You Can't Fix All Security Gaps — So Focus on Core Fundamentals | Mandy Andress, CISO at Elastic

Be Fearless Podcast by SquareX

Mandy Andress brings over two decades of cybersecurity leadership experience to this conversation, including her current role as CISO at Elastic and her 13-year tenure at MassMutual where she led a $50 million strategic security investment initiative. In this episode, Mandy shares candid insights about prioritizing security gaps by focusing on core risks and security fundamentals, the challenges of browser-based threats, and why curiosity and adaptability matter more than technical certifications.
0:00 Why a cybersecurity lead studied law and accounting first
7:00 How going out of your comfort zone pays off in your career
11:04 Understanding core risks when setting priorities
20:58 Browser security and the security poverty line
30:08 How Mandy got involved with advising and investing in startups
35:03 Building high performing security teams
39:46 Career advice for cybersecurity professionals
🎙️ Listen On:
Apple Podcasts: https://podcasts.apple.com/us/podcast/be-fearless-podcast-by-squarex/id1750854064
Spotify: https://podcasters.spotify.com/pod/show/getsquarex
🔔 Follow Mandy and Aleksandra on:
https://www.linkedin.com/in/mandyandress/
https://www.linkedin.com/in/aleksandra-melnikova-1012/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Chapters

1. Why a cybersecurity lead studied law and accounting first (00:00:00)

2. How going out of your comfort zone pays off in your career (00:07:00)

3. Understanding core risks when setting priorities (00:11:04)

4. Browser security and the security poverty line (00:20:58)

5. How Mandy got involved with advising and investing in startups (00:30:08)

6. Building high performing security teams (00:35:03)

7. Career advice for cybersecurity professionals (00:39:46)