Jordanne Barrett

About Jordanne Barrett

I am a Cybersecurity Strategy Leader and Business Information Security Officer (BISO) with over a decade of experience leading security programs that bridge governance, risk, compliance, and business strategy. My focus is building resilient cybersecurity and AI governance frameworks that enable innovation while protecting organizations against regulatory, ethical, and operational risks.I bring deep expertise across leading standards and frameworks, including- NIST RMF & AI RMF- PCI DSS & SOC 2 Type 2- NYDFS Cybersecurity Regulation- OECD AI Principles- OWASP Security Standards- ISO 42001 (AI Management System Standard)- AI Governance & Responsible AI Practices- Data Privacy (GDPR & US State)- EU AI ActI have led enterprise-wide risk assessments, compliance initiatives, and policy development that reduced exposure, enhanced executive decision-making, and built trust in security and AI adoption. My leadership is defined by translating complex cybersecurity and AI risk requirements into actionable strategies that drive measurable impact.As a speaker, mentor, and advisor, I share insights on cybersecurity leadership, risk management, and AI governance at industry conferences and through mentoring programs. I am passionate about preparing organizations for the realities of AI-driven risk while shaping the next generation of cybersecurity leaders.Whether guiding executives, advising boards, or consulting on AI governance projects, I deliver strategic, business-aligned solutions that enable organizations to thrive securely in a rapidly evolving digital era.Proud member of InfraGard

Experience

1. Business Information Security Officer (Biso)

   AT&T

   Aug 2024 — Present · Atlanta, GA, US

   Strategic Alignment: Partner with business units to integrate security strategies into overall business objectives, ensuring alignment with organizational goals.• Risk Management: Identify, assess, and manage information security risks related to business operations, developing mitigation strategies.• Security Governance: Lead the implementation and enforcement of security policies, standards, and procedures across business lines.• Incident Response: Coordinate and manage response to security incidents within the business unit, collaborating with central security teams.• Security Awareness: Promote security awareness through training programs and by fostering a security-first mindset within the organization.• Compliance Management: Ensure adherence to relevant regulatory requirements and internal security policies, conducting regular audits and assessments.• Security Metrics and Reporting: Provide regular reports on security posture, risk assessments, and compliance to senior leadership and stakeholders.• Third-Party Risk Management: Oversee the evaluation of third-party vendors and partners to ensure their security measures meet organizational standards.• Stakeholder Engagement: Act as the primary liaison between the business and the cybersecurity team, communicating risks and security priorities.• Security Innovation: Identify and advocate for new security technologies or practices that improve the organization\'s security posture and business efficiency.

Education

• University of Maryland Global Campus

  Master of Science - MS, Cybersecurity

  2019 — 2021

• University of South Florida

  Bachelor of Arts - BA, Information Science/Studies

  2010 — 2014

Skills

• Jasper
• Higher Education
• Quality Center
• Access Control
• Data Analysis
• Student Development
• Teamwork
• Microsoft Word
• Qualitative Research
• Student Affairs
• Cryptography
• Payment Card Industry Data Security Standard (Pci Dss)
• Microsoft Office
• Information Security
• Statistics
• Powerpoint
• Quality Assurance
• Spss
• Event Planning
• Citrix
• Program Development
• Toad
• Research
• Community Outreach