Michael Cutugno

About Michael Cutugno

Cybersecurity and IT executive with over twenty years of experience spanning information security, IT operations, incident response, compliance, risk management, and enterprise technology. My career has culminated in senior leadership and CISO roles where I’ve built, scaled, and matured global security programs across financial services, private equity, healthcare, manufacturing, and high-growth organizations preparing for public markets.I have led multiple companies through IPO readiness, implementing enterprise-grade controls and modernizing security across SOX, GDPR, HIPAA, PCI-DSS, CCPA, and other regulatory frameworks. My expertise includes security program development and maturity, IT process improvement, enterprise security architecture, incident response, security policy creation, cloud and infrastructure security, identity and access management (IAM), vulnerability management, DevSecOps, and governance/risk/compliance (GRC). I’ve built and led security teams up to 25 people, deployed SIEM/SOAR, EDR/NGAV, DLP, CASB, CSPM, Zero Trust controls, and automation-driven threat detection across hybrid and multi-cloud environments.I partner closely across all areas of an organization to embed security into business strategy, accelerate innovation, and deliver clear board-level communication. I hold the CISSP, CRISC, and CISA certifications, along with a Master’s in Cybersecurity and Information Assurance from an NSA and DHS certified institution. My passion is technology, and I focus on building resilient, compliant, and scalable security programs that reduce enterprise risk, ensure regulatory readiness, and enable organizations to go faster, securely.

Experience

1. CISO Governing Body Member

   Evanta, A Gartner Company

   Aug 2018 — Present · New York, NY, US

Education

• Penn State University

  Masters of Professional Studies, Cybersecurity and Information Assurance

  2016 — 2018

• University of Maryland

  Bachelor of Science, Management Information Systems

  2001 — 2005

Skills

• IT Controls
• Information Security
• Consulting
• Sap Erp
• Integration
• Business Analysis
• IT Risk Management
• Management
• Sap Implementation
• Sap Products
• Business Process
• Enterprise Resource Planning (Erp)
• Finance
• Sap
• Business Process Improvement
• Risk Assessment
• Sarbanes-Oxley Act
• Project Management
• IT Compliance
• Internal Audit
• Leadership
• Internal Controls
• Auditing