Credit union boss pushes digital security

Dana Gonderzik never planned a career in cybersecurity. A back injury during her first year of nursing school led her to phone support at a computer company. That job became a 13-year role at Global Credit Union, where she now leads a security team across Alaska, Arizona, and remote locations nationwide.

The unexpected path to security leadership

Her move from healthcare to technology took time. After finding an interest in computers, Gonderzik worked her way up at GCU, which serves nearly 800,000 members globally. The credit union began in Alaska in 1948 but now operates in five states and three sites in Italy. Since she joined in 2013, both the institution and its security team have grown.

“I really enjoyed the learning and the growth in the industry and within computers,” she said. “It changed the direction of my career.”

As director of information security, Gonderzik manages vulnerability assessments, risk evaluations, threat detection, and policy creation. Her approach prioritizes people as much as technology. GCU’s 24/7 member service center, one of the largest among credit unions, ensures members always reach a live representative—a feature she considers essential.

“I still want to help people,” she said. “My role lets me do that by keeping our members financially secure.”

From perimeter defenses to layered security

The financial sector’s shift to cloud infrastructure has changed how credit unions approach security. GCU replaced traditional perimeter defenses with a zero-trust model that treats identity as the core security layer. Higher-risk assets receive stronger protections, while less critical systems face fewer restrictions.

“Multiple layers create different levels of protection,” Gonderzik said. “We’ve built maturity across those layers to ensure coverage in every area.”

Related: Websites track users with hidden cookies

Account takeovers, phishing, and identity fraud remain constant threats. GCU’s fraud team watches for unusual member behavior, while the security team actively searches for fake websites designed to steal login details. Phishing tests train employees to spot threats, and front-line staff like tellers have limited access to external email to reduce risks.

The credit union’s distributed model—with locations in Alaska, Arizona, and Italy—requires ongoing collaboration, but Gonderzik views it as an advantage. “Isolation increases risk,” she said.

Regulations and preparedness

GCU reviews its cybersecurity insurance monthly and monitors evolving standards. Rules often fall behind technological advances, so the institution tracks trends in states like California, which often set stricter standards, and studied the European Union’s digital ecosystem model to prepare for similar shifts.

“Regulations don’t adapt quickly enough,” she said. “You can see where things are heading and prepare instead of reacting.”

This forward-thinking approach extends to data security. GCU is restructuring its data management, classifying information by sensitivity and removing unnecessary copies. The goal is to ensure accurate and secure data processing. Poor data management, she warned, leads to errors or exposes sensitive information.

The next 12 to 18 months will focus on identity security, threat detection, and faster incident response. The effort reflects a broader industry need: as threats evolve, defenses must keep pace.

Balancing automation and human touch

GCU’s digital changes haven’t reduced personal service. The credit union updated its mobile app, offering both a legacy version and a modern option with new features. Automated lending workflows speed up home and vehicle loans, but members can still speak to a representative anytime.

Related: Benefits of VPS Hosting For eCommerce Websites

The fraud detection system runs continuously. When Gonderzik’s son received a suspicious transaction alert at 2:30 a.m., he responded to a text and was immediately connected to a fraud team member. The incident showed how quickly the system works—and the human support behind it.

Security training helps prevent breaches. GCU creates short, engaging videos for employees and members, including TikTok-style clips during Cybersecurity Awareness Month. The training highlights personal benefits: when employees see how security protects them, they’re more likely to follow protocols.

“Security is everyone’s job,” Gonderzik said. “We need to teach, demonstrate, and guide.”

Partnerships with firms like Palo Alto Networks have strengthened GCU’s defenses. The credit union uses Palo Alto’s security information and event management tools to handle incidents efficiently. Unit 42, the company’s threat intelligence service, provides 24/7 monitoring, while Wildfire analyzes suspicious files in real time.

For now, the focus remains on current threats while keeping members’ needs central.

“We want to support their financial services seamlessly,” she said.