Heather Warnat

Heather Warnat is currently the Senior Security Advisor at Kalles Group. Heather has over 20 years of experience in the field of information security and risk management.

Heather began their career at Microsoft in March 2014 as the Director of Information Security and Risk Management. In this role, they were responsible for the development and implementation of security programs and policies to protect Microsoft's critical infrastructure and data. Heather also oversaw the incident response team and worked closely with the Attack Surface Management, Vulnerability Management, and Incident Response teams to develop risk assessment, measurement, and treatment methodologies.

In June 2016, Heather left Microsoft to join Worldpay as their Global Vice President of Information Security. In this role, Heather was responsible for establishing and developing six new enterprise security programs. Heather also partnered extensively with Attack Surface Management, Vulnerability Management, and Incident Response teams to develop risk assessment, measurement, and treatment methodologies. Under Heather's leadership, the Worldpay security program increased its overall program maturity from "Initial" to "Managed" 18 months ahead of plan, and under budget.

In January 2018, Worldpay was acquired by Vantiv and changed its name to Worldpay from FIS. Heather remained in their role as Global Vice President of Information Security until October 2019 when they left to start their own small business consulting firm, Liberty Consulting, LLC.

In March 2021, Heather returned to the corporate world as the VP - Enterprise Technology Audit at Wells Fargo. Heather held this position until July 2021 when they accepted their current role as Senior Security Advisor at Kalles

Heather Warnat holds a certificate in Business Analytics from Harvard Business School Online, an MBA in Global Management from University of Phoenix, and a BS in Management Information Systems from California State University, Chico. Heather is also certified by ISACA in CRISC and CISA, and by the U.S. Securities and Exchange Commission in Securities Industry Essentials. Additionally, they hold a CompTIA Security+ certification.