Nicholas Santillo

About Nicholas Santillo

As a cybersecurity, physical security, and technology Executive, I bring a progressive and comprehensive background spanning technology, security, audit, compliance, and privacy. My career is defined by a unique blend of empathetic leadership, executive competencies, strategic planning, technical depth, and diverse experience, with a focus on excellence and innovation.I have extensive experience leading cross-functional teams in the design and implementation of leading-edge technologies. A key strength lies in translating complex technical concepts and risks into clear, actionable insights for boards of directors and senior leadership, fostering informed decision-making and successful security investments. I\'m passionate about building robust, resilient systems and programs that align with business goals, minimize risk, and optimize operational practices.I led the implementation of a converged cybersecurity and physical security program aligned to the NIST Cybersecurity Framework that was awarded the Department of Homeland Security SAFETY Act designation, becoming the first US water and wastewater company to receive this recognition. I led the development of a best in class workplace violence and prevention program and achieved the CPPS Safe Workplace Certification for company facilities.I am committed to mentorship and volunteerism and have served as a member of multiple federal and state committees including the AWWA Security Risk and Resilience Standard Committee, and multiple Critical Infrastructure Partnership Advisory Committee (CIPAC) workgroups working closely with the sectors federal partners including the EPA, CISA, and FBI to improve resilience in the utility sector. Serving as Chair of the EPA’s Action Plan to Accelerate Cyber-Resilience in the Water Sector, I guided a national, multi-stakeholder effort to strengthen cybersecurity across water and wastewater utilities. The work bridged policy and execution, helping translate federal cyber priorities into practical, high-impact actions for critical infrastructure operators.I am certified in Incident Command System (ICS) level 100, 200, 300, 400 and a certified instructor of ICS and Community Emergency Response Team (CERT). I received the ASIS Foundation Full Tuition Scholarship award in 2014 to the University of Phoenix and was one of the first 100 security professionals worldwide to achieve the \"Triple Crown\" designation for obtaining all three primary certifications.Inactive Top Secret Clearance

Experience

1. Sr Consultant- Executive Advisor

   GFT

   Nov 2025 — Present · Mount Laurel, NJ, US

   Provide consulting and executive advisory services in the areas of cybersecurity, technology and risk management.

Education

• University of Phoenix

  B.S. Organizational Security Managment

  2014 — 2016

Skills

• Cross-Functional Team Leadership
• Emergency Management
• Physical Security
• Risk Management
• Corporate Security
• Private Investigations
• Security Management
• Risk Assessment
• Cctv
• Project Management
• Event Management
• Cyber-Security
• Intrusion Detection
• Management
• Crisis Management
• Network Security
• Program Management
• Security
• Cisco Technologies
• Security Audits
• Project Planning
• Security Operations
• Access Control
• Policy
• Utility Industry
• Business Continuity
• Vulnerability Assessment
• Protection