Caroline Wong

WORK HISTORY

EDUCATION

SKILLS

ABOUT CAROLINE WONG

ORDER NOW: wasn’t part of my original plan—I memorized the Wikipedia page on “information security” to get through my first eBay interview in the summer of 2005. But that entry point sparked a fascination, and since then, my career has been driven by a single mission: to make cybersecurity accessible, human-centered, and impactful.*Building Security Programs with Purpose*At eBay, I managed a global security budget and shaped policies for PCI and SOX compliance. But I quickly learned that effective security isn’t just about frameworks—it’s about building a culture of resilience and trust. By partnering with executives and translating technical challenges into strategic insights, I helped turn our program into a true business enabler.At Zynga, I led efforts to prepare the security program for IPO, embedding practical security practices that supported our fast-paced development environment. At Symantec, I guided the Control Compliance Suite, helping clients like HSBC and government agencies operationalize security standards to minimize risk. Later, at Cigital, I helped global companies establish resilient software security practices that grew with their needs.*Pioneering \"Pentesting as a Service\" at Cobalt*When I joined Cobalt in 2016, “Pentesting as a Service” was uncharted territory. I championed this model, connecting with the cybersecurity community and building a scalable delivery framework. Over time, I led our teams as we grew from 10 to 250 employees, conducted over pentests, and made high-quality security testing accessible for companies of all sizes.*Making Cybersecurity Accessible to All*Beyond my corporate roles, I’m passionate about educating the broader community. My book, Security Metrics: A Beginner’s Guide, was inducted into the Cybersecurity Canon Hall of Fame, and my LinkedIn Learning courses have reached over hundreds of thousands of professionals. I also host Humans of InfoSec, a podcast exploring the human challenges that shape our industry.Throughout my career, I’ve focused on bridging the gap between technology and people, helping organizations understand that cybersecurity is more than a technical need—it’s a strategic asset. If you’re interested in making security practical, scalable, and human, let’s connect.