortunately it hasn’t been the best a bit of a mixed

ACS Foundation, where the WA Manager came

bag, especially with the private sector I always run

to do a LinkedIn and Resume writing workshop

into the same issue of not being qualified enough

for RedRoom.

because I didn’t go to university, or I run into the

more from conversations with people around you than you realise you do. It’s also been very beneficial to our club as we have managed to get some guest

issue of coming from a background as a blue collar worker so I don’t have the ‘traditional’ customer service. For the public sector and government agencies my experience has been really good I haven’t had a single problem apart from being in Perth and the agency I had done an interview for didn’t have a Perth office and being a dual citizen they had no idea when they could guarantee my clearance would be completed so it would mean dropping from my degree but I found the process a lot more positive and was a lot more hopeful than going to private where I could not even get an interview.

www.linkedin.com/in/lindsay-coudert-729696287

94

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

Join Us in Empowering

Future Leaders

! d e t n a W y it r u c e S in Students Are you a student passionate about shaping the future of security?

Do you have innovative ideas and insights to share with a global audience? Join us in contributing to the Women in Security Magazine and become a voice for the next generation of security leaders!

Why contribute?

Gain valuable exposure: Reach over 11000 subscribers globally and showcase your expertise to industry professionals.

How to get involved

Make an impact: Share your experiences, challenges, and aspirations to inspire others and shape the future of security.

Let us know you are interested.

We will send you a series of questions of which you can choose which ones you would like to answer.

Submit those back to us in an email.

We will then edit to be a concise and flowing edited Q&A.

Don't miss this opportunity to be part of a vibrant community of students driving change in the security industry.

Contact us today to learn more about how you can contribute to the Women in Security Magazine!

Contact: jane@source2create.com.au

is often much more subtle. A lot of the work is analytical, paying attention to patterns, noticing when something feels off, and thinking like an attacker to NATALIAH ALCALA-MAHARAJ

figure out where the weak points might be. It’s a mix of problem-solving, critical thinking, investigation and yes, quite a bit of coffee.

Currently pursuing a Master’s in Cybersecurity, Hacking and Cybercrime Investigation at University of Trinidad and Tobago. Also pursuing GIAC, GSEC, and GCIH at the WiCyS Security Training Scholarship in partnership with SANS Master’s in Cybersecurity, Hacking and Cybercrime Investigation student at University of Trinidad and Tobago

What I love most is that no two days are exactly the same. Whether it’s digging through logs, spotting unusual behaviour, or responding to a potential incident, you’re constantly being challenged to think differently and adapt. There’s always something new to uncover, which keeps things interesting.

I also like to remind people that you don’t need a traditional tech background to get into cybersecurity.

I’m proof of that. If you’re curious, willing to put in the effort, and open to learning, there’s absolutely a place

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

for you here.

About a year and a half ago, cybersecurity wasn’t

keep growing every step of the way. That’s what

even on my radar. My background is in Medical

makes it such a rewarding path.

For me, cybersecurity is exciting because it pushes you to think deeply, solve real world problems, and

Laboratory Technology, and my exposure to IT was

immediately drew me in was just how broad and

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

ever-changing the field is; there’s always something

When I first considered studying cybersecurity, I

new to learn, and no single path looks the same.

expected a clear and structured path, one where I

pretty limited. It all started with a simple curiosity about coding, and somewhere along the way, that curiosity led me into the world of cybersecurity. What

could complete a defined set of courses and emerge When I try to explain cybersecurity to people who

fully competent in the field. However, my experience

aren’t familiar with it, I usually start by clearing up a

has been quite different.

common misconception. It’s not just about “stopping hackers.” It’s really about understanding systems

I quickly realised that cybersecurity is an incredibly

on a deeper level how they work, where they’re

diverse field, made up of many specialties, each with

vulnerable, and how they can be both protected and,

its own pathways, tools, and certifications. From

if you’re not careful, exploited.

defensive roles focused on monitoring and protecting systems, to offensive roles that simulate attacks, to

96

I used to picture cybersecurity as something

areas like threat intelligence, governance, and even

intense and fast-paced, like what you see in movies.

hybrid functions like purple teaming, there is no

And while there are moments like that, the reality

single path that defines the field.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

Initially, this felt overwhelming, as there was no

This interest is also reflected in my CyberGEN.

obvious “right” route to follow. Over time, though, I

IQ assessment results, which showed a strong

began to understand why the field is structured this

alignment with defensive operations and analysis.

way. The attack surface in cybersecurity is vast and

In particular, my ability to detect patterns and

constantly evolving. In simpler terms, threats come

identify anomalies stood out as a key strength,

from many different directions, and attackers use a

which naturally aligns with the work done in a

wide range of methods. Because of this, defenders

SOC environment.

must be just as diverse, specialized, and adaptable in their approach.

Starting in a SOC allows me to build a strong foundation in monitoring, detection, and analysis,

This experience also taught me the importance of

which I see as essential for progressing into incident

understanding where you want to operate within the

response and handling more complex security events

field. Rather than trying to learn everything at once,

over time.

I’ve learned to focus my efforts on areas that align

something I now appreciate. The diversity of

Who or what has been the most influential factor in shaping your journey in cybersecurity so far, and how has it impacted your career aspirations?

cybersecurity is what makes it both challenging and

One of the most influential factors in shaping my

rewarding, and it has allowed me to approach my

journey in cybersecurity has been my involvement

learning with more clarity and intention.

with Women in CyberSecurity (WiCyS), but that

with my strengths and interests.

What initially felt overwhelming has become

impact is best understood in the context of where

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

I started.

Upon graduation, I aim to begin my career as a

full time and pursuing

Security Operations Center (SOC) analyst, with the

my master’s degree,

long-term goal of progressing into incident response.

my journey into

As a single mother, while working

cybersecurity has been I’m drawn to this path because it focuses on real-

both demanding and

time threat detection and investigation. The idea of

deeply self-driven.

monitoring systems, identifying unusual activity, and

While I was making

understanding what is happening behind the scenes is something I find both challenging and engaging.

Through my hands-on experience, I’ve discovered that I enjoy working with logs, analysing alerts, and piecing together events to understand system behavior. It feels like solving a puzzle, where patterns, anomalies, and small details reveal the bigger story.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

97

NATALIAH ALCALA-MAHARAJ

were still moments

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

of uncertainty about

One of the most meaningful experiences in my

progress through study and hands-on practice, there

whether I truly

cybersecurity journey so far has been being selected

belonged in

for the Women in CyberSecurity (WiCyS) Security

the field.

Training Scholarship program and honestly, it’s something that still feels a little surreal to look

Becoming part

back on.

of WiCyS marked a turning point for me.

Coming from Trinidad and Tobago, opportunities like this, especially ones that offer access to world-class

What impacted me most was

training and certifications aren’t always easy to come

the environment. It genuinely

by. So being part of this program meant stepping into

felt like a community where

spaces and learning environments that I might not

people want to see you succeed.

have otherwise had access to, and that in itself was

That level of support and

incredibly powerful.

encouragement played a significant role in helping me build confidence in myself and my abilities.

What made the experience even more special was the journey through it. It wasn’t just a one-time

Through WiCyS, I’ve had the opportunity to connect

selection. I had to work through multiple stages of

with professionals, attend events such as the WiCyS

challenges and assessments, and with each step, I

Conference, and gain insight into the different

could feel myself growing. Advancing through several

paths within cybersecurity. Seeing others who have

tiers and eventually being selected as one of just

successfully transitioned into the field made my own

65 participants globally for the final stage was a

goals feel more attainable.

moment I’ll never forget.

It also gave me greater clarity in terms of where I see

A big part of the program involved Capture the

myself. Exposure to different roles, particularly within

Flag (CTF) challenges, which really pushed me

defensive security and incident response, reinforced

outside of my comfort zone. I had to think critically,

my interest in pursuing a SOC role and continuing

troubleshoot problems I’d never seen before, and

along that path.

apply what I was learning in real, practical ways. In one of the international CTFs, I even ranked among

Overall, WiCyS has had a lasting impact on both

the top performers which meant so much to me,

my confidence and my direction. It has not only

especially considering I came into this field without a

supported my growth, but has also shown me the

technical background.

importance of community in navigating a field as broad and evolving as cybersecurity.

Reaching the final stage also opened the door to advanced SANS training and certifications, which

“I’m also incredibly grateful for the mentors and

are so highly respected in the cybersecurity space.

peers within the WiCyS Security Training Scholarship,

Having access to that level of learning felt like a

whose guidance and support continue to play an

turning point in my journey.

important role in my journey.”

