Cathy Olsen

About Cathy Olsen

SKILLS PROFILE- CyberSecurity – 20 years experience in the field. 10 years in leadership. In-depth knowledge of of technology and potential security and operational implications for cloud, IT and OTenvironments. Certification – Certified Information Systems Security Professional (CISSP)- Regulatory Expertise –Privacy Regulations (GDPR, CCPA, etc,) GLBA, HIPAA, Red Flag, BSA, SOX; FFIEC standard required by OCC, FDIC, and other governing agencies. Certification – Certified Information Systems Auditor (CISA)- Governance and Risk Management - In-depth knowledge of IT Governance and IT risk managementframeworks, processes and reporting.

Experience

1. Information Security Director

   Packsize

   Apr 2023 — Present

   Lead the global information security program with a focus on aligning cybersecurity strategy to business goals, achieving key security milestones ahead of schedule and under budget- Established and now lead the Enterprise Risk Management (ERM) process, integrating cyber, operational, and compliance risks into a unified framework to inform executive decision-making- Developed and operationalized a Third-Party Risk Management (TPRM) and Supply Chain Security program, incorporating continuous risk monitoring, assessments, and contractual requirements- Built and maintain strong cross-functional partnerships across Product, R&D, IT, Operations, and Legal, fostering a culture of shared accountability and embedding security throughout the business lifecycle- Spearheaded deployment of enterprise security controls, including Email Gateway Security, SASE, Privileged Access Management (PAM), and Cloud Security Posture Management (CSPM)- Designed and implemented metrics to measure security program impact, risk reduction, and control effectiveness, enabling data-driven prioritization and board-level reporting- Led the creation and continuous improvement of the incident response program, driving automation and reducing mean time to detect and respond (MTTD/MTTR)- Authored and drove adoption of security policies, standards, and technical controls mapped to NIST CSF, ISO 27001, and business-specific risk requirements- Developed and tested disaster recovery plans and business continuity playbooks to ensure resilience of critical assets across IT and OT environments.

Education

• Brigham Young University

  BS Information Systems, Management Information Systems, General

  1999 — 2003