Preloader Image

Mary Carmichael began her career as a certified public accountant (CPA), working on financial services implementation projects.

“[This is] where I saw how deeply intertwined technology and business operations had become. These projects weren’t just about systems, they were about transforming how organizations delivered services and managed risk,” Carmichael says.

Carmichael additionally led initiatives like PCI DSS and cloud migration projects. The combination of cybersecurity and risk management work led her to pursue several ISACA certifications, including CISA, CRISC and CISM.

“What drew me to cybersecurity was the realization that CPAs and cybersecurity professionals are working toward the same goal, we both focus on protecting critical assets, whether they’re financial, operational, or digital. As a CPA, I was trained in risk assessment, scenario planning, and building risk registers, all of which are just as relevant in cybersecurity as they are in finance,” Carmichael says.

Carmichael also spent time working for the City of Vancouver during the 2010 Winter Olympics.

“The Olympics were a catalyst for cybersecurity maturity. They initiated new and essential responsibilities around business continuity planning, incident response readiness, and protecting critical systems from potential disruptions. It was the first time I saw cybersecurity not just as a technical function, but as an enabler of public trust and operational resilience,” Carmichael says.

Carmichael assisted in digital transformation projects to help increase citizen access to city services.

“More than anything, I loved the energy of working on big, meaningful goals with collaborative team,” Carmichael says.

Currently, Carmichael serves as the Managing Director of Risk Advisory at Momentum Technology. Her work has shifted recently to focus on artificial intelligence (AI) risk and governance.

What I’m most proud of is how we’ve built a chapter that supports professionals through every stage of their career, from high school students participating in hackathons, to mentorship, scholarships, networking, and advanced training.

“My background as a CPA gives me a unique perspective, I bring a solid foundation in governance and assurance, which complements the technical and strategic work we do. My goal is to help organizations move forward with confidence, clarity, and control in an increasingly dynamic risk landscape,” Carmichael says.

In addition to her work responsibilities, Carmichael serves as the President of the ISACA Vancouver Chapter.

“It’s especially meaningful to me because ISACA has played such a key role in my own professional journey, and I love being able to give back and help others grow,” Carmichael says. She serves on a number of committees, including the CRISC Working Group to help maintain the certification and ensure the exam remains aligned with current standards. As Chapter Leader, Carmichael leads over 1,000 members in cybersecurity, risk management and emerging technologies.

“What I’m most proud of is how we’ve built a chapter that supports professionals through every stage of their career, from high school students participating in hackathons, to mentorship, scholarships, networking, and advanced training. We’re intentional about offering lifelong learning and support. Also, we’ve introduced specialized programming, including our AI Mastery Series, which helps members deepen their understanding of AI governance, ethics, and risk,” Carmichael says.

Carmichael’s work includes partnering with local businesses to host industry events. Recently, she sponsored a cyber incident response exercise to provide hand-on crisis management experience. Carmichael has also worked to partner with the Province of British Columbia to boost cybersecurity, including sponsoring the BC Cyber Directory.

Carmichael also serves as a SheLeadsTech Ambassador for ISACA. SheLeadsTech works to advance women in tech leadership and close the gender gap by building inclusive communities.

“Personally, being part of SheLeadsTech has reminded me of the power of storytelling, mentorship, and visibility. It’s also reinforced that we can’t make progress alone, we need to work collectively to drive change. Whether you’re early in your career or in a leadership role, we all benefit when we create space for others to grow, lead, and be heard. SheLeadsTech has helped me become a more intentional leader, and it continues to inspire me every day,” Carmichael says.


Women in Security 2025 [Main Article]