Skip to content
CISO Spotlights

Career profile

Susan Chiang

Chief Information Security Officer, Headway

Status
Current role, per sources checked 28 July 2025
Appointed
August 2024
Published

Compiled 22 October 2026 from public records. Each statement below is drawn from the sources listed at the end.

Susan Chiang is the Chief Information Security Officer of Headway, appointed in August 2024.

Career path

Earlier in her career, Chiang spent several years at Deloitte, where she focused on technology and healthcare consulting.
She then became part of the security leadership team at Uber.
At Cloudflare, Chiang served as Deputy CISO and later as Acting Chief Security Officer, overseeing engineering, operations and technical program management functions for the company's security organization.
Announcements of her move to Headway also credited her with security and strategy experience gained at Salesforce.
At Headway, Chiang oversees a team spanning data privacy and security, engineering and IT.

Remit and public commentary

Chiang appeared among the opening keynote speakers at the FAIR Institute's 2024 FAIR Conference, listed as CISO of Headway alongside other cyber risk leaders. In an interview with CSO Online on how CISOs define their jobs across different organizations, Chiang said "the mission is the same, which is — whether you're at a company, government, or nonprofit — to reduce risk, especially on traditional security." She described CISOs as advisors, helpers and enablers rather than decision-makers, people who step in when problems surface. Chiang also said CISOs are likely to gain more formal authority as the role moves toward being recognized as a named corporate officer, carrying liability coverage comparable to a chief financial officer's. Asked about sharing detailed frameworks of CISO duties with colleagues, she indicated she would not pass on an intricate industry mind map to peers because it would overwhelm them.

Recognition and education

Chiang was named a Women in IT Security Advocate by SC Media in 2023.
She holds a degree from the University of California, Berkeley, and is based in San Francisco.

Sources

  1. 1.
    SecurityWeeksecurityweek.com · undated page · checked 22 October 2026 · tier B
  2. 2.
    prnewswire.comprnewswire.com · undated page · checked 22 October 2026 · tier A
  3. 3.
    prnewswire.comprnewswire.com · undated page · checked 22 October 2026 · tier A
  4. 4.
    CSO Onlinecsoonline.com · published 28 July 2025 · checked 22 October 2026 · tier B
  5. 5.
    CredSparksecuritymagazine.com · published 28 August 2024 · checked 22 October 2026 · tier B
  6. 6.
    businesswire.combusinesswire.com · published 20 June 2023 · checked 22 October 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.