Executive
One-pager
Focus, certifications, and frameworks at a glance — the dual build-and-protect security and platform mandate, AI and security as the forces shaping the next decade, and how to open an advisory or board conversation.
Outcomes that matter
- Holds CISSP, CISA, CISM, and CRISC, plus AWS Solutions Architect (Professional and Associate), AWS Security, Advanced Networking, and Big Data specialties; UC Berkeley MICS.
- Built a security program scoring above the industry average on the NIST Cybersecurity Framework.
- Achieved and sustained SOC 2 Type II attestation and operates under a CSA STAR Level II continuous-audit posture.
- Designed and runs a multi-region AWS architecture with warm-standby disaster recovery.
- Runs the dual build-and-protect mandate — DevOps and information security under one roof — across the platform.
- Stood up AI governance for financial services: a design-time 'act vs interpret' boundary for automated decisions, mapped to NIST AI RMF, ISO 42001, and the incoming CCPA ADM rules.
- Focused on the two forces defining the next decade of technology leadership: AI and security. Contact: michael@ypro.dev.
How I operate
- Lead with a written narrative; meetings are for decisions, not status.
- Hire for trajectory and judgment; coach for ownership.
- Treat security and platform as enablers of GTM velocity, not gates.
- Default to blameless retros, public action items, and visible dashboards.
What I'm exploring next
- Independent board seat at a pre-IPO or public fintech/healthtech.
- Fractional CIO/CISO with growth-stage companies scaling regulated workloads.
- Advisory at 1-2 AI-native startups solving governance or platform problems.
