New CISA director wants to spend less time cleaning up after big hacks, more time preparing for them