Okta appoints Mathew Graham as Chief Security Officer for Asia Pacific

Okta, a global identity and access management company, has appointed Mathew Graham as Chief Security Officer (CSO) for its Asia Pacific operations. 

In this role, he will lead the company’s regional security strategy, focusing on identity as a core element of digital infrastructure. His responsibilities include supporting the adoption of phishing-resistant authentication, strengthening identity governance, and helping organisations prepare for the risks associated with artificial intelligence and other emerging technologies.

Okta’s regional leadership noted that businesses across Asia Pacific are facing rising cyber threats alongside opportunities created by AI. Graham’s role will involve working with customers, partners, and industry stakeholders to build stronger approaches to security and trust.

With more than two decades of experience in government, cloud, and enterprise software, Graham has held senior security roles at Workday, Amazon Web Services, and Salesforce. His work across these companies has given him experience with infrastructure, enterprise SaaS, and cloud-based environments, providing him with a broad view of different layers of the technology stack.

Stephanie Barnett, Vice President and Interim GM APJ, ANZ, Okta, said: “Mathew’s appointment comes at a time when organisations in Asia Pacific are under intensifying pressure to address rising cyber threats and the opportunities presented by AI. His extensive experience in cloud and SaaS security, combined with his ability to partner with executives and boards, makes him ideally placed to help our customers strengthen digital trust and secure the next generation of identities, both human and non-human.”

Commenting on his appointment, Mathew Graham said: “As AI reshapes the workforce and attackers continue to innovate, the question isn’t just what we’re protecting, it’s who we are trusting. At Okta, I’m excited to help customers go deeper, securing people, systems, and digital colleagues with a neutral and extensible identity platform.”

Graham holds a Master of Information Technology in Information Security from Charles Sturt University.