Stacey Champagne

Hacker in Heels

On a mission to get more women into positions of power within the cybersecurity industry. Hacker in Heels is a feminist, purpose-driven business helping women in cybersecurity get paid, promoted, and recognized for their value and impact. Through content, courses, coaching, and events, Hacker in Heels has positively supported the careers of over 1,500+ cybersecurity practitioners. Become a member: hackerinheels.com/insiders

Founder & CEO

ASRC Federal

• Investigates cybersecurity events and incidents involving the US Department of Justice (DOJ) Office of Justice Programs (OJP), including attacks against web applications, leaks of Personally Identifiable Information (PII), third+ party compromise, and social engineering of OJP personnel via phishing.

• Identified gaps in OJP’s existing incident response process, introduced industry standards, and improved alignment of component-level operations with DOJ incident response policy.

• Frequently sought after by OJP ITSD senior leadership and the CISO to advise on cybersecurity program strategy, operations, and communication, with the highest compliments for quality and service ever received by an ASRC employee on the contract.

• Consistently requested to represent ASRC Federal as a cybersecurity subject matter expert (SME) on business development (BD). Created marketing and Request For Proposal (RFP) response copy for three (3) BD projects.

Principal, Cybersecurity Incident Response Lead

The Cyber Queens

Co-host of episodes produced January 2024 through June 2024. The Cyber Queens Podcast streamed weekly on LinkedIn and YouTube, with the goal of inspiring and increasing representation of women and minorities in cybersecurity. The show provided a platform for voices and ideas that challenged the status quo, and promoted a more diverse, inclusive, and honest environment to welcome the next generation of minority cybersecurity professionals.

Podcast Co-Host

TransUnion

• Conducted insider threat investigations across 30 countries with one (1) UK-based direct report.

• Used endpoint, network, and cloud technologies for technical analysis and incident response, including Microsoft 365, Proofpoint, Tanium, Splunk, Axonius, and Exabeam.

• Interviewed subjects and witnesses to corroborate subject activity. Identified intent, motive, and tactics using cognitive interviewing and behavioral psychology best practices.

• Built relationships and integrated data from Legal, Human Resources, Corporate Security, and other non-security teams with cross-functional insider threat intelligence applicability.

• Constructed and disseminated Reports of Investigation (ROIs) for stakeholders to review and determine further action(s). Used outcomes of investigations to provide recommendations for proactive insider risk mitigation strategies.

Key Accomplishments

• Designed and drafted updates to TransUnion’s Global Evidence Handling Policy. Boosted assurance of evidence integrity through incorporation of industry best practices, and ensured applicability across multiple Global Cyber Defense teams.

• Migrated legacy Standard Operating Procedures (SOPs) from standalone documents into a knowledge management system (Confluence).

Senior Manager, Global Insider Threat Investigations

Compass

• Designed and built a new security operations function for responding to information security incidents involving Compass customers and their clients.

• Investigated cases of platform abuse, including business email compromise, wire fraud, IT support scams, third-party compromise, and impersonation.

Key Accomplishments

• Designed a custom case management solution using already purchased technologies (Zendesk, Google Workspace, OpsGenie). Partnered with Enterprise Technology System Engineers to configure and release.

• Used existing headcount in Enterprise Technology and Information Security to support the new services without impacting existing service level agreements (SLAs).

Manager, Agent Trust & Security

• Oversaw the day-to-day operations of five (5) Information Security sub-teams with 15-20 total employees: Infrastructure Security, Application Security, Detection Engineering & Response Automation, Enterprise Security, and Governance, Risk, and Compliance (GRC).

• Provided vision and leadership for the planning (strategic and tactical), budgeting, implementation, and assessment of information security systems and operations.

•  Drove organizational needs cross-functionally with Product, Engineering, and Finance, including tracking and reporting of progress and metrics.

• Interfaced regularly with Senior, Executive, and C-Level leadership. Acted as the backup to the CISO and represented the organization in security-related meetings.

