Nicole Grinstead
Chief Information Security Officer
Roblox
About
Nicole Grinstead is Chief Information Security Officer at Roblox, responsible for all facets of ensuring Roblox as a company and a platform are secure. Prior to her current role, Nicole served as the Senior Director of Product, Enterprise, and Application Security at Roblox, where she oversaw the proactive defense of the platform, managing everything from core infrastructure hardening to application-layer protection. Before Roblox, she held leadership positions at Netflix, directing security engineering initiatives focused on enterprise security, and security posture management. Prior to Netflix, Nicole was at Yahoo, where she led the technical strategy to merge the identity systems of Yahoo and AOL post-Verizon acquisition. She sparked her passion for the domain through her involvement in incident response during Yahoo’s 2014 breach. Nicole holds a BS in Computer Science from the University of Missouri, Columbia.
Sessions
Breaking the Rules: The CISO Playbook Wasn’t Built for AI
What you will learn:
The security playbook was built for a world of applications, infrastructure, identities, and human users. AI is changing the rules. As AI moves from experiment to infrastructure, product, and workforce, security leaders are being forced to rethink how they manage risk, enable the business, and build security programs that can keep pace. The challenge is no longer simply securing AI. It is figuring out how security itself needs to change. Larry Letow, CEO of TachTech, brings together three security leaders operating at very different points on that frontier: an AI-native company moving at extraordinary speed, a developer platform where security has to scale with the product, and one of the world's largest platforms navigating security, safety, identity, and emerging AI technologies at massive scale. What assumptions are no longer holding up? Where does more control actually create more risk? What should be automated, delegated, or eliminated? And when AI can build, act, and make decisions, how does security evolve from a gatekeeper to an enabler? This is a candid conversation about the rules worth keeping, the rules worth rewriting, and what it takes to build and secure an AI-enabled business without slowing it down.