John M.

About John M.

Experienced cybersecurity consulting professional within the financial institution industry focused on making cybersecurity risk, cybersecurity strategy, and IT regulatory guidance understandable. As a cybersecurity consultant I am a trusted advisor to financial institution executive management, board of directors, internal audit, and IT leadership. My background in managed services and third party technology providers allows me to provide additional advice in areas where many financial institutions need it most. Over my career I have supported institutions of various sizes and complexity. Today I specialize in working with financial institutions and healthcare providers but enjoy working with all clients.Specialties: Cyber Risk Management, FFIEC regulatory guidance related to Information Security, Architecture, Infrastructure, and Operations, Vendor Management, Supervision of Technology Service Providers, and Managed Services.

Experience

1. Partner and Co-founder

   Cyberassurance

   Jan 2025 — Present · Cedar Rapids, IA, US

   With over 30 years of experience in IT and cybersecurity, I specialize in guiding financial institutions nationwide through complex regulatory landscapes, cyber risk management, and IT resilience-building. As Co-Founder & Partner at, I help organizations navigate evolving threats and compliance requirements with a pragmatic, client-centric approach.Throughout my career, I have led national cybersecurity practices, advised C-level executives and boards on cyber strategy, and conducted IT audits to ensure institutions stay ahead of regulatory expectations. My expertise spans vCISO services, IT governance, NIST & CIS compliance, GLBA security, business continuity planning, penetration testing, and MSP/vendor management—all aimed at strengthening financial institutions\' cybersecurity posture.At, I specialize in guiding financial institutions through complex regulatory landscapes, cyber risk management, and resilience-building. I help organizations navigate evolving threats and compliance requirements with a pragmatic, client-centric approach. I’m an active thought leader, speaker, and industry contributor, sharing insights on cybersecurity trends, risk frameworks, and best practices. ’.

Education

• Indian Hills Community College

  Associate of Applied Science, Computer Maintenance

  1984 — 1986

• Capella University

  Bachelor of Science in Information Technology, Information Assurance and Security

  2010 — 2012

Skills

• Cissp
• Ceh
• Security+
• A+
• Cisa
• IT Audit
• Disaster Recovery
• Ecsa
• Penetration Testing
• Information Security
• Security
• Network Security
• Network Administration
• Security Awareness
• Vulnerability Assessment
• Auditing
• Business Continuity
• Customer Service
• Information Technology
• Management
• Networking
• Strategic Planning
• Leadership