| Jessica Hoffman is a Certified Information Systems Security Professional (CISSP) with nearly 20 years of experience building, leading, and advising cybersecurity and compliance programs across both public and private sectors. Jessica spent many years in the private sector helping organizations understand what they truly need to protect their data—recognizing that cybersecurity is never one-size-fits-all.She advocates tailored guidance, risk-based thinking, and rock-solid cyber hygiene are key. Jessica has also spent the majority of her career in public service, safeguarding critical infrastructure and protecting the data of millions of Americans . She previously led the Security Control Assessment (SCA) program for the Centers for Medicare & Medicaid Services (CMS), driving audit and compliance efforts for the Healthcare.gov Marketplace. That role strengthened her mission: ensuring that critical systems remain secure, user-centric, and compliant at scale.
Now serving as Deputy CISO for the City of Philadelphia, Jessica brings her strategic insight and hands-on experience to securing citywide infrastructure, data, and digital services. Her work in public service is driven by purpose, impact, and community protection. Jessica is also the host of the CISO Stories Podcast, where she leads engaging, real-world conversations with CISOs from around the world—sharing lessons, challenges, and victories from the trenches of cybersecurity leadership.
As a national speaker, Jessica has presented at DEF CON, BSides, state and local government forums, and higher education institutions across the country. As an adjunct instructor at Penn State University, she connects classroom learning to real-world impact. She’s a founding member of the Blacks in Cybersecurity Mentorship Program, which has supported hundreds of up-and-coming professionals, and she serves as organizer for BSidesHarrisburg, Central PA’s premier cybersecurity conference. She also volunteers at cybersecurity events nationwide, driven by her passion for making cybersecurity more inclusive and accessible.
Jessica’s entire career centers on getting people excited about cybersecurity, breaking down barriers, and shaping the next generation of cyber leaders. She believes in empowering others, scaling impact, and always focusing on the fundamentals—even in a world of advanced threats.
|