Smashing the glass ceiling in cybersecurity and risk

At 20 years old, I graduated with an English literature degree, bought a house, and realized I had no idea what I wanted to do when I grew up. To put myself through college, I worked at a healthcare technology startup in Denver. When I graduated, the CEO asked me to join the IT team despite my lack of experience. With that, I embarked on a career in tech.

Smashing the glass ceiling in cybersecurity and risk
Smashing the glass ceiling in cybersecurity and risk

A mistake in that job made me fall in love with technology. One night, I somehow deleted a day’s worth of records from our SQL database. The database admin graciously spent hours with me restoring the data, and the experience made me realize how important technology and data are in business. I stayed in the role for three years, helped turn our internal software into a product, and provided sales and post-sales support.

At 23, I wanted to go further in my career, but I knew I had a lot to learn. Boston University offered a dual master’s degree in information systems and business administration. When they offered me a scholarship, I took the leap, sold my home in Denver, and moved to Boston. After graduating, I worked for a major insurance company for 18 months before realizing it wasn't a good fit. Soon after, I was contacted for a role at McKinsey.

A short-term gig turns into a long-term career

Smashing the glass ceiling in cybersecurity and risk
Smashing the glass ceiling in cybersecurity and risk

Initially, I was skeptical a consulting firm would allow me to pursue a fulfilling career in technology and data, but I decided to interview. I enjoyed the interview process and was blown away by the caliber of the people here. When I got the offer, I figured I’d join for six months while I looked for something else. Almost 16 years later, I’m still here!

I’ve had more opportunities at McKinsey than I would have at any other organization, moving from application development to security to cyber and data risk and now to risk enablement. I think it’s the ability to reinvent yourself and do new things that keeps me here.

Falling into the firm’s Risk function by chance

Smashing the glass ceiling in cybersecurity and risk
Smashing the glass ceiling in cybersecurity and risk

In 2015, the firm wanted to strengthen its cybersecurity posture, and the new chief risk officer (CRO) asked me to lead a cyber transformation. Along with people from both technology and risk, we began shifting our culture and technology to be more cyber secure.

We realized risk was fundamental to cybersecurity, so the CRO asked me to report to him and build a cyber risk team. So I wrote my own job description and started figuring out what the team would do. It was an exciting time for us. We knew what we were doing was important, and we were at the center of real change. My team later expanded its scope to include data risk. Protecting data and confidentiality is pivotal to our firm’s values and helping clients achieve sustainable, inclusive growth.

At McKinsey, the Risk function  continues to grow and mature. I recently took on a new role leading a team of technology and change specialists to enable our function and firm through tech. I’m excited to expand my topical remit beyond cyber and data while continuing to drive new ways of working.

Finding work-life integration

Smashing the glass ceiling in cybersecurity and risk
Smashing the glass ceiling in cybersecurity and risk

I recently heard someone say work-life balance is a myth; it is more about work-life integration. It resonated with me. My life has changed considerably in the past 15 years: from a 20-something in Manhattan to a new mom in India to a single mother of two in California.

Through all of it, McKinsey has enabled me to integrate my life and my work in different ways at different times. I’ve taken unpaid leave, worked a part-time schedule more than once, and suspended traveling when my family was in crisis. It can be scary to tell your boss or team you’re taking time off, but I’ve always felt supported here.

Being a woman leader in a male-dominated industry

It’s important I represent women in the tech industry. There aren’t many of us, but our number is growing. My advice to other women pursuing a career in tech: While it can be difficult, it’s important to pursue your passion regardless of perceived boundaries. Don’t be defined by your job description or the role people think you should play because of your gender, tenure, or background. And, very practically, I like to remind women not to take on the often-assigned role of “note taker” in meetings!

McKinsey has enabled me to pursue and secure breakthrough roles in my 15 years here—and I am living proof you can “make your own McKinsey.”

Find a role with Liz in Risk

Never miss another post

Receive new stories once a week directly in your inbox