Suggestions
Matt Hillary
Professional with extensive experience across various industries
Matt Hillary is the Vice President of Security and Chief Information Security Officer (CISO) at Drata, a company known for its continuous security and compliance automation platform. He was appointed to this position in May 2023 and has over 15 years of experience in the security field, focusing on building and managing security programs.
Career Background
Before joining Drata, Matt held several significant roles in various organizations:
- Lumio: Senior Vice President of Systems and Security and CISO
- Workfront: Vice President of Security and CISO
- Weave: Chief Information Security Officer
- Instructure: Vice President of Security
- MX: Director of Security
- Adobe: Senior Manager of Security
- Amazon Web Services (AWS): Various roles including Compliance Program Manager
His career began as a Software Engineer in Test at Neovest in 2006, followed by a role as a Senior IT Security Consultant at Ernst & Young from 2007 to 2010.123
Education and Certifications
Matt holds a Bachelor's degree in Information Systems Management and a Master's degree in the same field, both from Brigham Young University, completed in 2008. He also has a certification in CISA from the AICPA, although the specific date of certification is not provided.234
Responsibilities at Drata
In his current role at Drata, Matt is responsible for guiding and evolving the company's global cybersecurity strategy, ensuring the protection of internal operations and customer data.12
Highlights
AI is transforming the world – and AI's influence on GRC is no exception! 💡
In my latest article for the Forbes Technology Council, I dive into how #AI is poised to reshape #GRC programs. While the potential for AI to enhance efficiency and improve risk management is undeniable, we must also confront the significant risks and challenges that come with it from data privacy issues to ethical dilemmas and overreliance on technology.
As GRC leaders, we must leverage AI's power while ensuring robust safeguards and human oversight. In this article, hear my thoughts on:
- The dual-edged sword of AI in GRC operations
- Critical risks, including data security and ethical considerations
- The need to avoid overdependence on AI and maintain human oversight
- Strategies for closing the skills gap as we embrace AI in GRC
Read the full article here: https://lnkd.in/gW28zrMt
Check out Drata's latest efforts in this space. 🚀 #RiskManagement #Compliance #Innovation #CISO #CISOLeadership
🌟 Exciting News! 🌟
I'm thrilled to share my first article for the Forbes Technology Council: "Privacy by Design and Its Impact on Security and GRC."
Privacy by Design is more than a concept—it's a proactive approach that embeds privacy into the very fabric of our systems, products, and processes. This approach covers the following seven principles:
- Proactive not Reactive; Preventative not Remedial
- Privacy as the Default Setting
- Privacy Embedded into Design
- Full Functionality – Positive-Sum, not Zero-Sum
- End-to-End Security – Full Lifecycle Protection
- Visibility and Transparency
- Respect for User Privacy
For a deeper dive on Privacy by Design, its benefits, and steps for successful implementation, read my article here: https://lnkd.in/g9j8pJnC
#PrivacyByDesign #DataPrivacy #Cybersecurity #CISO
