Todd Borandi

About Todd Borandi

For more than 20 years Todd Borandi has provided security leadership across several industries. He has a reputation for building sustainable enterprise-level security solutions and teams for Fortune 50 companies, fintech, federal, and public utility organizations. He has provided decades of experience to organizations while collaborating with business teams to find ways to create the necessary balance between regulatory requirements and the business mission. He is fluent in several Cyber Security framework languages which include the NIST CSF, ISO, FISMA, SOC2, CIS, PCI-DSS, and many others. Todd has mentored young security professionals in the art of building security programs from green fields to enterprise capable security programs. Several of the team members Todd has mentored are now managing their own formidable security teams for well known organizations. He has decades of experience as a leader and designer of security programs and knows how to leverages the soft skills required for collaborating with different business leaders. This skillset extends to contributing to the NIST Risk Management Framework and the PCI-DSS 4.0 where he collaborated with industry competitors to create global security requirements for both the government and financial industry. Todd not only has hands on experience, but also has a formal education. He is recognized for his educational pursuits by receiving a Master of Science Degree in Information Assurance and Security from Capella University, a Certification in Strategic Decision and Risk Management from Stanford University, and a Bachelor of Science Degree from the University of Utah. His education extends to several, industry recognized, professional certifications, including the Certified Information Systems Security Professional (CISSP), AWS Certified Solutions Architect, SABSA Enterprise Security Architecture, and others. Todd has advised executives as a CISO, Director of Information Security and consulted with global teams as an Enterprise Security Architect. Specialties: Executive Security Consultant, CISO, Security Architect, Director of Incident Response, Mentor, Project Management, Purchasing, Evaluation and implementation of security generated, Todd Borandi prompted and edited)- Because this is the world we live in now.

Experience

1. Enterprise Risk Management Principal

   U.S. Financial Technology

   Sep 2025 — Present

   Serve as a Senior Information Security and Cyber Risk Advisor.•Provide senior management and related committees with Information Security risk perspective.• Independently assess and monitor the company’s cybersecurity posture, including governance, architecture, incident response, threat intelligence, cloud security, identity and access management.• Evaluate the design and effectiveness of cybersecurity controls and identified risks, • Drive continuous improvement in cyber and technology risk management maturity• Responsible for ensuring completion of comprehensive risk assessments, documentation, risk mitigation guidance, and related reporting platforms.

Education

• United States Army

  Army Presidential Escort, Infantry

  1986 — 1989

• Capella University

  Master's of Science, Information Assurance and Security

  2009 — 2011

• Capella University

  Master's degree, Information Technology

• University of Utah

  Bachelor of Science (BS), Speech Pathology and Hearing Audiology

  1991 — 1993

• Stanford University

  Professional Certification, Strategic Decision and Risk Management

  2011 — 2011

Skills

• Computer Forensics
• Sans Gsec
• Vpn
• Risk Managment
• Information Security Management
• Security Audits
• Nist
• Iso 27000
• Itil
• Windows Computer Forensics
• Network Security
• Leadership
• Disaster Recovery
• Cissp
• Computer Security
• Security Policy
• Nist 800-53
• Incident Management
• Networking
• Security Awareness
• Troubleshooting
• Governance
• Sans Hacker Techniques and Incident Handling
• Risk Assessment
• Incident Handling
• Information Security
• Nist 800 Series
• Risk Management
• Business Continuity
• Sans Intrusion Detection
• Strategy
• Sharepoint
• Vulnerability Assessment
• Security
• Enterprise Software
• Windows
• Firewalls
• Program Management
• Incident Response
• Ids