98

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

But more than the achievements or the milestones,

up with that pace. Through my studies, I’ve learned

what this experience really gave me was confidence.

to approach systems from both a defensive and

It showed me that I’m capable of tackling complex

attacker perspective, while understanding how layers

challenges, learning at a high level, and standing

of security work together.

alongside people from all over the world.

This has helped me move beyond seeing security as It genuinely changed how I see myself in this

a fixed set of controls, and instead think about how

field. I’m no longer just trying to find where I fit in

those controls might be tested, where gaps could

cybersecurity, I’m actively creating my place in it.

exist, and whether a system would hold up when challenged. That way of thinking makes it easier to

Given the rapid evolution of cybersecurity threats, do you feel that your academic program adequately keeps pace with the industry’s current landscape?

adapt to new threats, because you’re not just relying

Cybersecurity is a rapidly evolving field, and while my

with the current threat landscape requires going

academic program provides a strong foundation, it

beyond the classroom. The field evolves in real time,

cannot fully keep pace with the speed at which new

which makes it important to stay informed about

threats and technologies emerge.

emerging threats, trends, and current events.

That said, it has equipped me with something just

To support that, I actively engage in hands-on

as important, a way of thinking that helps me keep

practice through security labs, Capture the Flag (CTF)

I S S U E 30

on what you’ve learned, but how you apply it.

At the same time, I’ve learned that staying aligned

WOMEN IN SECURITY MAGAZINE

99

NATALIAH ALCALA-MAHARAJ

challenges, and training programs. I also make a

Yes, I do see the need for continued development

conscious effort to stay up to date through industry

in non-technical skills, particularly in areas such as

news, research, and community discussions.

communication, collaboration, and decision-making.

I see my academic program as a strong foundation,

While technical knowledge is essential in

but my ability to keep pace with the field comes from

cybersecurity, the ability to communicate effectively

combining that foundation with continuous learning,

with different audiences is just as important. This

practical experience, and staying actively informed.

includes being able to translate technical findings into clear, meaningful insights for non-technical

What is your preferred source for staying informed about cybersecurity trends and general information

stakeholders, especially senior leadership and

I rely on a combination of threat-focused reporting,

In many cases, decisions around risk, response,

cybersecurity news platforms, and community-driven

and resource allocation are made at that level.

insights to stay informed.

Being able to communicate in a way that helps

executive teams.

leadership understand the impact of a threat, and I regularly follow The DFIR Report for detailed

the importance of certain actions or investments,

breakdowns of real-world incidents, which I find

is critical.

especially valuable for understanding how attacks unfold in practice. I also use BleepingComputer

I’ve come to understand that strong communication

and The Hacker News to stay up to date on current

can directly influence how quickly and effectively a

vulnerabilities, breaches, and emerging threats.

threat is addressed, as well as how organisations prioritise security overall.

In addition, I review cyber threat intelligence (CTI) reports and follow insights from SANS Institute,

I also see value in developing skills such as time

which provide deeper visibility into attacker behavior

management, adaptability, and the ability to remain

and evolving threat trends.

composed under pressure, as cybersecurity often involves working in fast-paced and high-

I also benefit from being part of the Women

stakes environments.

in CyberSecurity (WiCyS) community, where discussions and shared experiences offer valuable,

Overall, I believe that technical and non-technical

real-time perspectives from others in the field.

skills go hand in hand. Developing both is essential not only for performing well in a role,

I find that combining these sources gives me both

but for contributing effectively to decision-making

real-time awareness and a broader understanding of

and strengthening an organisation’s overall

how threats evolve, which helps me connect real-

security posture.

world threats to the concepts I’m learning.

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

100

W O M E N I N S E C U R I T Y M A G A Z I N E

www.linkedin.com/in/nataliahalcalamaharaj

M AY • J U N E 2026

In practice, my experience has been much more NOKUTENDAISHE MASUKU

foundational and holistic. I’ve built strong skills in networking and programming, which form the backbone of understanding how systems operate

Nokutendaishe Masuku is a dedicated Bachelor of Cybersecurity student at Deakin University Bachelor of Cybersecurity student at Deakin University

and where vulnerabilities can exist. I’ve also explored areas I didn’t initially expect, such as cybersecurity laws and data protection regulations. This broadened my perspective beyond just technical analysis and coding and helped me understand the ethical and legal responsibilities that come with working in this field.

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

I aspire to secure a role as either a SOC Analyst or a Penetration Tester. Both roles appeal to me because they are highly technical and provide the opportunity

I’d describe cybersecurity as a bit like staying one

to continuously develop and apply hands-on

move ahead in a high-stakes game. You’re constantly

cybersecurity skills.

thinking, analysing, and adapting, trying to anticipate what might come next and how to respond before

What motivates this choice is my desire to build a

it even happens. That’s what makes it so engaging.

strong technical foundation early in my career. As a

There’s always something new to learn.

SOC Analyst, I would gain experience in monitoring, detecting and responding to real-time threats, while

But what really draws me to it is the purpose behind

penetration testing would allow me to think like an

the work. It’s not just about technology; it’s about

attacker and proactively identify vulnerabilities before

protecting people’s data, their privacy, and their trust.

they can be exploited.

In a world that’s becoming more digital every day, being part of that feels meaningful, and honestly, really rewarding.

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

102

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

My family was very supportive of my decision to pursue cybersecurity. They had always recognised

Like many people, when I first considered

my interest in computers from a young age so

studying cybersecurity, I had a very surface-level

moving into a tech-related field felt like a natural

understanding of what it involved. I thought it would

progression.Initially, I had planned to study software

be about learning how to “hack” things like social

engineering. However, everything changed when I

media accounts which, as it turns out, is far from

had the opportunity to job shadow a cybersecurity

the reality.

professional at a bank in Zimbabwe.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

That experience gave me real insight into the field,

Melbourne 2025. Being surrounded by like-minded

and I was immediately drawn to it and I knew it was

individuals and immersed in such an energetic,

something I wanted to pursue.

inspiring environment really stood out to me.

My parents were very encouraging of the shift. They

The workshops challenged me and expanded my

recognised that cybersecurity is a rapidly growing

thinking and the experience as a whole motivated

area within IT with strong career prospects and

me to keep pushing forward in the field. Around the

opportunities for continuous development. Their

same time, I also connected with Australian Women

support made the transition feel even more affirming

in Security Network and Women in CyberSecurity

and it gave me the confidence to fully commit to

Australia, which made it even more meaningful.

this path.

Engaging with other women in cybersecurity and learning from their journeys gave me a strong sense

Who or what has been the most influential factor in shaping your journey in cybersecurity so far, and how has it impacted your career aspirations?

of encouragement and belonging.

my cybersecurity journey so far has been my

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

involvement in the Deakin University Cybersecurity

While I am currently seeking entry-level opportunities

Association. Being part of a community of

and aiming to secure an internship over the summer,

passionate and driven students has had a significant

I have been actively building practical experience

impact on both my personal and professional growth.

outside of my academic studies.

Through the association, I’ve had the opportunity to

I regularly engage in hands-on learning through

attend workshops and networking events that have

platforms such as TryHackMe and Hack The Box,

deepened my understanding of the field and exposed

where I work through real-world scenarios to

me to real-world insights. Beyond learning, it has also

strengthen my technical skills. In addition, I attend

given me the chance to step into leadership spaces,

cybersecurity workshops, networking events

contribute to initiatives and collaborate with others

and industry conferences, which have

who share similar goals.

helped me gain practical insights and

One of the most influential factors in shaping

stay connected to current This experience has not only strengthened my

trends in the field.

technical and professional skills, but it has also shaped my career aspirations by showing me the importance of community, continuous learning and giving back within the cybersecurity industry.

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

One of the most memorable moments in my cybersecurity journey was attending AISA CyberCon

I S S U E 30

The cybersecurity industry offers various certifications from different organisations.

Have you pursued, or do you plan to pursue any of these certifications? If so, which ones, and what factors influenced your choice?

WOMEN IN SECURITY MAGAZINE

103

NOKUTENDAISHE MASUKU

I am currently working towards obtaining the ISC2

While the content is still valuable, it could benefit

Certified in Cybersecurity (CC) and I plan to attain the

from more frequent updates to reflect current

CompTIA Security+ by the end of the year.

industry trends and emerging threats.

