Mel Thomson

About Mel Thomson

Mel Thomson serves as the Cybersecurity Risk Strategist for the City of Phoenix, where she leads efforts to integrate Enterprise Risk Management (ERM) with cybersecurity throughout the city. Mel is actively bridging ERM principles with cybersecurity to foster a comprehensive approach to risk management across city cyber operations. Her strategy emphasizes the importance of cybersecurity governance, aiming to break down organizational silos and promote a holistic view of risk. By engaging in various teams, this ensures that risks are identified, assessed, treated, and monitored collaboratively across the city.Central to Mel’s approach, is anchoring risk into strategy. This ensures that risk considerations are embedded within broader organizational objectives, enabling leaders to make risk-based investment decisions that support long-term resilience. Mel is establishing risk frameworks and standardized risk processes to provide a common understanding of risks. This ultimately enhances the organization’s ability to prioritize risks and adapt to future challenges.Mel began in the benefits consulting arena and later transitioned into property and casualty at the State of Arizona’s Department of Administration in the Risk Management Division. She was the Risk Administrator for the City of Maricopa where she designed and implemented a new risk division. Mel served in the City of Phoenix\'s Risk Management Division and built the foundation to an ERM program starting in three large departments. Mel has been the Education Chair for Arizona Public Risk Management Association\'s Board (AZPRIMA) and founded and chaired the first State & Local Outreach Committee for the Association of Federal Enterprise Risk Management (AFERM), and currently is a board member of AFERM. In 2023, she received AFERM’s 2024 Volunteer of the Year Award and PRIMA’s Enterprise Risk Management Award. She has a Masters in Administration from Northern Arizona University, Associate in Risk Management (ARM) and has her Chief Risk Officer designation from George Mason University. She is an Enterprise Risk Management Certified Professional (ERMCP). Mel completed her master’s certificate in Enterprise Risk Management at York University, Schulich College of Business in Toronto, Canada. She earned her Certified Risk Management Professional Certification (CRMP-FED) through RIMS. She received her Certification in Risk and Information Systems Control (CRISC) from ISACA, and she is currently working on her Risk AI Certificate (RAI) through the Global Association of Risk Professionals.

Experience

1. Risk Manager

   Valley Metro RPTA

   Oct 2024 — Present

Education

• Arizona State University

  Bachelors, Education

  1995 — 1998

• Northern Arizona University

  Masters, Administration

  2004 — 2008

• ERMA, Enterprise Risk Management Academy

  ERMCP Enterprise Risk Management Certified Professional, ERM

  2022

• The Institutes

  Associate in Risk Management (ARM), Risk Management

  2019