Shawn Westerhoff
About Shawn Westerhoff
Shawn Westerhoff is the Security Incident Response & Cloud Security Program Lead at Dodge & Cox in San Francisco, with extensive experience in cybersecurity and regulatory compliance.
Title
Shawn Westerhoff serves as the Security Incident Response & Cloud Security Program Lead at Dodge & Cox in San Francisco.
Professional Experience at Dodge & Cox
Shawn Westerhoff currently works at Dodge & Cox as the Security Incident Response & Cloud Security Program Lead. From 2019 to 2021, he served as a Cyber Security Engineer - Consultant at the same company in San Francisco.
Previous Roles at MoneyGram International
Shawn used to work at MoneyGram International in Dallas/Fort Worth Area as an Enterprise Architect from 2017 to 2018. Prior to that role, he served as Senior Director Information Technology from 2014 to 2017 in Burlingame, CA.
Leadership Roles at Nexxo Financial Corporation and Turn 11 Networks
Shawn was VP Information Technology at Nexxo Financial Corporation from 2012 to 2014 in Burlingame, CA and also served as a Network Security Consultant there for 10 years. Additionally, he was the Founder and CEO of Turn 11 Networks, Inc. from 2009 to 2012.
Educational Background
Shawn Westerhoff studied Political Science and Government at the University of California, Berkeley from 1990 to 1992 and at the California State University, Long Beach from 1988 to 1990.
Key Achievements in Cyber Security
Shawn has led the implementation of a comprehensive cloud security program at Dodge & Cox, enhancing the company's overall security posture. He developed and executed incident response strategies that significantly reduced the time to detect and respond to security threats. He also played a key role in achieving PCI/DSS and SOC-2 compliance for multiple financial services projects.
Expertise in DevSecOps and Regulatory Compliance
Shawn Westerhoff has extensive experience in DevSecOps, integrating security practices into the DevOps pipeline to ensure secure software development. He has a strong background in regulatory compliance, ensuring that all security measures meet industry standards and legal requirements.