At this stage, I’ve been focusing on attaining free and entry-level certifications, as I am still a student

What aspect of your cybersecurity studies excites you the most, and why?

and mindful of financial constraints. However,

One of the aspects I’ve enjoyed the most in my

this has not limited my commitment, instead it

cybersecurity studies so far is computer forensics

has encouraged me to be strategic in choosing

and network forensics. I find it particularly exciting to

certifications that provide strong foundational

analyse data and uncover what has happened during

knowledge and industry recognition.

a security incident.

Both ISC2 CC and Security+ align with my goal of

It feels like solving a puzzle and piecing together

building a solid technical base and preparing for

evidence from different sources to understand how

entry-level roles in cybersecurity, while also setting

an attack occurred and what its impact was. This

the groundwork for more advanced certifications in

investigative side of cybersecurity really resonates

the future.

with me as it combines technical skills with critical thinking and attention to detail.

Given the rapid evolution of cybersecurity threats, do you feel that your academic program adequately keeps pace with the industry’s current landscape?

Conversely, which aspect of your studies do you find least interesting or useful, and how do you navigate through it?

To some extent, yes. I believe my academic program

While I recognise their importance, I find advanced

does a strong job in building foundational knowledge,

programming units such as data structures and

particularly in areas like programming and

algorithms and object-oriented programming less

networking which are essential for understanding

engaging. I understand the concepts and their

cybersecurity at a deeper level.

relevance but they don’t capture my interest in the same way as more security-focused topics.

However, when it comes to more advanced cybersecurity

That said, I approach these areas with a growth

topics, I feel there is room

mindset, knowing they form a critical foundation for

for improvement in keeping

problem-solving and technical depth in cybersecurity.

pace with the rapidly

I stay disciplined, focus on understanding the core

evolving threat landscape.

concepts and remind myself of how these skills support my broader career goals.

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

In my case, I feel I am already actively developing these skills through my involvement in student

104

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

in Melbourne, which has significantly strengthened

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

my interpersonal communication and relationship-

Since the beginning of the year, I have been actively

building abilities.

applying for entry-level IT and cybersecurity roles

societies and the broader cybersecurity community.

I regularly attend networking events and engage with professionals across various cyber communities

including help desk positions and cybersecurity

By consistently putting myself in these environments, I’ve already seen a noticeable shift in how I interact with others. I am now more confident, articulate and intentional in my communication.

internships. While I haven’t received responses from

While there is always room for growth, I believe

internships as an international student can be

my current experiences are equipping me well with

more difficult than I initially expected. However, I’ve

the non-technical skills required for a future role

chosen to view this as part of the journey rather than

in cybersecurity.

a setback.

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

I remain committed to improving my chances by

Yes, I am actively engaged in the broader

stay persistent, keep applying and make the most

cybersecurity community and it has been a key

of every opportunity as I work towards breaking into

part of my journey. I am involved in the Deakin

the industry.

many applications yet, the experience has given me valuable insight into the competitiveness of the field.

One challenge I’ve encountered is that securing

focusing on my studies, expanding my network and continuing to build my technical skills through side projects and hands-on practice. I am determined to

University Cybersecurity Association where I’ve had the opportunity to contribute, learn from peers and engage in initiatives that support

www.linkedin.com/in/nokutendaishe-masuku-1228b429a/

student development.

Beyond university, I am also a member of Australian Women in Security Network and Women in CyberSecurity Australia. Through these communities, I not only attend networking events and workshops but I have also participated in mentorship programs offered by both organisations.

These mentorship experiences have been especially valuable, as they’ve allowed me to learn directly from industry professionals, gain guidance on navigating my career and better understand the skills required to succeed in cybersecurity.

I S S U E 30

WOMEN IN SECURITY MAGAZINE

105

day, you’re solving problems, building strategies, JERICA MACARAEG

and finding new ways to protect organisations. You get to see how businesses respond under pressure, how they navigate crises, and the difficult decisions

Jerica Macaraeg currently studying a Bachelor of IT (Networking and Cybersecurity) alongside a Bachelor of Business (International Business) at the University of Technology Sydney (UTS) Bachelor of IT and Bachelor of Business student at the University of Technology Sydney

they sometimes have to make like whether to pay a ransom while balancing financial, legal, and reputational risks.

At its core, cybersecurity touches everything. It underpins how organisations operate and how individuals protect their personal privacy. And for me, that constant opportunity to learn, adapt, and make a real impact is what makes this career so exciting.

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

When I first started thinking about a career in

What excites me most about a career in

cybersecurity, I genuinely believed I had to know

cybersecurity is getting to look beyond the headlines.

everything. Offensive security, defensive security,

When you see something like “57 million users

incident response, digital forensics, GRC you name it.

exposed in a data breach,” it’s easy to focus on the

I thought I had to master it all, and at the same time

number but what really interests me is everything

decide whether I was going to be on the “red team” or

behind it. The layers of nuance, the systems and

“blue team” before I’d even graduated. I even felt like

controls that were in place, the gaps that were

I should already be great at hacking and keeping up

exploited, and the broader picture of how mature the

with CVEs every night. It was overwhelming, to say

organisation’s security posture really was. There’s

the least. The industry felt so vast that I didn’t know

always more to the story than what’s reported, and

where to begin or what to focus on.

understanding that deeper context is what makes the field so fascinating.

Now, in my fourth year of university and working as a Security Analyst intern, my perspective has

I’m also really drawn to the human side of

completely shifted. I’ve come to understand that it’s

cybersecurity. Social engineering, in particular,

not about knowing everything, it’s about building a

highlights how much psychology plays a role in

balanced, threat-informed mindset. At university,

security. Understanding behaviour, decision-making,

there’s often this idea that you have to pick a side red

and what motivates an attacker adds a completely

or blue as if those are the only paths. But over time,

different dimension to the work; it’s not just technical,

I’ve realised it’s so much broader than that. Seeing

it’s deeply human.

how different areas of cybersecurity connect made me realise there are so many ways to contribute,

106

What I love is that cybersecurity constantly

including roles that aren’t always deep in the tools

challenges you to think critically and creatively. Every

day to day.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

What really stood out to me is how valuable it is to

was convinced I wanted to study ophthalmology and

understand both perspectives. You don’t have to

plastered the 97.50 ATAR that was required to study

fit neatly into one box bringing together elements

it on my wall.

of both offensive and defensive thinking gives you a much richer, more well-rounded approach to

In Year 9 and 10, I did take a subject called

problem-solving.

Information Software Technology, and it was creating my first HTML/CSS website on my

I’ve also learned that, despite all the technical

Favourite RNB Artists that made me want to do

complexity and jargon, cybersecurity is ultimately

something in tech. Even so, at the back of my

about people. There’s always a human element at

mind, I thought of the alternative reality of pursuing

the centre whether it’s the attacker, the defender, or

health. So, in Year 12, when I put my course choice

the end user. And within organisations, I’ve seen how

in through UAC, even though my first choice was

cybersecurity can sometimes be misunderstood.

IT/Business, my second option was a Bachelor of

It’s often viewed as a cost or a blocker, something

Occupational Therapy.

that slows things down, rather than an investment that protects the business and the people behind

I was very close to pursuing health, but I knew I

it. That shift in perspective, understanding both the

wanted to find out how I wanted to leave an impact

technical and human sides has been one of the most

on the world on my own. My parents were initially

important lessons in my journey so far.

worried about job security and competition in a saturated field, but this didn’t stop me. They didn’t

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

have a strong opposition at all and were mainly just

I’d like to be in the GRC and Strategy and Consulting

would do what I set out myself to do. When I found

space. What motivates me is the impact I can

out there were only 17% of women in cyber in

bring to organisations to develop strategies that

Australia in 2023, I gleamed at the challenge and also

actually operationalise controls beyond ticking

the intrigue as to why that was the case.

boxes for compliance and embedding attitudes

Given the interdependence

that see cybersecurity as an investment from top

every individual and business

to bottom. I see myself as a leader that guides

had on technology, it

business decisions and helps shape effective

made sense for me to

mitigation strategies.

pursue cybersecurity.

looking out for me. They supported me nonetheless because they understood that as their daughter, I

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

Growing up in an Asian household, throughout high school, my parents planted ideas of my future job occupation from being a doctor, nurse and virtually anything related to health. At the end of Year 10, I

I S S U E 30

WOMEN IN SECURITY MAGAZINE

107

JERICA MACARAEG

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

weekly events, recently, I helped coordinate a Women

The most significant event for me so far is probably

it was my first time speaking publicly on a career

being able to give back to the student community

panel, and it was a fulfilling experience speaking with

through becoming the 2026 Director of Partnerships

amazing women in the industry as well as sharing

at the UTS Cybersecurity Society. Although I had

my insights to the students. It was a major success

attended their events throughout my earlier uni years,

with over 80+ students in physical attendance!

