Steve Huff

Steve Huff has a diverse work experience spanning over three decades. Steve started their career as a Business Systems Consultant at Hill's Pet Nutrition in 1990 and later transitioned to Deloitte Consulting, where they worked as a Manager in the Technology Consulting Practice. In 1997, Steve joined American Century Investments as a Programming Manager before moving on to CoreFirst Bank & Trust in 2004, where they served as the Director of Information Technology until 2012. In 2013, Steve joined Capitol Federal Savings Bank as the VP of IT Security & Risk. At Capitol Federal, they played a crucial role in establishing the bank's IT security strategy, implementing various security frameworks, and improving visibility into security events through SIEM and log collection systems. Steve also led the implementation of membership with FS-ISAC and managed relationships with third parties for additional security telemetry. Steve represented IT on the bank-wide incident response team, provided oversight for IT audits, and played a key role in regulatory exams and compliance. Additionally, Steve served as the primary negotiator for IT hardware, software, and services and redesigned the bank-wide vendor management program.

Steve Huff's education history is as follows:

- From 1999 to 2002, they attended The George Washington University and obtained a Master's Certificate in IT Project Management.

- From 1989 to 1991, they pursued a Master of Business Administration (MBA) degree with a focus on Information Technology at The University of Kansas.

- From 1985 to 1989, Steve Huff attended The University of Kansas, where they earned a Bachelor of Science (BS) degree in Business and Accounting.

In addition to their formal education, Steve Huff has obtained several certifications. Steve acquired the GIAC Critical Security Controls Certification (GCCC) from GIAC Certifications in March 2015. In January 2015, they became a certified Soccer Referee through the U.S. Soccer Federation. Steve Huff obtained the Certified Information Security Manager (CISM) certification from ISACA in March 2014. Lastly, in October 2013, they obtained the GIAC Cyber Security Leadership (GSLC) certification from GIAC.