Kris Rowley has been CISO for Vermont for one year. Prior to working for the state she was employed with Norwich University in Northfield, Vermont. At Norwich she worked with the CISO to develop and write university security policies. She also worked for the School of Graduate Studies as an administrative director.