Andy is a seasoned cybersecurity leader and advisor with over 25 years of experience spanning governance, risk, compliance, and technical domains. His extensive career includes developing and leading cybersecurity programs for organizations of all sizes, including Fortune 100 companies, across industries at national and international levels. Currently, Andy serves as the Region Cybersecurity Officer for the second-largest nonprofit health delivery organization in the nation. In this role, he leverages his expertise and Big Four consulting experience to drive national cybersecurity strategies in the Northwest region, collaborate with executive stakeholders on risk-informed decisions, and advocate for regional stakeholders while reducing cybersecurity and compliance risks organization-wide. A dedicated advocate for the cybersecurity community, Andy is a board member of his local ISSA chapter and a board advisor for Women CyberGuardians. As a speaker, mentor, and coach, he is passionate about fostering the next generation of cybersecurity leaders and professionals. Andy holds a Master of Science in Management (MSM), a Bachelor of Science in Business Information Systems (BSBIS), and is currently a Certified Information Security Manager (CISM) and GIAC GSTRT (SANS). Over his career, he has earned numerous industry certifications. Guided by a business-centric philosophy, Andy focuses on supporting organizational success by providing balanced perspectives on risk. His frequently cited mantra encapsulates his approach: “Making it harder for bad things to happen and easier to detect and respond when they do.” Andy’s mission is to enable organizations to achieve their goals safely, with a holistic view of risk that aligns cybersecurity strategies with broader business objectives.