About Candy Alexander, CISSP CISM

---

Summary

Candy Alexander’s leadership catalyzed a transformation in how multinational organizations approach cybersecurity—shifting the focus to business value, harmonization of global practices, agility through virtual leadership models, responsible technology adoption, and empowered, inclusive teams. Her influence continues to define standards and operational excellence for global enterprises

Candy Alexander’s Leadership Changed Cybersecurity Practices in Multinational Organizations

• Influence as a Global Leader: Recognized as the #1 Global Influencer of Security Executives by IFSEC Global and inducted into the ISSA Hall of Fame, Alexander is credited with mentoring leaders worldwide, advocating for diversity, and inspiring a generation of security professionals to adopt innovative and inclusive strategies.

Business-Aligned Cybersecurity Programs

• Shift from Siloed Security to Business Integration

Alexander steered organizations away from viewing cybersecurity as a purely technical concern. Instead, she advocated aligning security initiatives with business objectives—encouraging multinational companies to build risk profiles directly tied to strategic plans, such as expanding into new markets or launching direct-to-consumer channels. This practical alignment led to security investments that directly supported business growth and resilience.

Fractional and Virtual CISO Leadership

• CISO as a Service

Alexander pioneered the fractional (virtual) CISO model for companies operating globally. This approach enabled organizations—especially those entering new markets or scaling internationally—to access high-level cyber risk leadership as needed, promoting agility and allowing for rapid, expert-driven alignment of security with business priorities.

Technology and AI Governance

• Guiding Responsible Technology Adoption

Her leadership in Cloud Security Alliance’s AI working groups and her role as NeuEon’s CISO guided multinationals in responsibly adopting cutting-edge technologies like AI and cloud computing. She emphasized robust data governance, building organizational trust in AI systems, and implementing security controls tailored to global regulatory environments.

Global Standards and Best Practices

• Architect of Universal Frameworks

Candy Alexander was instrumental in developing the ISSA Cyber Security Career Lifecycle—a model used worldwide. By providing a blueprint for cybersecurity talent development, she helped multinational organizations standardize workforce skills and professional expectations across borders, which improved collaboration and raised the baseline for global security operations.

• Promotion of Data-Driven Decision Making

Through spearheading the ISSA/ESG research project, Alexander delivered research that multinational organizations use to benchmark their practices, understand workforce challenges, and inform global strategies. The wide adoption of these research findings has led to better-informed security policies and coordinated responses to emerging threats.

Candy Alexander’s Leadership Impact on Global Cybersecurity Strategies

Transformational Influence on Industry Frameworks

• Architect of Career Models: As chief architect for the ISSA Cyber Security Career Lifecycle, Alexander has provided a blueprint for professional development and upskilling worldwide—helping organizations and individuals align talent development with evolving cyber threats.

• Development of Research Initiatives: Her leadership in launching and advancing the annual ISSA/ESG research project on the state of the cybersecurity profession has deeply influenced global workforce strategies, bringing data-driven insights into policy-making and organizational planning.

Driving Thought Leadership and Policy

• Role as ISSA International President: Twice serving as International President of the Information Systems Security Association (ISSA), Alexander led global advocacy efforts, establishing standards and best practices that are widely adopted by security professionals, industry groups, and enterprises.

• Government and International Engagement: By presenting at major forums—including the United Nations IT Security Symposium and before U.S. government officials—she has helped shape international policy dialogue around cybersecurity resilience and workforce development.

Promoting Secure AI and Cloud Adoption

• Steering Emerging Technology Guidance: Through her work with the Cloud Security Alliance (CSA) Artificial Intelligence working group, Candy Alexander contributes to the development of protocols for safe and secure adoption of AI and cloud technologies, which are increasingly relied upon in global cybersecurity strategies.

Advancing Business Alignment and Risk Management

• Security as Business Enabler: Alexander’s executive roles have emphasized the need to integrate security with business strategy, shifting global perspectives from treating cybersecurity as a technical silo to an essential part of business risk management and competitive advantage.