Stephen McMaster named Chief Information Security Officer at Western Alliance Bank

Western Alliance Bank appointed Stephen McMaster as Chief Information Security Officer, announced in February 2026; day-level precision has not been established from available coverage.

Regional banks sit under the same federal exam expectations as the money centers with a fraction of the security headcount — the CISO seat at this tier is where regulatory load per employee runs highest.

As Chief Information Security Officer, McMaster leads the enterprise information security strategy and the cyber risk management function at Western Alliance, the company says. According to the company, McMaster is responsible for advancing compliance with key regulatory frameworks and for safeguarding customer data and critical systems. The release says he also oversees incident response and threat detection and advises the Board and senior leadership on cyber risk and resilience priorities as they evolve. CDO Magazine reports that McMaster will be based in Phoenix in his new post at the bank. According to the release, Ken Vecchione, who was President and Chief Executive Officer of Western Alliance at the time of the announcement, said McMaster would oversee the bank's information security posture as the company keeps evolving its capabilities and operating model.

The company says McMaster has built and governed enterprise information security programs that support regulatory compliance and operational resilience. The company says his background includes oversight of technology risk, control frameworks and cybersecurity strategy in banking environments that are highly regulated. McMaster worked at Wells Fargo for more than 20 years before joining Western Alliance Bank, CDO Magazine reports. At Wells Fargo, according to the company, his senior leadership roles covered cloud security, cyber defense, infrastructure, technology remediation and security architecture. Most recently he served as managing director and head of the business information security office, third-party cybersecurity, data loss prevention and cloud security, the company says. In that post, the release says, he set cloud security direction and oversaw multiple enterprise-wide cybersecurity programs that supported a global financial institution.

The parent company, Western Alliance Bancorporation, is listed under the ticker WAL on the NYSE, the company says. Western Alliance has offices nationwide and more than $90 billion in assets, the company says.