Key Accomplishments:

• Overhauled the Information Security team’s strategic mission, vision, tenets, and assertions. Established four key performance indicators to track the impact of program initiatives on reduction of risk for easy comprehension by executive leadership.

• Organized and led annual strategic planning. Collected, prioritized, and presented information security program initiatives, third-party spend, and headcount requirements for the CTO and senior leadership.

• Provided strategic and hands-on assistance in remediation of a third-party data breach that impacted multiple engineering teams.

• Developed and implemented security awareness programs for employees and customers, including secure development for product engineers, home security practices for executives, and how to respond to phishing and other scams for realtors.

Information Security Program Manager

Blackstone

• Designed, implemented, and maintained a comprehensive insider threat program for 26 offices across the Americas, Europe, and Asia.

• Sourced, deployed, and maintained new insider threat monitoring technology on 4,000+ devices.

• Performed hiring, supervision, and performance management of two (2) direct reports.

• Created policies, response strategies, technical support documents, and operational systems to support insider threat investigations.

• Routinely worked with Legal, Human Resources, Privacy, Audit, Compliance, and regulatory teams to review policies, procedures, and program compliance.

Insider Threat Program Lead

Capital One

• Used an array of tools and capabilities to investigate insider threat cases, including Magnet Internet Evidence Finder (IEF), EnCase, Absolute Data and Device Security, Jamf, AirWatch, Proofpoint, and Microsoft 365.

• Analyzed and verified information using investigative techniques, internal resources, and conversations/interviews with subjects and witnesses.

• Generated reports and/or provided requested information for cases or incidents in compliance with reporting procedures and policies.

Insider Threat Technical Investigator

• Monitored access, use, handling, and storage of designated Highly Sensitive Documents (HSD).

• Deployed new data security platform for protecting HSD for use by senior executives and the board.

• Partnered with engineering to develop an in-house tool for collecting, analyzing, and resolving information security events and incidents involving sensitive and confidential information.

Insider Threat Analyst

• Provided process engineering support for Information Security Risk Management functions including compliance, vulnerability management, and security operations.

• Analyzed and provided guidance for improving organizational processes, conducted technical research, and wrote technical documentation.

Cybersecurity Process Engineer

United States Federal Government

Created charts, matrices, infographics, presentations, and other visual graphics in support of national intelligence efforts for publications in briefs, reports, internal and inter-agency information sharing platforms, and the Presidential Daily Brief (PDB).

Visual Information Specialist

Stacey Champagne is the Founder & CEO of Hacker in Heels, a community with the mission to get more women into positions of power in the cybersecurity industry. Through content, courses, coaching, and events, Hacker in Heels helps women in cybersecurity get paid, promoted, and recognized for their value and impact.

With over a decade of experience building and leading cybersecurity programs at Fortune 500s and startups alike, Stacey uses her personal experience plus professional training in coaching to enable women to achieve their biggest cybersecurity career goals. She is an award-winning, transformational cybersecurity leader with subject matter expertise in insider risk management, security investigations, operations, and program management.

Recognitions: 2023 10th Annual Cyberjutsu Awards Winner in the "Cyber Advocate" category, and "Cyber Mentor" nominee; selection into Secure Diversity and SANS Institute's "Operational Cyber Executive" program in 2022; and finalist for Executive Women's Forum 2019 "One to Watch" award.
 
Certifications: GIAC Security Operations Manager (GSOM) [89%], GIAC Security Leadership Certified (GSLC) [92%], Certified Forensic Computer Examiner (CFCE), Insider Threat Program Manager (ITPM), Security+, SAFe 6 Practitioner, Certified Professional Coach (CPC).

Academic Degrees and Certificates: Master of Science in Security and Resilience Studies with a focus on Cybersecurity Policy from Northeastern University, and a graduate certificate in Cybercrime Investigation and Cybersecurity from Boston University—both with 3.9 GPAs.

Taplio

Stacey Champagne's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Stacey Champagne's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Stacey Champagne's Linkedin Analytics