Mandy Andress is currently the CISO of Elastic. Prior to Elastic, Mandy led the InfoSec function at MassMutual and established and built information security programs at TiVo, Evant, and Privada. She worked as a security consultant with Ernst & Young and Deloitte & Touche, focusing on energy, financial services, and Internet technology clients with global operations. She also founded an information security consulting company with clients ranging from Fortune 100 companies to start up organizations.

She is a published author, with her book Surviving Security having two editions and used at multiple universities around the world. She has been a sought after expert in the field, speaking at signature security conferences such as BlackHat and Networld+Interop. She has taught a graduate level Information Risk Management course for UMass Amherst.

Mandy holds a JD, CPA, Master’s in management information systems, and BBA in accounting. Mandy is a CISSP, CPA, and member of the Texas Bar.