in Cybersecurity Career Panel where I was also a panellist. This was a significant moment for me, as

I felt reluctant to join the executive team because it

Fast forward to the end of my third year of university,

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

I had garnered a year of experience in the cyber

I am currently working an internship as a Security

industry through my Security Analyst Internship, and

Analyst Intern at Skylight Cyber, a boutique

nearly two years of my other internship in technology

consulting firm, in the Strategy and GRC Team. With

consulting. It was through these two internship

a year in, I’ve helped support the delivery of bespoke

experiences I gained confidence and believed in

cyber risk and governance services. These include

myself to use my skills to give back to the student

doing a Board tabletop exercise, creating an incident

community. I had spent years talking to people by

response playbook for phishing and managing the

then, both clients and customers in my hospitality

risk register and third-party risk management for a

and retails jobs as a teen. So, I knew I could do the

BAU client. I’m also learning a lot on different security

same in connecting companies to sponsor our

frameworks and standards, and how organisations

was largely male-dominant students interested in the offensive side.

society, bring industry experts to the students

view them against their security maturity.

and develop educational collaborative workshops with them.

What aspect of your cybersecurity studies excites you the most, and why?

It continues to

This isn’t everyone’s favourite, but honestly, it’s

leave a lasting

learning what’s under the hood. Learning networks,

impression on

DNS, TCP/IP and how packets travel across the

me because

internet. I find it super interesting because you

I decided to

learn how a webpage gets from a server to you as

take this role

the client. Doing hands-on labs like using Cisco

on a whim, and

Packet Tracer for subjects like Network Security

it’s been a blast

and learning how to configure Linux and Windows

so far. As the

systems in Network Servers is especially fun. This is

primary liaison for

what intrigues me because it’s not just pure magic,

the UTS:CSEC with our

and learning how that works ties really well to

sponsors, we continue

learning how this infrastructure gets exploited in my

to have fortnightly

cybersecurity studies.

meetings to develop our event plans for the year. As our society hosts

108

W O M E N I N S E C U R I T Y M A G A Z I N E

Are there specific aspects of your cybersecurity studies that you find particularly

M AY • J U N E 2026

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

challenging? If so, what are they, and how do you approach overcoming these challenges?

communicate that to a non-

The most challenging aspect for me is balancing

people in leadership

work with full-time study. For me, it came down

who make business

to being intentional with how I prioritised my time.

decisions for the

Adjusting my priorities meant that although I

organisation, it will be

wouldn’t get my lecture notes done that particular

hard to differentiate

week, I’d always carve out time where there were less

yourself from

assignments to absorb foundational topics I found

individuals that

relevant in my course.

can. It’s through

technical audience, especially

harnessing By studying both IT and business subjects, I would

your soft skills

plan each semester based on projected workload.

and having the

For example, this semester, a subject I wanted to

tact to guide leadership to make informed decisions

focus on really learning was Network Security. This

that have a ripple effect on the whole company.

meant choosing other subjects that either had less

Say for example a pen tester. If a pen tester cannot

workload or balancing it with a creative subject like

translate an organisation’s vulnerabilities, why it

International Marketing. In terms of organisation,

matters or what it even means to them, how can

I find that going analog and having a physical

leadership even decide whether budget and resource

planner keeps me accountable on events, classes,

needs to go to fixing those vulnerabilities as opposed

and assignments coming up. I keep it fun by having

to other innovative projects that they know to bring

monthly quotes and using creative liberation to

more revenue and opportunities for the business? So

decorate around my monthly and weekly spreads!

yes, for sure!

Do you believe there are areas in cybersecurity that deserve more emphasis in your coursework or areas that could receive less focus?

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

I’d say the GRC space could use a little love. The

Other than joining the UTS Cybersecurity Society as

main attraction of pursuing cyber as a university

the Director of Partnerships, I’ve gone to conferences

student tends to be the glamourisation of hacking

like Bsides, participated in AWSN events and created

and what looks good in a demo. In my study

relationships in the industry through coffee chats.

experience, I couldn’t really gauge how security

I’ve also started a Tik Tok/Instagram account

frameworks and standards were used or why they

to document my journey as a Woman in Cyber,

were important beyond compliance.

sharing my insights from ‘How to break into cyber’, to Day in my Life’s and work outfit inspo! It’s been

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

100%. You can have all the technical knowledge and

enriching, because I’ve got to meet so many talented individuals in the industry, build my network and also share what I know to other fellow students.

www.linkedin.com/in/jericamacaraeg

skillset in the world, but if you don’t know how to

I S S U E 30

WOMEN IN SECURITY MAGAZINE

109

LISA ROTHFIELD-KIRSCHNER Author of How We Got Cyber Smart | Amazon Bestseller

Olivia, Jack, Roy and Johnny: part 2, the group chat that went too far.

In part one of this story (issue #29) Olivia and Jack’s cousin, Roy, used his own face to unlock his brother Johnny's phone and gain access to Johnny’s friends in order to invite them to a surprise birthday party for Johnny.

Olivia peered up from the book she was reading whilst eating her cereal. "Make sure you double-check who you're adding before you hit send."

The story highlighted the security vulnerabilities of biometric authentication, specifically how face ID can be bypassed by siblings or individuals with similar facial structures. It served as a cautionary tale about the importance of digital privacy and the necessity of multi-layered security and as a warning on the dangers of abandoning a strong, unique passcode in favour of convenience.

He did not double-check.

Part 2: The morning after Roy confessed to hacking into his brother Johnny’s phone, the mood at Paradise Cove shifted. The guilt had lifted, the settings on Johnny's phone had been updated and Roy was back to buzzing with party energy. He had the numbers. He had the plan. All he needed to do was get the word out.

"Right," Roy said, spreading a crumpled notepad across the kitchen bench. "I've got nine contacts: basketball crew, tennis mates and a couple of Johnny's school friends. I'll just make a group chat, send the details, and we’re kinda done."

110

W O M E N I N S E C U R I T Y M A G A Z I N E

"Yeah, yeah," Roy said, already typing.

In his rush, Roy copied the numbers from his notepad into the new group chat and sent off a message that read: "SURPRISE PARTY FOR JOHNNY — Saturday 4pm at our house, 14 Rembrandt Drive. Don't tell him!! Bring bathers. Roy." He put the phone down, feeling chuffed with himself. Olivia gave him a thumbs up.

Jack went back to his peanut butter toast.

Forty minutes later, Roy's phone started pinging.

The first few replies were normal. "Sick, I'll be there!" and "Don't worry, lips are sealed.” The usual stuff. But then came a message from a number with no name attached.

"Hey, who is this? How did you get my number? What party?"

Roy's jaw dropped and his face went red.

He scrolled back up to the group and checked the phone numbers against his list. Somewhere between copying numbers

M AY • J U N E 2026

off the notepad and pasting them into the chat he had included one wrong digit, a number that belonged to a stranger.

"Olivia," Roy said, his voice very quiet and very flat.

She was at his side in seconds. She read the screen. Then she read it again.

"Oh no," she said.

"Oh no is right,” Jack agreed.

The stranger, an adult named Sean, was very confused about why he'd been invited to a child's birthday party. He had now seen Roy's full message, including the home address and all the other group members’ details.

"Sean now knows where we live," Roy whispered.

"Sean is probably fine," Olivia said, though she didn't sound entirely sure.

"The point isn't Sean," Jack said, sitting down slowly. "The point is that you sent

I S S U E 30

our address to someone you don't know.

You didn't check. You just sent it."

The three of them sat with that for a moment. It was the same uncomfortable feeling from the day before, the one that had crept over them while watching Johnny sleep. They knew they were in a sticky situation. They realised something had gone a little too far, a little too fast and couldn't easily be undone.

Roy removed Sean from the group chat and sent him a separate, deeply apologetic message explaining the mix-up. Sean, to his credit, replied with a simple "No worries mate, happens to the best of us" and that was that. Crisis contained, but only just.

That afternoon, when their parents came back from the markets, Roy told them straightaway. He didn't wait for dinner this time.

"I made a group chat for the party and I added the wrong number by accident," he said. "A stranger got our address."

WOMEN IN SECURITY MAGAZINE

111

Their father set down the grocery bags slowly. "Did you check before you sent it?"

Top tips for staying safe in group chats and sharing information online

"No," Roy admitted.

