Michael York Email & Phone Number

Dublin, California, Us

Lead the cybersecurity strategy, devops/platform operations, IT operations, and risk management. Reporting directly to the CTO, I ensure alignment between security, IT, and business goals while protecting systems and data.Key Responsibilities:Chair the risk committee, assessing and mitigating risks to safeguard company assets and data.Oversee security for AWS and container environments, ensuring compliance with industry standards.Provide strategic oversight of information security and risk management, maintaining compliance with HIPAA, PCI, SOX, and GDPR.Lead IT operations, focusing on efficient technology implementation and security.Direct DevOps and platform operations, enhancing automation, infrastructure reliability, and delivery pipelines.Manage technology budgets, optimize cloud spend, and align investments with security and business priorities.Lead and mentor a team of cybersecurity, IT, and DevOps professionals, fostering continuous learning and development.Oversee a 24/7 Security Operations Center (SOC) for real-time threat monitoring and incident response.Collaborate with executive leadership to align security, IT, and platform initiatives with business goals. Report regularly to the Board of Directors on risk posture and financial outcomes.

I provide board-level cybersecurity advisory, guiding organizations on strategic risk management.

Seattle, Us

Alexandria, Virginia, Us

Us

Oakland, Ca, Us

As Head of Technology and Information Security at Altias, I oversaw many critical systems and ensured they remained secure. In addition to my previous focus on Amazon Web Services (AWS), Kubernetes, and Incident Management, my role expanded to include Corporate Infrastructure and IT Support.As part of my responsibilities, I led the Corporate Infrastructure team and oversaw the maintenance of our internal systems, such as our network, servers, and workstations. By implementing best practices and modern technologies, I improved our internal processes, leading to increased productivity and efficiency.Moreover, I also led the IT Support team, which was responsible for providing technical support to employees. I ensured our team was equipped with the latest tools and technologies to deliver timely and practical assistance, minimizing downtime and disruptions.My expertise in information security was instrumental in ensuring that all internal or external-facing systems remained secure. I managed security risks and ensured compliance with industry regulations and standards.

Oakland, Ca, Us

As Head of Platform Operations and Information Security at Altais, I oversaw the seamless functioning of our critical systems and ensured they remained secure. My primary focus was on Amazon Web Services (AWS) and Kubernetes, where I streamlined processes to increase efficiency and reduce costs.As part of my role, I led the incident management team and was responsible for ensuring swift and effective resolution of any disruptions. My expertise in incident response helped the company mitigate risks and maintain service levels, resulting in minimal downtime and maximum customer satisfaction.In addition, I led the team in achieving HITRUST compliance, a critical milestone in maintaining the trust of our customers and partners. My extensive knowledge of HITRUST requirements and experience implementing security controls ensured we met all compliance standards.Overall, my tenure as Head of Platform Operations and Information Security at Altais was marked by a focus on efficiency, security, and compliance. My efforts improved our platform's reliability, security posture, and regulatory compliance, making it a more trustworthy and dependable service for our clients.

Walnut Creek, California, Us

Formerly Easterseals Bay Area---Recruited as a vital member of the Executive Leadership team to provide IT leadership and direction focused on modernizing technology platforms and creating scalable, secure cloud infrastructure and building a team to support rapid growth.Key Deliverables:- Developed risk-based approach to security governance, aligned with strategic business objectives and accounting for regulatory environment, corporate risk profile, and rapidly evolving threat landscape.- Drove Infrastructure, Security and DevOps teams to exceed 99.95% while decreasing the budget by 10% YOY.- Lead transformation to Serverless, Docker, and Kubernetes while maintaining healthcare and financial compliance.

Walnut Creek, California, Us

Walnut Creek, California, Us

Direct all day-to-day security, compliance, DevOps initiatives for this multi-million dollar, 100+ employee, cloud-native Data-as-a-Service (DaaS) platform that captures and converts data generated by paper forms and documents, including handwriting into business-ready data. Built out SecDevOps department along with spearheading SOC, HIPAA, EU, and FedRAMP compliance. Also, managed InfoSec, IT operations and DevOps personnel. Responsible for engineering roadmaps, architecture, and AWS security, operations, and spend. Manage enterprise-wide incident response for corporate risk and product risk. Reporting to the CEO.In this time:- Orchestrated the completion of an "impossible project" of getting FedRAMP ATO Approval; delivery on-time and within budget, despite assuming control of the project 4-months behind schedule.- Reduced recurring annual Cloud overhead by 40%, channeling savings to Machine Learning projects.- Hold all financial responsibility for infrastructure, implementation, support, and internal servers/network including revenue, utilization, margins and security compliance budget.- Expert in AWS Design, Security, Management, and Cost.- Managed phone communications including screening calls, facilitating call priority, independently initiating action, returning calls as directed and routing calls to other customer success members as necessary.- Built out JIRA which was used for Secure SDLC, Support Desk, Customer Service, Finance, Sales and IT to manage, report and resolve issues.- Managed complex geo-diverse AWS environment spanning hundreds of instances using Ansible, Chef, and Puppet.- SDLC-integrated Security Processes within Engineering workflows.

Directed IT and security operations for a $2+ billion, 600+ employee real estate investment trust. Held full decision-making authority over technology planning, budgeting, and expansion, managing a $8M operating/capital budget across 27 locations. Reported to the CXO.Key Contributions:Streamlined IT governance and budgeting, cutting over $1M in costs by eliminating redundant projects and negotiating $1.2M in one-time and $300K in recurring savings.Led the IT portion of the company’s IPO and subsequent M&A, overseeing infrastructure expansion and cybersecurity across the U.S.I managed full P&L for product development, software, hardware purchases, and R&D.Established Security KPIs to track risk trends, defect remediation, and overall security metrics.Built and restructured security operations into four teams: Red, Blue, Trust/Security, and Security Engineering.Created a top-performing managed services team, achieving the highest KPI/SLA in the industry.

Education record

Master Of Information In Cybersecurity