Kandace Jennings, PMP, RIMS-CRMP
Senior Analyst, Security & Safety
LOCATION: Richmond, Va.





A Conversation With Kandace:
Tell us about your career journey.
My career began in the water and wastewater utility space, where I worked directly with regulatory compliance and risk management programs. That foundation gave me firsthand insight into how critical infrastructure systems operate and what’s at stake when they’re disrupted.
Over time, I became increasingly focused on risk and resilience, particularly at the intersection of operational technology and cybersecurity. I earned my Project Management Professional (PMP) and Risk and Insurance Management Society Certified Risk Management Professional (RIMS-CRMP) certifications to formalize my expertise in enterprise risk management and resiliency strategy.
Today, I work with utilities and infrastructure organizations to help them strengthen security, reduce risk exposure, and build sustainable resilience programs. My background in both operations and risk management enables me to approach challenges from a systems perspective, balancing technical, regulatory, and human factors.
What aspect of your work in security and safety do you find most rewarding?
The most rewarding part of my work is building long-term relationships with clients and serving as a trusted advisor. Security and resilience are not one-time projects; they require ongoing partnership, communication, and alignment.
I value helping clients translate complex cybersecurity and risk concepts into practical, actionable strategies. Seeing an organization strengthen its posture over time, and knowing we’ve helped build that capability, is incredibly fulfilling.
You support clients with risk management and cybersecurity. What does that work look like and why is it important?
My work spans enterprise risk assessments, cybersecurity program development, operational technology security evaluations, and resiliency planning. I also speak at industry events and engage with professional networks to share best practices and emerging insights.
Critical infrastructure organizations face evolving cyber and physical threats, increasing regulatory requirements, and operational complexity. Effective risk management provides structure and clarity in that environment, helping leaders prioritize investments, protect essential services, and maintain public trust.
I regularly share speaking engagements and industry updates on LinkedIn for those interested in following the conversation around infrastructure resilience and cybersecurity.
“Kandace builds trusted partnerships that help our clients turn complex risk and cybersecurity challenges into clear, actionable strategies. Her operational insight and resilience expertise help our clients move forward with confidence.”
Bill Foos, CPP, PSP
Vice President & Senior Director, Security & Safety
How do you stay current with the ever-evolving topics of cybersecurity and infrastructure resilience?
I stay engaged through professional associations, industry conferences, regulatory updates, and collaboration with peers across the infrastructure sector. I also prioritize continuous learning through certifications and research.
Cybersecurity and resilience evolve quickly, particularly in the operational technology space. Staying current requires both technical awareness and an understanding of how policy, regulation, and real-world operations intersect.
What are some key lessons you’ve learned while helping clients strengthen their security and resiliency strategies?
One key lesson is that resilience is as much about people and culture as it is about technology. The most effective programs align leadership, operations, and technical teams around shared priorities.
Another important lesson is that progress doesn’t require perfection. Organizations that make steady, intentional improvements often build stronger long-term resilience than those waiting for the “ideal” solution.
What inspired you to join GFT, and what keeps you here?
I was drawn to GFT’s focus on infrastructure and its commitment to supporting essential public services. The opportunity to work on projects that directly impact communities was important to me.
What keeps me here is the ability to collaborate across disciplines and contribute to meaningful, real-world resilience initiatives that protect critical systems.
When you’re not working on risk assessments, how do you unwind or recharge?
Outside of work, I recharge in the company of the people who matter most. My husband and I have six children and two grandchildren, so life is full in a busy, beautiful way. Our time is focused on gathering, supporting, and enjoying the family we’ve built. I also serve in the children’s ministry at my church, which keeps me grounded in perspective and purpose.
Whether we’re cheering on our favorite teams together or enjoying the beautiful mountains of Virginia, those moments restore me. And of course, our four dogs make sure there’s always a little extra joy, and a lot of spoiling, woven into everyday life.
This Employee Spotlight was originally published on March 11, 2026.
Featured News & INSIGHTS
Why Cybersecurity and Trust Matter for Critical Infrastructure

Programming Correctional Facilities: What Agencies Need to Know Before Design Begins

Programming Corrections Facilities: From Operations to Design
Rail Cybersecurity: What’s Myth, What’s Real, and What Actually Matters

In the News: Tackling Utility Emergency Preparedness With Whole-Community Resilience

In The News: Bowersox Featured in Hydro Leader Magazine

Kevin Burgess, PE

Kandace Jennings, PMP, RIMS-CRMP