Group chats are a great way to stay connected, but it pays to pause before you hit send.

Their mother pulled up a chair. "This is actually a really common way that private information gets shared with the wrong people," she said, without a trace of told-you-so in her voice. "It's not just about strangers having bad intentions.

Sometimes it's just a typo. One wrong number and your home address, your plans, your photos; they're out there with someone you've never met."

"Sean seemed nice," Roy offered.

"Sean was nice," his mother agreed. "But you didn't know that when you hit send."

Johnny, who had been listening from the hallway, wandered in and sat on the bench. "So first you got into my phone," he said, looking at Roy with a raised eyebrow, "and now you've been handing out our address to strangers. Solid week mate."

Roy put his head on the table.

The party, for the record, was brilliant.

Johnny walked in on Saturday afternoon to a backyard full of his favourite people, a mountain of food and a banner that Olivia had hand-painted. He was genuinely, completely surprised. Roy had pulled it off.

But the four of them agreed, quietly, that the real lessons of that summer holiday had nothing to do with cake or balloons.

They had learnt, in the most hands-on way possible, that digital tools move fast.

Sometimes faster than you can think, and that one small, careless moment is all it takes for private information to end up somewhere it was never meant to go.

112

W O M E N I N S E C U R I T Y M A G A Z I N E

• Always double-check your contacts.

Before adding people to a group chat, verify each number or username carefully. One wrong digit can mean a stranger is reading your private plans.

• Never share your home address in a group chat. Even if you trust everyone in the group, you can't control who screenshots or forwards a message. Only share your location details privately with people you know well.

• Think before you type. Once a message is sent, you can't always take it back.

Even if you delete the message, someone may have recorded it or taken a screenshot.

• Keep group chats small. Bigger groups are harder to control in terms of who sees what. Only add people who genuinely need to be there.

• If a stranger ends up in your chat, remove them immediately. Then let a trusted adult know, especially if any personal details like your address or school were shared.

• Talk to a trusted adult if something feels off. If you receive a strange reply or if you feel that a stranger has seen your information, tell a trusted adult straight away. www.linkedin.com/in/lisarothfield-kirschner

howwegotcybersmart.com

M AY • J U N E 2026

How We Got Cyber Smart addresses cyber safety, cyber bullying and online safety for elementary school-aged children.

Lisa has partnered with Cool.Org, and her content is found on the Department of Education website.

READ NOW

WOMEN IN SECURITY MAGAZINE CONTRIBUTORS 01

02

1. KATIE WILSON

Head of Marketing and Communications at Australian Disability Network

2. AMANDA-JANE TURNER

Author of the Demystifying Cybercrime series and Women in Tech books. Conference Speaker and Cybercrime specialist

03

04

3. DEVEKA LINGAM

Technology Risk Consultant at KPMG

4. SHIVANI BHAVSAR

Application Security

05

06

5. ALEYNA DOGAN

Senior Cyber Threat Intelligence Analyst - SOCRadar

6. ADEOLA ODUNLADE

Cybersecurity Professional (SOC Analyst)

7. POOJA AGRAWALLA

07

08

Co-Founder & Chief Product Officer at Kreesalis

8. DR. MARGARITA BEL

Executive Leadership at the Forefront of Cyber and AI Security, Human-Centric Innovation, and Strategic Transformation

9. ELOISE TAYLOR

09

10

Senior Manager, Security Operations

10. CHINENYE V. UGOCHUKWU

Senior Cybersecurity Architect

11. CRAIG FORD

11

12

Head Unicorn – Cofounder and Executive Director, Cyber Unicorns.

Australian Best Selling Author of A Hacker I Am, Foresight and The Shadow World book series. vCISO – Hungry Jacks, Wesley Mission, PCYC and Baidam Solutions

12. JO STEWART-RATTRAY

Oceania Ambassador, ISACA

13

14

13. LISA VENTURA MBE FCIIS

Chief Executive and Founder, Unity Group Solutions Limited/AI and Cyber Security Association

14. SIMON CARABETTA

National Cyber Security Training Advisor

114

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

15

16

15. JAY HIRA

Cyber Director – Financial Services, KPMG

16. ADRIANA JONES

Engineer, Cybersecurity Advocate and founder of The Innocent Souls Project (TISP)

17

18

17. MELANIE NINOVIC

Student Engagement Coordinator for Grad Girls at Women 4 Stem

18. KAREN STEPHENS

CEO and co-founder of BCyber

19

20

19. MARINA AZAR TOAILOA

Founder of the Mummy Safety Security Project

20. HOLLY BRETHERTON

Industry Initiatives Manager, ACS and Senior Responsible Officer, Cyberpath

21

22

21. MADHURI NANDI

Madhuri Nandi, Head of security at Nuvei, AWSN Board Chair, author of Cyber Smart

22. LINDSAY COUDERT

Bachelor of Counter Terrorism, Security and Intelligence (Cyber Security) student at Edith Cowan University.

23

24

23. NATALIAH ALCALA-MAHARAJ

Master’s in Cybersecurity, Hacking and Cybercrime Investigation student at University of Trinidad and Tobago

24. NOKUTENDAISHE MASUKU

Bachelor of Cybersecurity student at Deakin University

25

26

25. JERICA MACARAEG

Bachelor of IT and Bachelor of Business student at the University of Technology Sydney

26. LISA ROTHFIELD-KIRSCHNER

Author of How We Got Cyber Smart | Amazon Bestseller

I S S U E 30

WOMEN IN SECURITY MAGAZINE

115

SURFING THE NET

CHASING THE DREAM: WOMEN IN CYBERSECURITY ACROSS ASIA-PACIFIC AND BEYOND

By Palo Alto Networks From undergraduate students to mid-career professionals from different countries – have asked for my advice on how to get a job in cybersecurity. They are all passionate about learning a new skill set, be it coding, policymaking or a foreign language. Their passion makes me smile and feel galvanized to help them and keep learning new aspects of cybersecurity.

116

AFRICA ON THE FRONTLINE: CYBERSECURITY, GEOPOLITICS AND WHY SECURITY IS MOVING FROM SYSTEMS TO HUMAN MINDS

PROMPT FIREWALLS, CONTENT FILTERS, CLASSIFIERS—WHAT AND WHY ARE THEY IN AI SECURITY STACKS?

By Anna Collard

By Pivot Point Security Blog

We’ve long defined cybersecurity as the technical discipline of protecting networks, data and systems. But when viewed through a geopolitical lens, then this definition is no longer sufficient. What we are dealing with today goes beyond protecting organisational data, to protecting economies, sovereignty, and increasingly, human perception.

Large language AI models (LLMs) like GPT-5 and Claude 4.5 typically rely on text, conversational chat, and/or voice/audio prompts to interact with users. The most dangerous cyber threats currently targeting LLMs are prompt injection attacks that use “social engineering” style techniques embedded in prompts to trick the AI into overriding its built-in safeguards.

READ BLOG

READ BLOG

READ BLOG

FROM REACTIVE TO AI‑FIRST: THE NEXT LEAP IN CYBERSECURITY

WHAT I LEARNED FROM THE RECENT VERCEL SECURITY INCIDENT

By asvin GmbH

By Medium-Lavanya Bandla

Thanks to AI, we are at a turning point where traditional, reactive security models are not only outdated but dangerously inadequate. The speed at which attackers operate with the help of AI is no longer measured in days, hours, or minutes, but in seconds and milliseconds.

I’m still learning about system security, so when I came across a recent incident involving Vercel, I tried to understand it in simple terms.It made me realize how modern systems can be vulnerable in unexpected ways.

Instead of being a direct hack, this incident shows how attackers can move step by step through different systems.

FROM DATA OVERLOAD TO ACTION: WHY MODERN VULNERABILITY MANAGEMENT MUST BE WORKFLOW-DRIVEN

READ BLOG

READ BLOG

W O M E N I N S E C U R I T Y M A G A Z I N E

By Forta(Katrina Thompson) We all know where vulnerability management fits into an overall security strategy; it provides the raw data that analysts use to figure out what’s wrong and what needs to be fixed. The problem is, traditional VM stops there – leaving analysts to do all the work.

READ BLOG M AY • J U N E 2026

MAKING CYBERSECURITY ACCESSIBLE FOR WOMEN

By Huntress - Rachel Bishop We’ve got a problem in cybersecurity that needs to be addressed—and it has to do with accessibility.

We know that women make up a woefully small percentage of cyber pros. While women comprise around half of the total workforce, they make up less than 25 percent of the global cybersecurity workforce. Why?

