Andrew MacKenzie is a recognized cybersecurity leader with deep expertise in leading strategic initiatives across complex healthcare ecosystems. As Managing Director of Systemwide and FEP Cybersecurity at the Blue Cross Blue Shield Association (BCBSA), Andrew drives cyber readiness, resilience, and risk management for the federation, shaping talent development and advocacy efforts at scale.

A Certified Information Systems Security Professional (CISSP), Andrew is known for his collaborative leadership style and ability to bridge cybersecurity and business strategy. He is a co-leader of the BCBSA CISO Workgroup and a key contributor to the Cybersecurity Subcommittee, where he helps define and implement the System’s Cyber Strategy.

Andrew’s innovative approach to risk-based cyber resilience includes advancing the Minimal Viable Company (MVC) framework, ensuring continuity of critical business functions amid ransomware and other disruptive threats. His leadership in mapping vendor dependencies has strengthened incident management, highlighted concentration risks, and fostered supplier collaboration.

He led a systemwide initiative to streamline third-party risk management, resulting in a coordinated approach to supplier risk across the Blue System. Andrew’s thought leadership is featured in industry collaborations, including a sidebar interview for a McKinsey article on Nth Party Risk Management.

Known for building strong relationships and mentoring others, Andrew brings energy and a collaborative spirit to every engagement, earning lifelong professional partnerships and driving positive change across the cybersecurity community.

Blue Cross Blue Shield Association, Managing Director, Cybersecurity (Systemwide and Federal Employee Program)

Cyversity, Mentor

ES, Inc., Senior Consultant

American Red Cross, Program Manager

Washington English Center, English as a Second Language Teacher

University of Maryland Global Campus, Master of Science – Management Information Systems

Lake Forest Graduate School of Management, Business Leadership Certificate for IT Professionals

Concordia University, Bachelor of Arts – Geography

Certified Information Systems Security Professional (CISSP), ISC2

Security+ ce Certification, CompTIA

Certified ScrumMaster (CSM), Scrum Alliance

Professional, Academy for Healthcare Management (PAHM), AHIP

Project Management Professional (PMP), Project Management Institute (PMI)