Amy Braswell

Amy Braswell serves as the Deputy Chief Information Security Officer (CISO) at TIAA, where she leads various cybersecurity initiatives. Her responsibilities include overseeing Cyber Third Party and Subsidiary Risk Assessments, Cloud Security, DevSecOps, and Vulnerability and Configuration Management teams. These teams focus on implementing consistent cybersecurity assessment methods for third parties and subsidiaries, addressing infrastructure and application vulnerabilities, and ensuring cybersecurity practices are integrated throughout the software development lifecycle.12

Professional Background

Before her current role at TIAA, Braswell was the CISO for TIAA Bank, where she managed all aspects of information and cyber security, including security operations, identity management, and risk assessments. Her previous experience includes significant roles at Wells Fargo, where she led the Information and Cybersecurity Control team, and at Bank of America, where she spent 20 years in various information security and risk management positions. At Bank of America, she directed a global team in governance, risk, and compliance for Global Information Security.123

Education and Certifications

Amy holds a Bachelor's degree in Computer Science from North Carolina State University and is a certified information systems security professional (CISSP). Additionally, she has taught a graduate course in computer forensics at the University of North Carolina at Charlotte.12

Current Focus

At TIAA, Braswell's work emphasizes embedding cybersecurity into business initiatives by collaborating with Business Information Security Officers (BISOs) to ensure that security considerations are integral to business operations.1