Sandy Dunn

As of March 2025, Sandy Dunn is the Chief Information Security Officer of SplxAI, having joined the AI security startup that month to lead development of its governance, risk and compliance offering.

Career path

Dunn spent nearly 15 years at Hewlett Packard, developing her security background through a series of security-focused roles including Information Security Officer.

She then became Chief Information Security Officer at Blue Cross of Idaho, a role she held for five years, during which she established the company's enterprise-wide security practices to protect information assets and protected health information.

In February 2022, Dunn joined BreachQuest as Chief Information Officer and Chief Security Officer, taking responsibility for the company's information technology initiatives and strategy as well as the systems and security practices supporting its incident-response platform.

"I am thrilled to join BreachQuest, a company that is backed by a world-class team of leaders in cybersecurity," Dunn said at the time.

She later served as Chief Information Security Officer at Brand Engagement Network.

In March 2025, Dunn joined SplxAI as CISO as the company closed a $7 million seed funding round, bringing its total raised to $9 million, with her remit focused on building out the startup's GRC solutions for agentic AI security.

Teaching and standards work

Dunn is an Adjunct Cybersecurity Professor at Boise State University and sits on the board of directors of the university's Institute for Pervasive Cybersecurity.

She is the project lead for the OWASP Top 10 for LLM Applications Cybersecurity and Governance Checklist and a core member of the OWASP GenAI Security Project and Gen AI Agentic Security Initiative.

She holds a Master's degree in Information Security Management from SANS and holds certifications including CISSP, SANS GSEC, GWAPT, GCPM, GCCC, GCIH, GLEG, GSNA, GSLC, Security+, ISTQB and FAIR.