About me
Dr. Sarah Lewis Cortes (CISSP, FIP, CIPP/E (GDPR), CIPT, CISM, CISA, CRISC) is a leading expert with over 20 years of global-scale technology experience in domains including strategy and execution for Information Security, Privacy Engineering, Privacy Enhancing Technologies (PETs), Data Protection, and secure, privacy-aware AI/ML. She has a strong record of success creating robust privacy engineering and security solutions and programs. At firms such as Netflix, Salesforce, and Fidelity Investments, she has had responsibility for implementing global-scale, comprehensive privacy engineering and privacy-aware, secure AI/ML programs. She earned degrees at Harvard University and Boston University, studied Forensic Sciences at Boston University Medical School, and holds a PhD in Computer Science, Cybersecurity from Northeastern University. Her research and publications focus on the dark net, anonymous network communications, privacy and privacy law, and responsible AI/ML Sarah has served as an invited Team Leader for the NIST Privacy Workforce Working Group, where she helps shape national strategies for building privacy expertise and capacity, and has published NIST privacy framework crosswalks. She also serves on the Privacy Engineering Advisory Board of the International Association of Privacy Professionals (IAPP). A former analyst for the US Department of Energy, she led the NIST Cybersecurity Working Group on Privacy & Security sub-team as co-author, that created the security and privacy laws section of the 2014 NIST: Guidelines for Smart Grid Cyber Security: Vol. 2, Privacy and the Smart Grid. She also conducts training and research with the FBI, the Alameda County Sheriff’s Office Digital Forensics Crime Lab, and other Law Enforcement Agencies (LEAs). Prior to undertaking her PhD, Sarah was Senior Vice President for Security, Privacy, GRC and Disaster Recovery at Putnam Investments, where she led a team of over 150 staff, delivering privacy and security solutions and programs.
