Kavya’s Journey into Cybersecurity with CSU

Kavya Subramanyam is currently working as an Associate in Internal Audit Operations at SMBC Group. She holds a Master of Science (MS) degree in Computer and Information Systems Security/Information Assurance from Colorado State University. Kavya completed her undergraduate studies at JAIN College. Leap spoke with Kavya about her academic journey from Bengaluru to Colorado State University and her experiences in the US as a master’s student.

Q. Tell us about your background

I'm from Bangalore, India, and I completed my Bachelor's degree in Information Technology from Jain University. After graduation, I received a campus placement at KPMG. I worked in the Cybersecurity team, where I was involved in internal audits, IT audit testing, and even some penetration testing. After five years at KPMG, I felt the need to explore the business side of my work. While my role was primarily technical and part of a consulting setup, I wanted to understand the broader business context behind it. Eventually, I decided that pursuing a master’s degree would be the right next step, a way to both expand my knowledge and apply my skills in a new direction.

Q. What made you choose Colorado State University for your master’s program?

I began my search by looking for programs that focused specifically on cybersecurity, particularly in the GRC (Governance, Risk, and Compliance) domain. I wasn’t looking for universities first; my priority was to find a course that offered the right blend of technology and business relevance within cybersecurity. That’s when I came across the Computer Information Systems program offered by the College of Business at Colorado State University. What stood out to me was the flexibility it provided; students could tailor the curriculum by choosing electives that aligned with their interests and career goals. That kind of customisation is key if you want to build subject-matter expertise. Another big plus was the hybrid format. While I was still working at KPMG, I was able to complete my first semester online from India, which allowed me to balance both work and study effectively. That flexibility played a major role in my decision.

Q. How was your time at CSU? What were some of the highlights of your experience there?

India is such a crowded, lively, and happening place, so shifting to a city like Fort Collins in Colorado, which is a well-planned but relatively quiet town with a smaller population, felt like a big change. At first, it was overwhelming and, honestly, a bit lonely. But once my classes began and I got into the flow of academics, things started falling into place. I made friends and began engaging with international student groups and even some local business communities. Keeping myself occupied helped a lot, and over time, I adapted to that new lifestyle and began enjoying it. Colorado is known for its beautiful Rocky Mountains. I was part of a hiking group, which was focused on international students. With them, I got to go hiking, snow sledding, sightseeing, and participate in other local activities. It made a big difference in helping me settle in and experience the culture. I also joined a few student-led clubs at my university. I was a member of the Indian Cultural Club, and on the academic side, I joined CyberTech, which focused on cybersecurity and consulting. Through CyberTech, we organised a boot camp and even hosted an ethical hacking competition for students.

Q. How did you land your job after graduation? Any advice?

As I mentioned earlier, one of the most effective ways to land a job after graduation is through the resources your university provides, whether you're part of a student club or not. At CSU, we had regular career fairs, typically one each semester. These fairs brought in 50+ companies on campus, giving students a chance to connect directly with recruiters, submit resumes, and sometimes even go through on-the-spot interviews. Some students even got picked directly at the fair itself. But more than anything, I believe networking is key. It’s not guaranteed that you’ll land a job the moment you graduate; it depends on how well you build and use your network. Also, be as specific as possible about your expertise. Cybersecurity is a broad field, so instead of applying under just “cybersecurity,” I narrowed my focus to GRC (Governance, Risk, and Compliance). That helped me tailor my applications and conversations more effectively.

My university was also super supportive. For instance, Professor Ramadan Abdunabi was a major influence on me. I worked with him as a teaching assistant, and he taught cybersecurity courses under the CIS program. His knowledge across areas like risk, compliance, and cyber defense was incredibly valuable. To this day, I still feel comfortable reaching out to him for guidance, whether it’s related to work, academic writing, or presentations. Another person who was instrumental during my time as an international student was Cynthia Scarpa , our academic advisor. She was my go-to for any questions, whether they were about academics, adjusting to life in the U.S., or job hunting. Having people like that around makes a huge difference in your experience.

Q. What advice would you give to Indian students thinking about studying in the U.S.?

I would say, plan strategically. Have a clear timeline in place. Don’t come with the assumption that just graduating from a university in the U.S. will automatically get you a job. That’s not always how it works. If possible, gain some work experience in India before coming here. Keep in mind that your first plan might not always work out, so be prepared to pivot if needed.

Make sure you stay updated with current trends in your field and in the job market. And most importantly, invest in certifications, as they are highly valued when you're job hunting, especially in competitive fields. Certifications often help bridge the gap between academic learning and industry expectations.