Sign In

Kristy Westphal

Professional Background

Kristy Westphal is an esteemed Senior Leader in Information Security and Operations, known for her exceptional ability to navigate and address complex security challenges in highly regulated industries. With extensive expertise in operational risk management and cybersecurity, Kristy has established a prominent career characterized by strategic development and implementation of security frameworks. Her career trajectory exemplifies a strong commitment to mitigating information risk, enhancing security within organizations, and fostering an understanding of security protocols among business and technology partners.

Kristy’s professional journey includes notable positions such as Global Security Director at Spirent Communications, where she has consistently demonstrated her prowess in developing and executing comprehensive security programs. Her previous experiences also encompass prestigious roles such as VP of Security Operations at HealthEquity, and Vice President of CSIRT at Union Bank, where she excelled at leading security teams and implementing robust risk management strategies.

A trusted advisor to senior leadership, Kristy is renowned for building strong alliances with executive teams, boards of directors, clients, and other key stakeholders. Her ability to transform business units and lead teams is attributed to her focus on hiring, developing, and engaging skilled professionals who are essential for operational success. Through her extensive experience across various organizations, Kristy has effectively enhanced security postures, driving significant improvements in risk management and operational resilience.

Education and Achievements

Kristy Westphal has garnered extensive academic qualifications that complement her vast experience in the field of Information Security. She studied for her Masters in Legal Studies at Arizona State University, where she developed a nuanced understanding of legal implications in cybersecurity. Additionally, she earned a Master of Business Administration from the same institution, equipping her with strategic insights into organizational operations and governance.

Prior to her graduate studies, Kristy obtained a Bachelor’s degree in Finance from the University of Arizona, Eller College of Management. This educational background has provided her with a solid foundation in business principles, allowing her to effectively bridge the gap between finance, technology, and security concerns.

Kristy’s accomplishments are numerous and noteworthy. She has successfully built multiple security programs from the ground up, catalyzing improvements in operational readiness and incident response capabilities. Her initiative to design and execute over 40 cybersecurity training exercises annually has played a pivotal role in collaborating with both third-party vendors and global partners. Furthermore, she has implemented an upskilling plan for AWS and Azure response efforts, which has significantly prepared her team for rapid and effective response to cloud-related incidents.

Areas of Expertise

Kristy's expertise spans key domains in cybersecurity and risk management, including:

  • Strategic Planning: Formulating comprehensive security strategies that align with organizational goals.
  • Privacy & Governance: Ensuring compliance with regulations and establishing robust governance frameworks.
  • Risk Assessment & Mitigation: Conducting thorough assessments to identify vulnerabilities and implement effective mitigation strategies.
  • Operational Risk Management: Overseeing risk management processes to enhance resilience and protect stakeholder interests.
  • Incident Response: Leading response efforts to effectively manage and contain security incidents.
  • Business Continuity / Disaster Recovery: Developing plans to ensure business operations remain uninterrupted during crises.
  • Training / Awareness: Creating programs to educate staff and stakeholders on security best practices.
  • Regulatory Compliance: Navigating complex compliance frameworks including FFIEC, PCI, SOX, and SSAE Reporting.

Notable Achievements

Throughout her illustrious career, Kristy has achieved numerous milestones that exemplify her dedication to the field of cybersecurity. Among her significant achievements are:

  • Building and operationalizing multiple security programs, ensuring targeted and effective security measures are in place.
  • Designing and executing a high volume of cybersecurity training exercises, enhancing the operational readiness of teams.
  • Implementing a targeted upskilling plan for cloud response efforts, reinforcing incident response capabilities in emerging technology spaces.
  • Developing and implementing a full lifecycle security operations approach, integrating critical components such as threat intelligence and content engineering.
  • Identifying risks and gaps within various systems and processes, successfully developing and presenting mitigation plans to senior leadership to enhance organizational integrity.

Kristy Westphal’s extensive experience, blended with her academic accomplishments, positions her as a thought leader and respected expert in Information Security. With a proven track record of delivering transformative security solutions and fostering an environment of security awareness, Kristy continues to make significant contributions to the field, ensuring organizations are well-equipped to handle the dynamic nature of cybersecurity risks.

Highlights

Nov 19 · TechTarget
The threat hunting process is missing the human element - TechTarget
Nov 19 · TechTarget
The threat hunting process is missing the human element - TechTarget
The threat hunting process is missing the human element - TechTarget

Related Questions

How did Kristy Westphal develop her expertise in cybersecurity and risk management?
What inspired Kristy Westphal to build multiple security programs from inception?
Can Kristy Westphal share her approach to fostering security awareness among business partners?
What are Kristy Westphal's future goals in the field of information security?
How has Kristy Westphal leveraged her educational background to influence her career in cybersecurity?
Kristy Westphal
Add to my network

Location

Tucson, Arizona, United States