Mandy Matthew

About Mandy Matthew

With over six years of experience in managing complex and high-impact projects in the information security and compliance domains, I am the Lead Security Risk Program Manager at Duolingo, the world\'s most popular language-learning platform. I lead the delivery of strategic cross-functional initiatives from ideation to launch, ensuring alignment with applicable legal and industry frameworks such as SOC2 and ISO. I collaborate with functions across the company, such as legal, privacy, finance, accounting, and executive leadership, to foster a culture of security and compliance and to mitigate risks effectively. I also implement processes to automate and continuously monitor compliance and information security, and develop reporting metrics, dashboards, and evidence artifacts to communicate our posture clearly to internal and external stakeholders. My mission is to enable Duolingo to achieve its vision of making education free and accessible to everyone, while protecting its data, assets, and users. I am certified by AWS and (ISC)² (candidate), and have a Master\'s Degree in Information Systems Management from Carnegie Mellon University.

Experience

1. Lead Security Risk Program Manager

   Duolingo

   Sep 2024 — Present

Education

• University of Maryland

  Bachelor’s Degree, Biomedical Engineering

  2009 — 2013

• Carnegie Mellon University

  Master’s Degree, Information Systems Management

  2015 — 2016

Skills

• Software Development
• Python
• Scrum
• Employee Training
• Microsoft Office
• Java
• Data Analysis
• Business Process Management
• Sql
• R
• Web Applications
• Database Administration
• Matlab
• Saas
• Enterprise Software
• Enterprise Architecture
• Software Consulting
• Javascript
• Uml
• Technical Writing
• Html
• Software Integration
• Software Documentation
• Sdlc
• Ooad