Matthew Henderson

As of September 2024, Matthew Henderson was the Chief Information Security Officer of Capital City Bank, a position he took on effective October 1, 2024.

Career path

Henderson joined Capital City Bank, headquartered in Tallahassee, Florida, in September 2022 as an information security officer.
In that role he focused on information security, physical security, vendor management, business continuity and incident response initiatives.
He was promoted to chief information security officer effective October 1, 2024, succeeding LeAnne Staalenburg McCorvey.
At the time of his promotion, Henderson had more than 15 years of experience in information technology, cybersecurity, information security and physical security across multiple industries. Capital City Bank Group chairman, president and CEO Bill Smith said, "Matt's extensive experience and proven expertise make him an ideal choice to lead our corporate security and risk department."

Remit

In the CISO role, Henderson leads the bank's Corporate Security & Risk Department, overseeing both the information security and physical security teams.
His responsibilities include developing, overseeing, monitoring, managing and reporting on the security program in accordance with policy.
Bloomberg's profile lists him as senior vice president and chief information security officer of Capital City Bank Group Inc.

Education, credentials and boards

Henderson holds a Bachelor of Science in Management Information Systems from Troy University and a Master of Science in Management Information Systems from the University of Alabama at Birmingham. His certifications include Certified Information Systems Security Professional, Certified Information Security Manager, Certified in Risk and Information Systems Control and Certified Information Systems Auditor. He serves on several advisory boards and committees within the financial sector, including the American Bankers Association's Cybersecurity and Operational Resilience Advisory Committee, the Risk and Compliance Conference Board and the Cyber Risk Institute's Joint Standards Committee.