Steph Saunders

EXPERIENCE
Steph Saunders has over 14 years of experience in the Information Security field, working mainly in retail, critical manufacturing, and other IT organizations.

EDUCATION & CERTIFICATIONS

• Bachelor of Science, Information Science, The University of Pittsburgh
• Certified Ethical Hacker (CEH)
• Certified Penetration Tester (CPT)
• Cybersecurity Maturity Model Certification - Registered Practitioner (CMMC-RP)
• ISO 27001 - Lead Implementer
• ISO 27001 - Lead Auditor
• Lean Six Sigma - Yellow Belt
• PCI Qualified Security Assessor (PCI QSA)

PROFESSIONAL AFFILIATIONS

• Three Rivers Information Security Symposium (TRISS) - Planning Committee and Treasurer
• WiCyS Pittsburgh - Founding Board Member and Secretary
• BSides Pittsburgh – Volunteer and awardee of the 2025 Black and Gold Badge
• 3 Cups of Coffee Mentor - Cybersecurity - PA Women Works
• InfraGard Board of Directors – Former Treasurer and Retail Sector Chief

INDUSTRY CONTRIBUTIONS
Steph actively presents at various Pittsburgh Information Security events, such as InfraGard, ISC2, ISACA, TRISS, BSides Pittsburgh, etc. Steph is an active mentor in cybersecurity, a frequent cybersecurity panelist and panel moderator, board member for various cyber security groups, and an overall connection-maker for the Information Security community. Steph has hosted various webinars and given talks on topics ranging from ransomware and Incident Response to GRC updates and best practices.

PASSION FOR SECURITY
Steph is passionate about Information Security as a whole. She particularly enjoys promoting best practices for education and awareness training, especially from a Defense in Depth (DiD) perspective. She is an expert in physical security, Incident Response, governance risk, and compliance, and is always improving her forensics and assessment skills through learning about each security domain. She has developed and hosted tabletop exercises while creating relationships in the security field, IT, and other parts of organizations.