Suggestions
Becky Swain
Governance, Risk & Compliance Leader and Senior Security Manager @ The Boeing Company
Professional Background
Becky Swain is a distinguished professional in the cybersecurity arena, boasting over two decades of experience specializing in governance, risk management, and compliance (GRC). Her impressive career has seen her contribute significantly to the development of cloud security and compliance automation strategies, along with formulating shared responsibility matrix modeling for 2nd, 3rd, and 4th party common control reliance and inheritance. Becky's extensive expertise ensures that organizations can effectively navigate the complex landscape of regulatory compliance and security assurance.
Throughout her career, Becky has honed her skills and deep technical understanding to assist organizations in meeting the stringent requirements set forth by leading security and privacy regulations, industry standards, and assurance control frameworks. Notably, her expertise covers a broad array of frameworks, including ISO/IEC 27001, AICPA SOC 2, HITRUST CSF, PCI DSS, and many more. This broad knowledge base reflects her commitment to promoting optimal compliance and cybersecurity resilience in various industries.
Becky's professional journey is marked by several key roles, including her tenure as a Senior Security Manager and Governance, Risk & Compliance Leader at Boeing. In this capacity, she played a pivotal role in shaping the organization's approach to cybersecurity governance and risk management. Additionally, her experience as Director of Cloud Assurance Innovation and Director of Standards Development at HITRUST reflects her leadership in developing innovative strategies for cloud security and assurance.
Education and Achievements
Becky Swain's educational background is a testament to her dedication to continuous learning and professional development. She began her academic journey at Santa Clara University, where she pursued a Bachelor's degree in Computer Science with a focus on Mathematics. This foundation in technical disciplines has enabled her to navigate the intricacies of cybersecurity with confidence and expertise.
Following her time at Santa Clara University, Becky further expanded her educational background by studying Architecture and Environmental Design at the University of Colorado Boulder. This multifaceted education not only adds to her technical acumen but also enhances her ability to approach problems holistically, considering both technical and design elements.
Her contributions to the cybersecurity field have been recognized through various honors and milestones. Becky is a holder of esteemed professional credentials, including CISSP (Certified Information Systems Security Professional), CIPT (Certified Information Privacy Technologist), CIPP/US (Certified Information Privacy Professional/United States), CISA (Certified Information Systems Auditor), and HITRUST CCSFPI (HITRUST Certified CSF Practitioner Initiative). These certifications underscore her commitment to maintaining a high standard of professional competence and excellence within the cybersecurity landscape.
One of the hallmarks of Becky's career has been her active participation in developing industry standards that shape the future of cybersecurity. She was instrumental in contributing to the HITRUST Shared Responsibility Matrix and the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) / Security Trust Assurance and Risk (STAR) framework, in which she served as a co-founder and author. Her role as a project co-editor for the ISO/IEC 27036-1:2014 document on information security for supplier relationships exemplifies her leadership in establishing best practices in cybersecurity governance.
Additionally, Becky has been involved in various workgroups and task forces, including her contributions to the AICPA ASEC Emerging Assurance Technologies Task Force, where she helped adapt SOC 2 audit guidance specifically for cloud services. Her collaborative approach and attention to detail have made her a respected voice in the industry.
Achievements
Becky Swain’s career is adorned with remarkable achievements and contributions that underline her authority in the cybersecurity sector. As founding member of the (ISC)2 Certified Cloud Security Professional (CCSP) exam writing committee, she has been pivotal in shaping the next generation of cybersecurity professionals, ensuring that certification standards align with current industry needs and practices.
Her position as a Senior Manager focused on Governance, Risk & Policy at Boeing allowed her to directly influence the company's approach to cybersecurity governance, ensuring a robust framework that effectively mitigates risk. Similarly, her role as the Senior Director of Governance, Risk & Compliance at Symantec placed her at the forefront of securing information and maintaining compliance within a top-tier cybersecurity company.
In addition to her corporate roles, Becky has contributed her expertise to various consulting and advisory capacities. As a Cloud Assurance Director at PwC, she offered valuable insights to clients navigating the complexities of cloud compliance and risk management. Her experience as a Principal Consultant in GRC & Cloud Security Assurance at OSIBIA, Inc. further affirms her adaptability and expertise across different sectors and challenges.
Her earlier positions at Cisco as a Program Manager exemplified her ability to handle complex global risk management projects, where her strategic vision and tactical execution proved invaluable. Moreover, her foundational role as a Network Administrator at Magellan GPS and a Customer Support Engineer at Amnis Systems Inc. reflects her technical proficiency and ability to communicate effectively within diverse teams.
As a Board Member of the CSA Silicon Valley (CSA-SV) Chapter at the Cloud Security Alliance, Becky has played an essential part in fostering collaboration and knowledge-sharing within the cybersecurity community. Her dedication to industry engagement and thought leadership underpins her reputation as a trusted expert in the field.
In summary, Becky Swain's extensive background in cybersecurity, underscored by her dedication to governance, risk management, and compliance, positions her as a thought leader within the industry. Her educational endeavors, coupled with a robust career filled with notable achievements and contributions, reflect her unwavering commitment to fostering a more secure digital landscape. As the cybersecurity landscape continues to evolve, Becky remains a key figure in driving innovations that safeguard organizations and ensure compliance with critical regulatory requirements.
