Garrett Held
About Garrett Held
Garrett Held serves as the Chief Information Security Officer and Senior Vice President of Engineering at Carta, bringing extensive experience in cybersecurity and engineering. He has spoken at major security conferences and has a strong background in red team operations and security program implementation.
Work at Carta
Garrett Held serves as the Chief Information Security Officer and Senior Vice President of Engineering at Carta. He has held this position since 2020, contributing to the company's security strategy and engineering initiatives in the San Francisco Bay Area. His role involves overseeing security measures and ensuring the protection of sensitive information within the organization.
Current Role at SVCI
In addition to his role at Carta, Garrett Held is currently an Investor at SVCI - Silicon Valley CISO Investments, a position he has held since 2023. This role allows him to leverage his extensive experience in security to support and guide organizations in prioritizing effective security measures.
Previous Experience in Security
Garrett Held has a diverse background in security roles across various organizations. He worked at Salesforce as Director of Acquisition Security from 2014 to 2015 and as Principal Product Security Engineer from 2012 to 2014. He also held the position of Senior Director of Security at tCell.io, Inc from 2015 to 2017, and served as Head of Security Engineering at Twilio Inc. from 2017 to 2020. His experience includes managing security teams and developing security programs.
Education and Expertise
Garrett Held studied Computer Information Systems and Business at Indiana University Indianapolis, where he earned a Bachelor of Science degree. He also partially completed a Computer Science degree at Purdue University. His educational background supports his expertise in security, particularly in mentoring teams and guiding individuals through their security journeys.
Speaking Engagements and Contributions
Garrett Held has spoken at several prominent security conferences, including BlackHat USA, AppSec USA, LASCON, and SyScan. His participation in these events highlights his commitment to sharing knowledge and best practices in the field of cybersecurity, as well as his dedication to helping leaders implement effective security measures.