
Polly Gitau
Polly Gitau is a cybersecurity professional with deep expertise in developing and implementing robust security frameworks aligned with international standards and regulatory requirements. Experienced across diverse sectors including banking, insurance, mobile payments, manufacturing, and automotive, she specializes in advancing cybersecurity maturity and resilience within complex, multi-stakeholder environments.
Her professional journey spans leading organizations such as Siemens, CYRES Consulting Services, SAP, and KPMG Advisory Services, where she has driven strategic cybersecurity initiatives, contributed to standardization efforts, and enabled compliance with frameworks such as ISO/SAE 21434, NIST Cybersecurity Framework, GDPR, SWIFT CSP, and ISO/IEC 27001.
An active contributor to the Cloud Security Alliance (CSA), she serves on the AI Control Matrix (AICM) Working Group and has reviewed the Trusted AI Safety Expert (TAISE) certificate, the Cloud Controls Matrix (CCM) v4 SSRM Guidelines, and the Certificate of Cloud Security Knowledge (CCSK). Beyond CSA, she is a member of the Automotive Security Research Group (ASRG) Vulnerability Management Technical Committee and served as a Founding Member and Treasurer of WiCyS Germany, while also mentoring with CyberGirls Fellowship and Women in Cybersecurity (WiCyS) globally.
Recognized as a Top Cybersecurity Woman of the World (2024 & 2025) and a WISF Power 100 Honoree (2024), she undertakes initiatives that promote the responsible use and development of AI systems, such as her advocacy within the Global Council for Responsible AI (GCRAI), advancing ethical governance, transparency, and accountability in emerging technologies.