Mike Golshanara

About Mike Golshanara

I’m a governance, risk, and cybersecurity leader with more than 20 years of experience helping global organizations build resilient, well-governed technology environments. My career has focused on designing and leading enterprise risk, compliance, and cybersecurity programs that protect organizations while enabling innovation and growth.I’ve had the opportunity to lead large-scale governance and compliance initiatives at companies like Microsoft and advise organizations through complex risk, regulatory, and technology transformations during my time at Deloitte. Throughout my career, I’ve built programs that bring structure to complex environments—establishing risk frameworks, strengthening security governance, and improving transparency for executive leadership.My experience spans enterprise risk management, cybersecurity governance, regulatory compliance, and large cross-functional technology programs. I’ve led initiatives involving hundreds of operational and technology controls, coordinated internal and external audit programs, and worked closely with engineering, security, legal, and business leaders to embed risk-by-design principles into critical systems and processes.What drives me most is helping organizations make better decisions about risk. I enjoy translating complex technical and regulatory challenges into practical, scalable solutions that strengthen security posture while supporting business goals.I’m particularly interested in roles where I can contribute to:• Cybersecurity risk management and governance• Enterprise GRC program leadership• Large-scale technology and compliance initiatives• Risk strategy and executive advisoryI’m always open to connecting with professionals working in cybersecurity, governance, risk, compliance, and technology leadership.

Experience

1. Technical Lead, IT Governance, Risk and Compliance

   Stanley 1913

   May 2024 — Present · Seattle, WA, US

   Built and currently lead the company’s IT Governance, Risk, and Compliance (GRC) function from the ground up.Established enterprise-wide IT policies, standards, and control frameworks aligned with business and regulatory requirements.Designed and implemented a comprehensive Third-Party Risk Management (TPRM) program to assess and monitor vendor risk.Led IT risk assessments and introduced structured risk management practices across technology and business teams.Developed and operationalized data governance and Data Loss Prevention (DLP) strategies to safeguard sensitive information.Partner closely with security, legal, and business stakeholders to strengthen compliance posture and reduce organizational risk.

Education

• California State University-Sacramento

  Business Administration, Accounting

  1990 — 1994

• California State University-Sacramento

  Master in Public Administration

  1995 — 1998