Sofia Garcia

Security Awareness Specialist at HEINEKEN, where she works on a data-driven human risk management program. With a background in cybersecurity and a governance mindset, she contributes to efforts that move beyond local, feedback-driven awareness toward a more structured, intelligence-based approach to human risk.

Her experience spans phishing simulation analysis, behavioral metrics, and cross-regional reporting, which has shaped how she thinks about measuring (not just running) awareness programs. She is passionate about proving the business impact of security culture through data rather than intuition alone.

Originally from Mexico and now based in Poland, she believes the future of security culture lies in treating human risk with the same relevance as any other enterprise risk.

Speaker / Contributor: This individual participates in SANS events, presentations, written content, or other community resources as an external contributor. They are not a SANS employee, instructor, or affiliate.