READ BLOG

AGENTIC AI: THE DATA EXFILTRATION RISK HIDING INSIDE YOUR AI AGENT

By BlackFog( Rebecca Harpur) When you give an AI agent shell access, file system permissions, email credentials, and persistent memory, you have basically built a data exfiltration pipeline that runs 24/7 without human oversight.

The ClawdBot incident made that clear: plaintext credential storage, exposed control panels, and over 135,000 instances reachable from the public internet.

READ BLOG I S S U E 30

CYBERSECURITY IN AN AGE OF GEOPOLITICAL FRACTURE

INTUITION AND CURIOSITY MIX WELL WITH TECHNOLOGY

By iforisk Today(Uma Ramani)

By Cisco-Gergana Karadzhova-Dangela

Wars are becoming more frequent, and are no longer only kinetic.

They are just as active in the cyber world, with impacts much larger than can be imagined. This also leads to state-sponsored hacktivists targeting the critical infrastructure of nations.

Welcome to the Cisco Women in Cybersecurity’s blog series, where we highlight the stories of the mentors who have inspired and advocated for the careers of those in our community. This series seeks to show the importance of allyship, connection, and how different the journeys can be into a career in cybersecurity.

READ BLOG

MANAGING CYBER THREATS, WORKFORCE RISKS, AND AI CHALLENGES

By CyberSN As we approach 2026, businesses face a rapidly evolving cyber threat landscape. From ransomware to AI-driven threats, organizations must adopt strategies that address both technical and workforce vulnerabilities. Deidre Diamond, Founder and CEO of CyberSN, stresses the importance of integrating workforce well-being into cybersecurity planning to stay ahead of emerging threats.

READ BLOG

READ BLOG

AN OPEN LETTER ON SECURITY, SOVEREIGNTY, AND THE RIGHT TO CHOOSE

By LogPoint' Blog Over the past years, digital sovereignty has moved from policy discussion to operational reality for security teams across Europe. For security leaders, service providers, and public sector organizations, this is no longer theoretical. It shows up in audits, procurement processes, customer contracts, and board-level risk discussions.

At guardsix, we see this every day.

READ BLOG WOMEN IN SECURITY MAGAZINE

117

TURN IT UP

CYBER MADE HUMAN

AUSCERT

HOT GIRLS CODE

With Alice Violet Cyber Made Human: the podcast demonstrating how fascinating and accessible cybersecurity is once you remove the complex language barrier.

With Anthony Caruana and Bek Cheb AUSCERT is Australia's pioneer Cyber Emergency Response Team, proudly a part of The University of Queensland. We help our members prevent, detect, respond and mitigate cyber-based attacks.

With Aorthi Afroza, Lola Garden Producer/Network Hot Girls Cod Join Aorthi & Lola, two young women working in the tech industry in New Zealand, as they break down coding concepts & stereotypes.

New episodes every three weeks!

CLICK TO LISTEN

SHADOWTALK: POWERED BY RELIAQUEST With Kim Bromley and Chris Morgan Want to hear what industry experts really think about the cyber threats they face? ShadowTalk is a weekly cybersecurity podcast, made by practitioners for practitioners, featuring analytical insights on the latest cybersecurity news and threat research. Threat Intelligence Analyst John Dilgen brings extensive expertise in cyber threat intelligence and incident response, specializing in researching threats impacting ReliaQuest customers.

CLICK TO LISTEN 118

W O M E N I N S E C U R I T Y M A G A Z I N E

CLICK TO LISTEN

CLICK TO LISTEN

CYBERSECURITY UNCOMPLICATED

AUTONOMOUS IT

With Cyber queen Welcome to Cybersecurity Uncomplicated with Cyber Queen!

This podcast makes cybersecurity easy to understand for everyone.

Whether you're new to tech or a pro, we cover practical tips, data privacy, cloud security, and more to help you stay safe online. Hosted

by Cyber Queen, a cybersecurity educator with 100k followers, each episode brings expert advice and real-life insights on succeeding in cyber security.

CLICK TO LISTEN

With Maddie Regis, David van Heerden and Landon Miles Go from monotonous to autonomous IT operations with this series. Hosts from Automox, the IT automation platform for modern organizations, will cover the latest IT trends; Patch Tuesday remediations; ways to save time with Worklets (pre-built scripts); reduce risk; slash complexity; and automate OS, third-party, and configuration updates on all your Windows, macOS, and Linux endpoints. Automate confidence everywhere with Automox.

CLICK TO LISTEN M AY • J U N E 2026

WEST COAST CYBER With Caitriona Forde, Fadzayi Chiwandire and Ben Aylett Perth's first Cyber Security industry podcast.Aimed at anyone wanting to learn more about Cybersecurity how it affects their work, home and world around them.Local and international Cyber and Technology news, interviews and events

CLICK TO LISTEN

RISKY BULLETIN PODCAST With The Grugq and Tom Uren Our second podcast feed, featuring three short news bulletins every week, the Between Two Nerds podcast hosted by The Grugq and Tom Uren, and the Seriously Risky Business podcast about public cybersecurity policy and intelligence.

CLICK TO LISTEN I S S U E 30

SMASHING SECURITY PODCAST

POWER2PROTECT BY DELL TECHNOLOGIES

With Graham Cluley Smashing Security isn’t your typical tech podcast. It serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

With Jennifer Aspesi and Danielle Burton Welcome to the Dell Technologies Power2Protect podcast! Tune in and listen to experts in the field and discover newsworthy updates on Dell's latest and greatest Data Protection and Cyber Security offerings.

CLICK TO LISTEN

HACKED OFF With Holly Grace Williams Hacked Off demystifies the world of cybersecurity. Hosted

by Secarma's Managing Director, Holly Grace Williams, it features weekly interviews delving beneath the headlines of the latest hacks, breaches and vulnerabilities, providing expert advice on how to stay safe online. This podcast is brought to you by global cybersecurity and penetration testing company, Secarma.

CLICK TO LISTEN

CLICK TO LISTEN

BRAKESEC EDUCATION PODCAST With Bryan Brake, Amanda Berlin and Brian Boettcher A podcast about the world of Cybersecurity, Privacy, Compliance, and Regulatory issues that arise in today's workplace. Co-hosts Bryan Brake, Brian Boettcher, and Amanda Berlin teach concepts that aspiring Information Security professionals need to know, or refresh the memories of seasoned veterans.

CLICK TO LISTEN WOMEN IN SECURITY MAGAZINE

119

OFF THE SHELF

STRONGER TOGETHER: WOMEN IN CYBERSECURITY Authors // David Meece and Emily Zakkak This book throws open the doors to the world of IT and Cybersecurity, celebrating over 100 accomplished women who have carved their own paths in these dynamic fields.

It's not just a chronical of their achievements, though each story delves into the unique challenges they faced, offering invaluable insights and stereotypes. But the true mission here goes beyond personal triumphs

BUY THE BOOK

WOMEN IN CYBERSECURITY Authors // Jane LeClair and Denise Pheils Provides a basic overview of the status of women in the cybersecurity field.

BUY THE BOOK

THE AI CYBERSECURITY HANDBOOK Authors // Caroline Wong In The AI Cybersecurity Handbook, author Caroline Wong examines AI’s impact on both offensive and defensive cybersecurity strategies. Wong explains how artificial intelligence has transformed the way cyberattacks are carried out and how technology professionals prepare for and defend against them.

BUY THE BOOK

HOW MICE THREATEN CYBER SECURITY: THE MINDSETS BEHIND THREAT-ACTORS IN OUR DIGITAL AGE Author // Anthony Kraudelt A comprehensive, experience‑driven guide that reveals why individuals and groups compromise digital systems. Drawing on more than two decades of frontline law‑enforcement investigations, the book explains the psychological and contextual forces that drive cyber‑crime, from financially motivated ransomware gangs to ideologically driven hacktivists and nation‑state actors.

BUY THE BOOK 120

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

THE SHOW MUST GO ON: A JOURNEY THROUGH LIFE IN POETRY Author // Lisa Ventura From the trials of overcoming personal struggles to the triumphs that shaped her into a recognised and celebrated individual, Lisa's poetry explores themes of resilience, loss, identity, and the power of hope. Each poem offers a glimpse into the emotional highs and lows of her journey—from the depths of adversity to the light of self-discovery and empowerment—along with real life observations of key events such as the Twin Towers terrorist attack and the Aberfan disaster of the 1960s.

