Joanna Lyn Grama, JD, CISSP

Joanna Grama is a Senior Principal and Partner at Vantage Technology Consulting Group, where she leads the firm's information security practice. She has more than 25 years of experience in law, higher education, information security, and data privacy, and helps institutions strengthen their security, privacy, and IT governance programs and plan strategically for the future. Designing standards-based information security policy frameworks that end users can actually understand and apply is where Joanna does her best work, and the part of the job she enjoys most.

Prior to joining Vantage, Joanna was Director of Cybersecurity and IT Governance, Risk and Compliance programs at EDUCAUSE, where she directed programs to help colleges and universities improve their information security governance, compliance, data protection, and privacy postures. Before EDUCAUSE, she served as Information Security Policy and Compliance Director at Purdue University. Joanna is also a former member of the U.S. Department of Homeland Security's Data Privacy and Integrity Advisory Committee, appointed by Secretary Janet Napolitano, where she chaired the technology subcommittee.

A frequent author and speaker on information security and privacy topics, Joanna has presented at EDUCAUSE conferences, SXSW EDU, and the IEEE Virtual World Forum on the Internet of Things. She is the author of "Legal and Privacy Issues in Information Security," now in its third edition (2022). Her commentary and expertise have appeared in the Washington Post, the New York Times, and HuffPost, among other outlets.

Joanna graduated magna cum laude from the University of Illinois College of Law and holds a B.A. in International Relations from the University of Minnesota. Joanna has earned the CISSP, CIPT, CDPSE, and CRISC certifications.