Skip to content
CISO Spotlights

Career profile

Amy Steagall

Chief Information Security Officer, Stanford University

Security seat record: Stanford University on CISO Tribune

Status
Role as of 17 October 2024, the date of the latest source
Appointed
Not stated in the sources
Published
· Updated

By the CISO Spotlights Desk. Compiled from public records. Each statement below is drawn from the sources listed at the end.

As of October 2024, Amy Steagall was the Chief Information Security Officer of Stanford University, a position she joined in 2020.

Mondays, by email

More careers like this, every Monday

One email with the week’s new profiles, each linked to its sources.

Unsubscribe any time.

Career path

Before joining Stanford, Steagall served in the United States Air Force for 25 years, retiring from military service prior to her move to the university.
Her military career culminated in a role at the Joint Force Headquarters-Cyber at NSA Texas, where she led cyber mission teams operating in complex security environments and specializing in offensive and defensive cyberspace operations.
She joined Stanford University in 2020 as Chief Information Security Officer, reporting to the university's Chief Information Officer and to the Senior Associate Vice President and Chief Risk Officer. At Stanford she leads the Information Security Office, which oversees the university's efforts to protect its computing and information assets and to comply with information-related laws, regulations, and policies.
Within Stanford's own profile system, her title is listed as University Chief Information Security Officer in Information Security Office Operations.

Education

Steagall holds a Bachelor of Science in Cybersecurity Management and Policy from the University of Maryland and a Master of Science in Cybersecurity Law from the University of Maryland Francis King Carey School of Law.

Public appearances and remit

In October 2024, Steagall gave welcome remarks and took part in a live recording of a CISO Series podcast at Stanford's Cybersecurity and Privacy Festival.
She has also taken part in a recorded conversation with Stanford's CIO Council, describing the motivation behind her team's work protecting the resources and data that support research and education at the university. Of that mission, she said, "My personal motto is mission first, people always." She has described her day as beginning and ending with the university's security mission.

Sources

  1. 1.
    uit.stanford.eduuit.stanford.edu · undated page · checked 9 November 2026 · tier A
  2. 2.
    uit.stanford.eduuit.stanford.edu · undated page · checked 9 November 2026 · tier A
  3. 3.
    profiles.stanford.eduprofiles.stanford.edu · undated page · checked 9 November 2026 · tier A
  4. 4.
    uit.stanford.eduuit.stanford.edu · undated page · checked 9 November 2026 · tier A
  5. 5.
    itcommunity.stanford.eduitcommunity.stanford.edu · undated page · checked 9 November 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.

Mondays, by email

More careers like this, every Monday

One email with the week’s new profiles, each linked to its sources.

Unsubscribe any time.