BUY THE BOOK

UNMASKING THE HACKER: DEMYSTIFYING CYBERCRIME Author // Amanda-Jane Turner Do you use computers, smart phones and the internet? If you do, please read this book and help protect yourself from cybercrime.There is no solely technical solution to fight cybercrime and neither is there a solely human solution. That is why everyone who uses technology and the internet need to have at least a basic understanding of what they can do to help protect themselves in cyberspace.

BUY THE BOOK

THE DARK WEB AND SCAMS: A GUIDE FOR PERSONAL CYBERSECURITY Authors // Ivette Smith "The Dark Web and Scams" by Ivette Ibarra Smith is an in-depth guide to understanding the dark web and various cyber scams, aiming to improve personal cybersecurity. The book covers several topics, starting with an exploration of the dark web—demystifying its role as both a space for illegal activities and a haven for privacy-focused individuals such as journalists and whistleblowers.

BUY THE BOOK

GLIMMER (FORESIGHT BOOK 4) Author // Craig ford I’ve spent my life in the shadows. Watching systems crack, secrets spill and lies unravel with a few keystrokes. Hacking was never about power for me. It was about survival.

From a really tough start in life, through to surviving on the streets, I learnt how to do what was needed. My gift in the hacker world is erasing everything, leaving only a glimmer, a hint of what once existed.

BUY THE BOOK

I S S U E 30

WOMEN IN SECURITY MAGAZINE

121

OFF THE SHELF

CYBER SMART: PROTECT YOURSELF ONLINE Author // Madhuri Nandi Manas, the Cyber Champion: A Fun & Essential Guide to Online Safety for Kids & Teens The digital world is full of exciting adventures but also hidden dangers. From social media mishaps to online scams, children face risks that can impact their privacy and safety. That’s where Manas, the Cyber Champion, comes to the rescue!

BUY THE BOOK

CYBER TIME TRACKER: CODEY VS. THE RANSOMWARE LOCK: WHY BACKUPS Authors //Jayme Simmons The Cyber Time Tracker series follows Codey and his cyber companion Cypher as they travel through time to face the biggest digital threats in history. Each adventure introduces young readers to cybersecurity concepts through exciting stories, friendly characters, and a glowing hourglass that never stops counting down.

BUY THE BOOK

A BEDTIME STORYBOOK ON CYBER SAFETY: EMPOWERING KIDS TO BE CYBER SAFETY HEROES Authors // Kumud Kumar And Veena Kumari Are you concerned about online safety for children? Are you struggling to teach your kids how to stay safe online? Look no further! .

"Guardians of the Digital Realm: A Bedtime Storybook on Cyber Safety" , This children's book focus on cyber safety, offering a positive, fun, and entertaining way to educate kids about internet safety, cyber bullying, social media, and online presence.

BUY THE BOOK

THE KINGDOM OF CYBERSECURITY Author // Lexington Burnstone Every day, children encounter scams, unsafe content, and strangers who pretend to be their friends. The Kingdom of Cybersecurity turns important lessons into a magical adventure that explains online and cyber safety in a way that helps young learners truly understand.

BUY THE BOOK 122

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

THE LEARNING HUB CYBER SECURITY THREAT INTELLIGENCE RESEARCHER PREVIEW The Cyber Security Threat Intelligence Researcher Certification will help you acquire the skills needed to find out who is behind an attack, what the specific threat group is, the natio

VISIT HERE

GOOGLE CYBERSECURITY PROFESSIONAL CERTIFICATE Prepare for a new career in the high-growth field of cybersecurity, no degree or experience required. Get professional training designed and delivered by subject matter experts at Google and have the opportunity to connect with top employers.Organizations must continuously protect themselves and the people they serve from cyber-related threats, like fraud and phishing. They rely on cybersecurity to maintain the confidentiality, integrity, and availability of their internal systems and information.

VISIT HERE

IBM: CYBERSECURITY BASICS: TOOLS AND CYBERATTACKS Cyberattacks have surged by 71% and are predicted to continue increasing. This alarming statistic highlights the continued demand for cybersecurity professionals. Jumpstart your cybersecurity career with this introductory IBM course, which introduces you to fundamental cybersecurity concepts, threats, and preventive measures.

VISIT HERE

REAL-TIME CYBER THREAT DETECTION AND MITIGATION This course introduces real-time cyber security techniques and methods in the context of the TCP/IP protocol suites. Explanation of some basic TCP/IP security hacks is used to introduce the need for network security solutions such as stateless and stateful firewalls. Learners will be introduced to the techniques used to design and configure firewall solutions such as packet filters and proxies to protect enterprise assets.

VISIT HERE

I S S U E 30

WOMEN IN SECURITY MAGAZINE

123

THE LEARNING HUB INTRODUCTION TO CYBERCRIME Begin your journey into cybercrime with this cyber crime free course.

Explore the various types of cyberattacks faced by organizations today. Understand the intricacies of cybersecurity threats and discover practical preventive measures. Whether you're new to the field or seeking to broaden your knowledge, this course provides essential insights to empower you in defending against cyber threats.

VISIT HERE

MANAGING CYBERSECURITY INCIDENTS AND DISASTERS Most organizations plan for routine operations, but what happens when unexpected events overtake the routine? This course examines contingency planning used to prepare for and manage non-normal operations, including cybersecurity incidents – like hacking attempts, web site defacement, denial of service attacks, information disclosures; a well as other natural and man-made cybersecurity disasters.

VISIT HERE

CYBERSECURITY AND DIGITAL SECURITY ESSENTIALS Gain knowledge on how to recognize risks, implement safeguarding measures, & career insights as you address the current changing cyber threats. Join our cybersecurity essentials course and learn vital skills of digital protection.

VISIT HERE

SOC ANALYST SOC Analysts are the front line of defensive security operations and one of the most in-demand roles in cybersecurity. This career path will prepare you to become an entry-level SOC Analyst.

VISIT HERE

124

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

FEATURING FREE SECURITY TRAINING RESOURCES THAT ARE AIMED AT INCREASING SECURITY AWARENESS AND HELPING PEOPLE BUILD AND UPSKILL THEIR SECURITY SKILLS.

INTERNET HISTORY, TECHNOLOGY, AND SECURITY The impact of technology and networks on our lives, culture, and society continues to increase. The very fact that you can take this course from anywhere in the world requires a technological infrastructure that was designed, engineered, and built over the past sixty years.

VISIT HERE

CS50'S INTRODUCTION TO CYBERSECURITY This is CS50's introduction to cybersecurity for technical and nontechnical audiences alike. Learn how to protect your own data, devices, and systems from today's threats and how to recognize and evaluate tomorrow's as well, both at home and at work. Learn to view cybersecurity not in absolute terms but relative, a function of risks and rewards (for an adversary) and costs and benefits (for you).

VISIT HERE

ADVANCED CYBERSECURITY PROGRAM PREVIEW You will have the opportunity to explore the Stanford Online platform, meet the instructors, watch sample videos, and try out featured exercises from the full-length courses.Remember, this preview is just a small sample of all this program has to offer. Exploring this preview does not earn a certificate, but it will help you evaluate whether the full program is a good fit for you. If you’re ready to take the next step in your career, the complete program offers a comprehensive and transformative learning journey.

VISIT HERE

INTRODUCTIONE TO CRITICAL INFRASTRUCTURE PROTECTION (ICIP) The OPSWAT Academy Introduction to Critical Infrastructure Protection (ICIP) course introduces the fundamentals of cybersecurity within Critical Infrastructure Protection (CIP) and the essential services that support national security, economy, and public health and safety.

VISIT HERE

I S S U E 30

WOMEN IN SECURITY MAGAZINE

125

J O B B OA R D REGIONAL CYBERSECURITY SPECIALIST | FERRERO FULL TIME

ITALY

MAIN RESPONSIBILITIES: As part of the Regional Cybersecurity organization, you will support the assessment of the cybersecurity posture across Italy by conducting periodic cybersecurity maturity and risk evaluations. Working closely with Business, IT and Operations stakeholders, you will contribute to the analysis of applications,

infrastructures and operational environments, applying structured methodologies to assess risks related to confidentiality, integrity and availability.

APPLY HERE

SECURITY SOLUTIONS PRINCIPAL - CYBER RESILIENCE, THREAT AND VULNERABILITY MANAGEMENT | WORLD WIDE TECHNOLOGY FULL TIME

AUSTRALIA

KEY RESPONSIBILITIES: • Develop and execute strategies to enhance the customer’s cyber resilience, including prevention, detection, response, and recovery measures.

• Lead and mentor a team of cybersecurity professionals, fostering a culture of continuous improvement and innovation.

