Upasna Saluja, PhD (CS), is a leading authority in cybersecurity and cyber risk management, known for her strategic insight and practical approach to advancing enterprise security frameworks. As the security lead at Ross Stores Inc. in Dublin, California, she plays a central role in shaping the company’s cybersecurity posture. Her responsibilities include working closely with the governance, risk and compliance team to evaluate and address emerging cyber threats while establishing robust security standards across cloud systems, mobile platforms, operational technology and application programming interfaces. She also spearheads efforts to improve risk quantification methodologies, implement tools for tracking organizational risk, and design key risk indicators that help forecast and mitigate future security challenges.
Dr. Saluja’s academic foundation has been integral to her professional growth and achievements. She earned a Doctor of Philosophy in computer science with a concentration in information security from the University of Technology Malaysia. Her earlier academic work includes a Master of Science in statistics from Panjab University and a Bachelor of Arts with a triple major in mathematics, economics and English. In addition to her formal education, she holds a postgraduate diploma in computer science and applications from Kurukshetra University and maintains several industry-recognized certifications. These include certified data privacy solutions engineer from the Information Systems Audit and Control Association (ISACA), qualified security assessor from the PCI Security Standards Council, certified information systems auditor from ISACA and certified information systems security professional from International Information System Security Certification Consortium.
Before joining Ross Stores Inc., Dr. Saluja worked in several influential roles that deepened her expertise in cybersecurity and enterprise risk management. As principal architect at AT&T in the San Francisco Bay Area, she contributed to high-impact security initiatives and was honored for her exceptional client service with a certificate of excellence. Her performance led to a nomination for the Technology Rising Star Award at the Women of Color STEM Conference. Prior to that position, she worked as a senior cybersecurity consultant at AT&T, collaborating with diverse clients across high-pressure environments to deliver tailored cybersecurity solutions.
Dr. Saluja’s earlier roles include serving as information security advisor at State Compensation Insurance Fund in Pleasanton, California and as operational risk consultant at Wells Fargo in San Francisco. At Australia and New Zealand Banking Group Limited, she held the position of assistant vice president and risk manager for Group Hubs, where she helped develop and operationalize risk frameworks for regional operations. She also held key risk management roles at Thomson Reuters and Hewlett-Packard Company, overseeing operational resiliency and business continuity planning.
Beyond her corporate responsibilities, Dr. Saluja is actively engaged with organizations such as Women in Security and Resilience and Women in Security and Privacy at AT&T. A passionate mentor, she supports early-career professionals at Ross Stores Inc., master’s students at Punjab Engineering College, and young learners as a cybersecurity educator working with middle and high school students and teachers. Her mentorship also extends informally through RISE Development Practices, helping peers improve confidence and capability.
Looking ahead, Dr. Saluja envisions expanding her influence in cybersecurity risk management, particularly in helping organizations navigate the challenges introduced by artificial intelligence and other rapidly evolving technologies. Her goal is to shape strategic direction at the highest levels and ensure that security strategies remain adaptive, data-informed and human-centered.