Mary Carmichael

Mary is a Chief Information Security Officer (CISO) advising executives on managing risk and delivering digital transformation, bringing structure, governance, and execution to complex initiatives. A recognised community leader, she received the 2026 ISACA Global Leadership Award and is a SheLeadsTech Advocate, advancing women in technology.

What makes you a Risky Woman?

Mary is a “risky woman” because she positions cybersecurity as more than protection; it enables growth, builds customer trust, and supports confident decision-making. She brings an enterprise risk perspective, challenges checklist-driven thinking, and helps leaders navigate risk–reward tradeoffs, providing risk practitioners with guidance through her work with ISACA.

Name your top 3 achievements

1. Industry recognition
   Recipient of the 2026 ISACA Global Leadership Award and named a 2025 Women to Watch by SC Media, recognizing her impact in technology risk and cybersecurity.
2. Global thought leadership and research
   Delivered back-to-back presentations at RSA Conference, the world’s largest cybersecurity conference, on third-party AI risk management and concentration risk. She is also an AI & Cybersecurity Research Fellow with Rogers Cybersecure Catalyst, advancing research on emerging technology risks.
3. National and community leadership
   Advisory Board Member for the Canadian Cybersecurity Network and former President of the ISACA Vancouver Chapter, advancing collaboration and opportunities across the cybersecurity community.

What is the biggest risk you’ve taken in your career?

The biggest risk I took was starting my own practice as a Chartered Professional Accountant (CPA) focused on technology risk advisory and assurance—an unconventional path. I had to prove that a CPA could lead in this space, which meant building credibility, demand, and trust from the ground up.

What’s something most people don’t know about you?

Mary is part of a group called Fanatical Foodies and loves turning every trip into a food adventure—exploring cities, discovering hidden restaurants, and great coffee.

What is the best quality for successful leaders in Risk?

The best risk leaders excel at judgment under uncertainty; cutting through noise to drive clear, timely decisions that balance risk and reward.