• Conduct risk assessments and vulnerability analyses to identify and address potential threats and weaknesses.

• Collaborate with stakeholders to design and implement incident response and business continuity plans.

• Evaluate customer’s emerging threats and cybersecurity trends to adapt strategies and technologies.

• Ensure compliance with relevant regulations and industry standards and prepare reports for senior management and regulatory bodies.

• Oversee the development and execution of tabletop exercises and simulations to test resilience capabilities.

APPLY HERE

CYBER LEADER – DIRECTOR | DELOITTE FULL TIME

NEW ZEALAND

IN THIS ROLE, YOU WILL: • Build and nurture relationships with key stakeholders in client organisations • Identify and convert new opportunities to support clients achieving their business outcomes through applying effective cyber expertise • Lead and deliver cyber engagements from shaping through to implementation • Take accountability for programme outcomes, timelines, and budgets

• Contribute the growth and direction of Deloitte’s national Cyber practice including bringing new cyber services and offerings into delivery with clients • Apply strong commercial acumen to contribute to running of the practice effectively and profitably • Work closely with our Technology & Transformation leaders to deliver integrated outcomes • Support and develop high‑performing delivery teams across the Cyber practice

APPLY HERE

126

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2026

MANAGER: CYBERSECURITY OPERATIONS | ROAD ACCIDENT FUND FULL TIME

SOUTH AFRICA

KEY PERFORMANCE AREAS Cyber Security • Develop, implement, and monitor a strategic cyber security program to protect enterprise IT assets.

• Manage the implementation of effective incident response and recovery plans, enabling the organization to quickly respond to and recover from security incidents.

• Ensure the governance structure and processes for the department are reviewed and manage the implementation thereof.

• Manage the alignment of technology governance with corporate governance.

• Manage the development of periodic reports on operational excellence and cost reductions achieved.

• Oversee risk assessments regarding cyber security and penetration testing.

• Manage the development of cyber security awareness training for the organization.

APPLY HERE

SR. CYBERSECURITY ENGINEER (CYBERSECURITY) | COLUMBIA SPORTSWEAR COMPANY FULL TIME

INDIA

YOU ARE • Someone who demonstrates advanced analytical thinking to assess complex risks and architect effective, scalable solutions.

• Able to Communicate with clarity and influence across technical teams, business stakeholders, and leadership.

• An experienced collaborator able to drive secure outcomes and foster a culture of shared responsibility across cross-functionality teams.

• Experienced with responding effectively to evolving threats and technologies, guiding others through change.

• Highly responsible, taking full ownership of initiatives, ensuring accountability and follow-through across teams.

• An analytical thinker who will adhere to and help refine team processes, contributing to operational maturity.

APPLY HERE

CSOC CYBER SECURITY RISK MGMT ADVISOR | UK MINISTRY OF DEFENCE FULL TIME

UNITED KINGDOM

JOB DESCRIPTION The successful candidate would be: • Working with Sub-Command risk managers and risk owners to better understand their risk areas and the funded activity taking place to manage cyber risk exposure across the Command.

• Maintain professional competence and learning and development • Analyse the cyber risk assessments and mitigation plans to identify common themes, gaps and make recommendations for action.

I S S U E 30

• Provide advice and guidance to Sub-Commands on cyber security and resilience risks and issues.

• To drive the adoption of Stream amongst the Command and Sub-Commands ensuring accurate risk reporting and escalation where required.

APPLY HERE

WOMEN IN SECURITY MAGAZINE

127

J O B B OA R D GLOBAL CYBERSECURITY GOVERNANCE AND AWARENESS LEAD | L'ORÉAL FULL TIME

FRANCE

MAIN MISSIONS • Governance : • Design and maintain the Cybersecurity Framework (policies, standards, and guidelines) to ensure it remains up to date with the evolving threat landscape and L'Oréal needs.

• Ensure applicability of the framework by ensuring that policies are realistic, technically feasible, and tailored to the operational constraints.

• Ensure the cybersecurity framework remains fully aligned with operational security activities and other cross-functional workstreams • Work with compliance team to design and implement the effective deployment strategy of security policies within Zones and Platforms

• Assist cybersecurity managers in understanding and implementing the framework requirements within their specific contexts.

• Provide guidance and support in tracking the resolution of non-compliance issues or audit findings, ensuring long-term improvement.

• Ensure Cybersecurity Framework is well known and understood by the team.

• Report KPI.

APPLY HERE

CHIEF SECURITY OFFICER | COINS.PH FULL TIME

HONG KONG SRA

KEY RESPONSIBILITIES • As the top security leader of the company, the CSO is fully responsible for formulating and implementing the company's overall security strategy, building a comprehensive, systematic, and compliant security system covering digital currency exchange, payment business, and global operations. This role will lead the security team to identify, assess, and mitigate all types of security risks (cyber security, physical

security, data security, operational security, compliance security), ensure the company's business complies with global security-related regulatory requirements, respond to security incidents efficiently, and maintain the company's security reputation and user trust.

APPLY HERE

FIRST VICE PRESIDENT, CYBER SECURITY | AXOS BANK FULL TIME

UNITED STATES OF AMERICA

IDEAL CANDIDATE PROFILE: The ideal candidate is a hands-on technical leader who thrives in fast-paced environments, loves solving complex technical problems while building team capability, and operates with urgency and accountability. You are equally comfortable writing Splunk queries, designing security architectures, coaching team members through technical challenges, and presenting to executives. You understand that this role requires both rolling up your sleeves to do deep

128

W O M E N I N S E C U R I T Y M A G A Z I N E

technical work AND developing others.

You embrace the reality that cyber security leadership requires commitment beyond standard hours. If you are looking for a role where you can make strategic impact through a combination of personal technical execution and building a high-performing team, this is the opportunity.

APPLY HERE

M AY • J U N E 2026

DATA PRIVACY AND PROTECTION - CYBER GRC PROFESSIONAL - CYBERSECURITY | EY FULL TIME

GREECE

TO QUALIFY FOR THE ROLE, YOU MUST HAVE • Master’s Degree, or equivalent, in Information Security, Cyber Security, Information Technology, Informatics, or other similar and technical areas • Evidence of self-motivation to continuously develop in the areas of cybersecurity • Good organizational and time management skills with the ability to prioritize and complete multiple complex projects under tight deadlines • Ability to translate security issues into business risks • Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels • Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies

• Experience, knowledge and strong interest in information and cyber security domains are essential for this role • Experience on Data privacy, implementation of data protection and privacy programmes to ensure confidentiality and security of personal data, addressing regulatory requirements

APPLY HERE

THREAT INTELLIGENCE ANALYST | DOWMARTIN LTD FULL TIME

UNITED ARAB EMIRATES

KEY RESPONSIBILITIES: • Monitor external and internal threat environments to identify emerging risks.

• Collect, analyze, and correlate indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs).

• Produce intelligence reports, briefings, and dashboards for stakeholders.

• Develop and tune SIEM correlation rules and detection use cases.

• Support incident response teams with contextual threat intelligence.

• Integrate threat intelligence feeds into SOC platforms (SIEM, SOAR, TIP).

APPLY HERE

CYBERSECURITY L2 SENIOR ASSOCIATE | PWC ACCELERATION CENTER MANILA FULL TIME

PHILIPPINES

RESPONSIBILITIES • Contribute to threat intelligence initiatives • Manage vulnerability assessments and mitigation • Analyze and solve complex cybersecurity issues • Mentor and support junior team members • Maintain elevated standards in cybersecurity practices

I S S U E 30

• Build and strengthen client relationships • Develop a deeper understanding of cybersecurity within the business context • Navigate complex situations to enhance personal and technical growth

APPLY HERE

WOMEN IN SECURITY MAGAZINE

129

Support the Future of the

AUSTRALIAN WOMEN IN SECURITY AWARDS

®

We need your support to continue this important initiative into its 8th year.

The 2026 Awards will be hosted in Melbourne. To ensure this initiative continues, we invite you to partner with us as a sponsor.

NSORSH

I

Packages ava ilable from $6,000 to $50,000 Custom pack ages tailored to your organisa tion’s needs

PP

O

Your sponsorship will help us continue to celebrate and elevate the achievements of women in security across Australia.

O SP

P

JOIN US IN MELBOURNE FOR 2026

ORT

IE U NIT

S

To discuss how you can support and sponsor next year’s awards, please reach out to Aby at Aby@source2create.com.au.

We look forward to partnering with you to make the 2026 Australian Women in Security Awards our best yet.