About the founder
From the trenches to the CISO's chair
I'm Amber Smith, founder of Proof & Posture. For more than 40 years I've worked across every area of IT, from systems and networks to information security, governance, risk, and compliance. I've also spent more than 30 years as a trainer, over 25 of them in higher education. I built Proof & Posture to give organizations the kind of security leader I always wanted to be: practical, plain-spoken, and focused on proof.
My story
I grew up on a family farm in rural southern Mississippi. We didn't have much, and college felt out of reach. What I did have was a work ethic built on early mornings and farm chores, and that has carried me through every role since.
Technology has been my passion since my first computer, an Atari 400, and it has never let go. Right after high school I trained in mainframe computer operations. Early in my career I took over a company's entire IT operation and learned it all hands-on. I developed a custom UniBasic accounting package, ran their Xenix/Unix network, built and ran all my own cabling, and put Windows PCs on every desk, using terminal emulation so everyone stayed connected to the Unix network and the accounting system. That's where I learned that the people who keep things running are often the ones nobody sees. I also learned the importance of our personal and professional networks, the people you reach out to when things go sideways.
I became a certified technical trainer, then Director of Training over Houston and Austin, and later taught programming at Texas Southern University. I spent about 18 years at the College of Biblical Studies in Houston doing SQL programming, student information system work, and training, and served 16 years as president of my student information system's user group.
Most recently I served as Executive Director of Information Technology and Chief Information Security Officer at Ohio Christian University, overseeing all IT and information security. When it came to GLBA compliance, I didn't just oversee it. I did the work myself, hands-on, and brought the university into compliance by the federal deadline. That work earned me the university's Administrator of the Year award.
Proof & Posture brings all of that together: the hands-on skills, the executive view, and decades of teaching people so it sticks.
The story behind the logo
Why a dragonfly?
It started on the farm. Dragonflies have been my favorite animal for as long as I can remember. As a child, I would sit by a pool of water and watch them fly in every direction, even backwards, like helicopters. It was so calming.
Early in my career, a Microsoft training friend nicknamed me “GeekyDragonfly,” and the name stuck. Today, people tell me they think of me every time they see a dragonfly, and that makes me smile.
When I planned my brand, I wanted it to reflect the importance I place on proving a strong security posture. I also wanted to incorporate my love of dragonflies and of the color purple.
Dragonflies can see in nearly every direction at once, and that's how I approach security: watching the whole picture, not just one corner of it. The shield stands for what that watchfulness protects: your people, your systems, and your data. It's also my promise to you: protection you can prove.
How I work
What you can count on
Proof over promises
Every recommendation ties back to evidence you can show an auditor, a customer, or your board.
Teach, don't just tell
You'll understand why each control matters, so your team can keep it going after the engagement ends.
Your data stays yours
Client data, including CUI, is never brought into my environment. We work in yours.
Plain language
No jargon walls. Clear next steps your leadership and your staff can both follow.
Background
Experience and credentials
- Former Executive Director of IT and CISO, Ohio Christian University
- Brought a university into GLBA compliance, hands-on
- Administrator of the Year, Ohio Christian University, for GLBA compliance work
- Pursuing CMMC Assessor and Instructor credentials
- Microsoft Certified Trainer (MCT) for 16 years
- CompTIA CTT+ certified trainer
- Former Director of Training, Houston and Austin
- Programming instructor, Texas Southern University
- 16 years as president of a student information system user group
- Volunteer mentor with WiCyS and IAPP
Mentoring
Paying it forward
There was a time when someone gave me a hand up when I needed it most. It changed the whole trajectory of my life. Since then, I've sought out opportunities to do the same for others.
Other mentors along my career path have been incredibly influential in my success. I want to pass that wisdom on to others, especially women in this industry, who are near and dear to my heart.
I've mentored many people over the years: my employees, my graduate assistant, interns building GRC experience, career changers, and students. I've mentored through Ohio Christian University, the College of Biblical Studies, and Women in CyberSecurity (WiCyS), and the IAPP has asked me to mentor with them too.
I help with whatever they need most, including:
- Cybersecurity skills
- Career guidance
- Hands-on GRC experience
- Certification roadmaps
- Resume review and rewrites
- Personal branding
- Interview skills
- Leadership skills
- Soft skills
- Framing/reframing mindsets
I also volunteer my time to facilitate and speak at events, and I pitch in anywhere I see a need, even if nobody notices.
Speaker, panelist, and lifelong learner
I was once too shy to speak in front of a room. Becoming a trainer changed that. Today I speak on security leadership and career growth. If you're planning an event or panel, I'd love to hear about it.
Let's talk about where you stand
A free consult is the easiest first step.