Heather Ceylan

Heather Ceylan is the Chief Information Security Officer at Box, where she leads the global information security program and strategy.

Career path

Ceylan holds a B.S. in Management Information Systems from Butler University.

She began her security career as Director, Cybersecurity, Privacy, and Risk at PwC, a role she held for nine years, where she advised Fortune 500 companies on complex security and privacy programs.

She then moved to Collective Health, serving as VP of Security, Privacy, and Compliance.

Ceylan joined Zoom Video Communications in January 2021.

At Zoom she became Head of Security Standards, Compliance, and Customer Assurance, overseeing the ongoing development and implementation of Zoom's information security standards and controls, as well as the company's strategy for providing customers assurance over its security program, including certifications and attestations.

Under her watch, Zoom's number of security certifications grew from about two to more than twenty.

She later served as Deputy CISO at Zoom, where she helped scale the company's security posture during a period of rapid global growth, before moving to Box as Chief Information Security Officer.

Ceylan has over 15 years of experience and has built and led security teams across technology, healthcare, and financial services.

She was recognized as the 2024 Women in Cybersecurity Leader of the Year.

Remit and public commentary

At Zoom, Ceylan described the company's security priorities as protecting the platform and its customers first, followed by product, revenue, and supporting talent, noting "there's such a shortage of good cybersecurity talent out there, and you're only as strong as your people."

She also discussed Zoom's investment in an AI-driven phishing simulation platform that performs targeted behavioral-based simulations and provides real-time training.

As a moderator for a Box-hosted conversation, Ceylan joined Will Monahan, chief information security officer for the Georgia Department of Community Health, to discuss the agency's move toward automated, AI-driven security frameworks for protecting health benefits data.