Board-level cybersecurity expertise is a specific credential, not a general one. Amazon said Kevin Mandia, the founder and former CEO of cybersecurity company Mandiant, is joining its board of directors. Mandia departed Google roughly two years before the appointment.
Mandia's operating history sits at the founder-CEO level of the security industry. He created Mandiant and served as its chief executive, accumulating practitioner knowledge that sits differently inside a boardroom than the policy, regulatory, or government security backgrounds that more commonly appear in technology company governance. His subsequent time inside Google layered the perspective of a large technology company onto that foundation.
Where this appointment sits in Amazon's board composition reflects where large technology companies have begun to see governance exposure. Security decisions at the infrastructure layer tend to carry consequences that emerge well before they appear in any public disclosure, and a director who built a security company brings a different vantage point into those early conversations than one who arrived at the subject through law or finance.