Zoom CISO Sandra McLeod on Security Strategy and Leadership

Summary

After a year as Zoom’s CISO, Sandra McLeod reflects on shifting from reactive incident response to strategic security leadership, balancing risk reduction with business goals, and taking responsibility for incident escalation and prevention.

Key points

• McLeod says her first year moved from reactive response toward proactive security strategy aligned with business objectives.
• She says engineers, board members, and customers sought confidence that security would reduce risk while supporting innovation and business needs.
• She describes incident leadership as including real-time response, escalation judgment, root-cause understanding, and measures to prevent recurrence.
• McLeod advises aspiring women leaders to examine their motivations and try leadership through projects, mentoring, or cross-functional work.

People

Vendors