From KYC to Cybersecurity: Shak’s journey in shaping Tide’s security culture

At Tide, we believe our people are our greatest asset. Today, we’re excited to introduce you to Shaketa Welch a.k.a Shak, our Security Culture & Awareness Analyst. With a unique journey from KYC to cybersecurity, Shak has been instrumental in fostering a security-conscious culture at Tide. Let’s dive into her story and discover how she’s making waves in the world of fintech security.

Tell us about yourself and your role at Tide.

Hi there! I’m Shak, and I work in the Security team at Tide as a Security Culture & Awareness Analyst. I’ve been with Tide for about 5.5 years now, and it’s been quite a journey!

What inspired you to pursue a career in cybersecurity?

My interest in security started early in my career when I was working in financial crime investigations. I was fascinated by the methods fraudsters used to scam innocent people. This curiosity naturally evolved into an interest in cybersecurity – I wanted to understand how phishing emails are constructed, what malware is, and why we often hear about companies suffering cyber attacks.

The field of cybersecurity is still quite male-dominated and technical. As a non-engineer, I thought my chances of breaking into this field were slim. But then this unique role came up at Tide 3.5 years ago, and I’ve been doing it ever since. It’s been an incredible opportunity to combine my passion for security with my people skills.

Can you walk us through your journey at Tide?

I joined Tide in 2019 as a KYC team lead, managing a team of up to 20 analysts. It was an exciting time to join a rapidly expanding fintech environment. When Tide decided to expand KYC operations outside the UK, I seized the opportunity to transition into the Security team – after three challenging interviews!

Throughout my time at Tide, I’ve also been involved in organising and leading culture events as part of Tide’s Culture Club. I love bringing people together and creating unique social experiences.

What’s the most significant learning experience you’ve had during your transition to the Security team?

The biggest shift was going from managing a team to being a team of one. My role is unique at Tide, which means there’s no legacy to follow. It’s been a learning experience to work independently while still collaborating with the broader Security team. Of course, there’s also been the technical learning curve – understanding more about threat detection environments, security terminology, and working with highly technical colleagues.

Can you explain what Security Culture & Awareness entails?

Essentially, my role is about educating and raising awareness among employees about security best practices, both at work and in general. This involves creating company-wide training, organising security events, developing awareness communications, and addressing security issues within specific teams. I also collect and monitor human risk-related metrics, such as simulated phishing engagement rates and reported incidents.

It’s a varied role that’s crucial in this age of frequent company breaches. While security tools are important, fostering an environment where employees feel comfortable proactively reporting and suggesting improvements is equally vital.

How has your work directly impacted Tide’s security position?

One of my proudest achievements is creating a healthy and encouraging environment where employees feel at ease reporting suspicious activities, mistakes, and suggestions to the Security team. Historically, security teams are often seen as unapproachable or as blockers. At Tide, I host monthly security awareness onboarding sessions, introducing security to all new employees in an informal, fun meeting.

This approach has resulted in vulnerabilities being identified quicker, increased reporting of phishing emails, and more confident feedback about our training programs. We’ve essentially created a huge internal security champions program where all employees are security champions!

After 5+ years at Tide, what aspects of the company culture resonate most with you?

Flexibility, without a doubt. I’ve enjoyed maternity leave at Tide, worked from Barbados multiple times under the work-from-anywhere policy, and benefited from flexible start and finish times to accommodate my family needs. The ease of working flexibly at Tide without compromising on personal life is priceless in this day and age.

Can you describe a project at Tide that you’re particularly proud of?

I’m really proud of independently organising our annual Security Awareness Month every October. It’s a month packed with activities, talks, awareness pieces, swag, and games – something for everyone, all aimed at educating and raising awareness about security. It’s a lot of effort, but I love seeing people walk away more informed and motivated to work securely.  In fact, we are just wrapping up a month-long educational series, as we chat.

What advice would you give to other companies looking to improve their security culture?

First and foremost, find out what gaps in knowledge your employees have. Do they know how and where to report security concerns? Having friendly and approachable security team members who can run awareness sessions across the business is crucial in fostering a good security culture. Also, leaders who show a proactive and active interest in security help set a standard for good security practices organisation-wide.

Finally, how would you sum up your experience at Tide?

My time at Tide has been transformative. I’ve grown professionally, transitioned into a field I’m passionate about, and had the opportunity to make a real impact on our security culture. The support for both professional and personal growth, the flexibility, and the emphasis on culture make Tide a truly unique place to work. I’m excited to continue growing with Tide and helping to shape our security-conscious culture in the years to come.