Cybersecurity has a perception problem: While essential, security measures are often seen as a source of friction that can unintentionally detract from the user experience. At Okta, Deputy Chief Information Security Officer Charlotte Wylie aims to challenge that perception.
Wylie’s recent EWF Executive of the Year award recognizes more than just a successful security posture — it validates a leadership philosophy dedicated to fostering a collaborative, inclusive cybersecurity culture. We recently sat down with Wylie to learn more about her award-winning approach.
Grounding security in operational empathy
Wylie’s strategy is centered on the core principle of operational empathy, challenging an industry often constrained by controls that can complicate the employee experience. For Charlotte, this concept is simple: “empathy is the ability to put yourself in other people’s shoes.”
Achieving security outcomes requires continuous cross-functional conversations. Through intentional practices like agile working teams and routine syncs, Charlotte helps ensure security remains integrated into the product lifecycle by focusing on stakeholders’ own experiences.
“When we build secure ways of working by fully considering those who are impacted by our policies, we move from being a gatekeeper to a true security partner,” Wylie says.
By honing in on strategic storytelling, Charlotte's team ensures employees have a clear grasp of the reasons behind security controls. As Jennifer Aaker’s Stanford Business research demonstrates, stories are remembered 22 times more than facts alone. This narrative-driven approach helps Okta's security professionals develop their own operational empathy, strengthening their connection to the customers we support.
Okta’s Secure Identity Commitment, our pursuit against identity-based threats, requires employee buy-in to succeed. By empowering security professionals to understand the specific workflows and challenges of their colleagues, we build an intentional culture where shared responsibility feels less like a mandate and more like a natural part of the job.
Securing the rise of autonomous AI agents
As the threat landscape evolves, Wylie is looking toward the next major shift: AI. She predicts that managing identity and trust across ecosystems — including AI agents — will define the next five years of security.
“The future of cybersecurity is no longer just about human identity; we are now governing a world of autonomous non-human identities that can act with machine speed,” Wylie says.
Ultimately, Wylie’s approach suggests that even the most advanced technology is most effective when it is aligned with human behavior. Whether we’re refining phishing-resistant onboarding or preparing for the rise of autonomous AI agents, the core mission remains the same: scaling trust across the digital enterprise.
Empowering the next generation of leaders
Beyond technical defenses, Wylie remains a vocal advocate for the career growth of women in the industry. Her commitment to mentorship and early career development stems from her own experience navigating a male-dominated field.
Wylie emphasizes that leadership is about being a "multiplier" for others, ensuring that the roadmap for the future is humanity-focused and inclusive of diverse perspectives.
As she looks toward future challenges, Wylie continues to lead with operational empathy and a focus on clear, relatable narratives. In an increasingly digital world, she’s helping define a roadmap for a resilient, human-centered future.
For more of Wylie’s insights on cybersecurity culture, read The weakest link: Securing your extended workforce and Verifying the Identity of your remote workforce.
