Michael Pagano Cybersecurity Risk

About Michael Pagano Cybersecurity Risk

You know how financial institutions struggle with insider threats, data loss, and mounting compliance risk? Well, that’s what I help with. I work with financial institutions and enterprise organizations by combining behavioral analytics with investigative expertise to reduce cyber risk, support regulatory compliance, and protect what matters most, your reputation and data. When clients work with me, they see: Reduced insider threat incidents through behavior-based detection Stronger audit readiness and reduced exception backlogs Cross-functional alignment between Security, Legal, HR and Compliance When it comes to cybersecurity risk and insider threats, I know you want to feel confident and in control. You want to go from being reactive and overwhelmed, to proactive and resilient. To do that, you need clear, actionable risk signals and a strategy that works across people, platforms, and processes. I understand how frustrating and risky it feels to constantly battle hidden threats, especially when the tools are complex and the pressure is high. That’s why I’m proud to say I’ve helped major institutions like JPMorgan Chase, KPMG, and First Citizens Bank build and mature their insider threat programs, reduce exceptions, and align risk frameworks like NIST 800-53 with real-world execution. You deserve a security framework that not only protects your organization, but empowers it to grow. I’m currently seeking my next opportunity to do exactly that—partnering with a forward-thinking organization where I can lead insider threat investigations, optimize GRC strategies, and enable secure business operations with clarity and control. Let’s connect: m••••••••@gmail.com 91••••••09 Now Interviewing – Schedule in my Featured Section Cybersecurity Risk | Insider Threat Investigations | Information Security | DLP | UEBA | GRC | NIST 800-53 | MITRE ATT & CK | Security Exceptions | Risk Acceptance | Vulnerability Management | First Line of Defense (1LOD)| Detection Engineering | SIEM | Behavior Analytics | Risk and Compliance | Remote Security Leadership | Security Exception Handling | Endpoint Monitoring

Experience

1. Information Risk Manager

   TEKsystems

   Dec 2024 — Present

   Consultant | Information Risk | Data Protection | Compliance |Consultant Position at First Citizens Bank – Raleigh, NCException Management | Vulnerability Management | Compliance Risk Monitoring | Audit Readiness | Regulatory Compliance (NIST 800)| Governance, Risk, and Compliance (GRC)| Threat Intel | Risk Acceptance Processes• Led internal security exception program including classification, root cause tracking, and risk acceptance governance.• Conducted internal security investigations and risk assessments aligned with insider threat and exception trends, proactively mitigating threats.• Advised technology owners on NIST 800-53 mappings and deviations, ensuring consistency with regulatory expectations. • Strengthened NIST 800-53 compliance by aligning controls with real-time risk indicators and vulnerability data.• Operationalized security exception handling for unresolved vulnerabilities across multiple business units, ensuring timely remediation and risk acceptance protocols.• Optimized governance through the GRC platform, focusing on exception classification, closure criteria, and stakeholder escalation paths.

Education

• Pace University - Lubin School of Business

  Bachelor of Business Administration - BBA