Skip to content
CISO Spotlights

Career profile

Stephen McMaster

Chief Information Security Officer, Western Alliance Bank

Status
Current role, per sources checked 26 October 2026
Appointed
21 January 2026
Published

By the CISO Spotlights Desk. Compiled from public records. Each statement below is drawn from the sources listed at the end.

Stephen McMaster is the Chief Information Security Officer of Western Alliance Bank, appointed on January 21, 2026.

Career path

McMaster spent more than 20 years at Wells Fargo, holding a series of senior leadership roles spanning security architecture, infrastructure, cyber defense, technology remediation and cloud security. His roles there also covered cyber defense, technology remediation and regulatory risk oversight. In his final Wells Fargo role, he served as managing director and head of cloud security, data loss prevention, third-party cybersecurity and the business information security office (BISO), setting cloud security direction and overseeing multiple enterprise-wide cybersecurity programs for the global financial institution. Western Alliance Bank appointed him Chief Information Security Officer on January 21, 2026, and he is based in Phoenix. He has more than 25 years of experience leading cybersecurity, risk management and technology control functions at large, complex financial institutions.

Remit at Western Alliance Bank

As Chief Information Security Officer, McMaster leads Western Alliance's enterprise information security strategy and cyber risk management function. He is responsible for safeguarding critical systems and customer data, advancing compliance with key regulatory frameworks, overseeing threat detection and incident response, and advising senior leadership and the Board on evolving cyber risk and resilience priorities. His background includes oversight of cybersecurity strategy, technology risk and control frameworks in highly regulated banking environments.

Western Alliance President and Chief Executive Officer Ken Vecchione said, "Steve impressed us with his disciplined approach to risk management, his ability to guide large, complex security organizations and his strong understanding of the regulatory expectations facing large financial institutions." Vecchione added that McMaster is positioned to oversee the bank's information security posture as the company evolves its operating model and capabilities.

Sources

  1. 1.
    investors.westernalliancebancorporation.cominvestors.westernalliancebancorporation.com · undated page · checked 26 October 2026 · tier A
  2. 2.
    investors.westernalliancebancorporation.cominvestors.westernalliancebancorporation.com · undated page · checked 26 October 2026 · tier A
  3. 3.
    Phoenix Business Journalbizjournals.com · undated page · checked 26 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.