Heather Ceylan

CISO, Box

Heather Ceylan is the Chief Information Security Officer at Box, where she leads the global information security program and strategy. With over 15 years of experience, she has built and led high-performing security teams across technology, healthcare, and financial services—industries with some of the most rigorous regulatory environments. Prior to Box, she served as Deputy CISO at Zoom, where she helped scale the company’s security posture during a period of rapid global growth. She also held previous roles as the VP of Security, Privacy, and Compliance at Collective Health and a Director in PwC's cybersecurity practice where she advised Fortune 500 companies on complex security and privacy programs. Heather is recognized for bringing an AI-driven approach to modern security programs, with a focus on securing AI systems and enabling secure and responsible AI adoption across the enterprise. A thought leader in AI security, she helps shape industry perspectives on how to balance innovation with risk in the era of intelligent systems. Named the 2024 Women in Cybersecurity Leader of the Year, she is known for building pragmatic, forward-looking programs that safeguard trust while accelerating innovation.

Heather Ceylan

Sessions / 2026 / 1 talk

  • As AI agents become more autonomous, organizations face both unprecedented opportunities and emerging risks. Organizations need trusted agents not only to drive productivity but also to defend against emerging AI-powered threats. So why aren’t more agents in production? This panel unpacks the key technical, organizational, and trust barriers, and explains why success requires buy-in beyond security, spanning CIOs, developers, and product teams. We’ll close with what it takes to run agents safely at scale: governance, monitoring, and controls that build trust in real-world deployments. As AI agents become more autonomous, organizations face both unprecedented opportunities and emerging risks. Organizations need trusted agents not only to drive productivity but also to defend against emerging AI-powered threats.

Ready to take this stage?

The next edition is programmed by practitioners. Tell us what you built and what you learned.

Apply to be a speaker