Modern CISO Network: Board Book

Mike, a passionate and outcome-driven security leader with more than 19 years of experience, effectively balances cybersecurity risk with business needs through transparent practices and risk-based approaches. His expertise spans areas such as incident response, vulnerability management, cloud security, network security, application security, and data security.

Currently serving as the Corporate CISO for GE, Mike owns cyber risk management and operations across the organization’s extensive corporate estate, which includes over 1,000 applications in finance, payroll, human resources, and shared services. Leading a team of more than 100 professionals and managing a budget of $20 million, he ensures the implementation of robust security measures.

Notably, Mike led the development of a program for over 120 Sarbanes-Oxley (SOx) applications, demonstrating his ability to address compliance requirements effectively. He has also created a federated cyber risk lifecycle program, connecting disparate risk assessments to provide a comprehensive view of potential vulnerabilities and compliance gaps. As an Advisory Board Member for the Internet Security Alliance, Mike authored the Ransomware Toolkit for inclusion in the 2023 National Association of Corporate Directors (NACD) cyber-risk handbook.

Prior to his current role, he held several other key security and technical leadership positions at GE, including Senior Director of Cybersecurity and Director of Risk and Compliance. His previous experience also includes supporting large-scale US government and Department of Defense programs for renowned companies such as Northrop Grumman and Lockheed Martin.

In addition to his professional achievements, Mike fosters a culture of curiosity and a risk-first mindset within his teams, prioritizing security by design principles. When not immersed in his work, Mike enjoys spending time with his family and traveling, with a special fondness for exploring the Caribbean.