Matthew Kaufman

Israel Discount Bank (IDB Bank)

• Drive security and compliance outcomes across engineering, risk, and operations enterprise-wide, reporting directly to CISO.
• Built executive dashboards integrating SOC metrics, incident trends, and cyber risk indicators for senior leadership and risk committees.
• Cut cyber risk reporting prep time by 50% by automating reporting across Qualys, Splunk, and CrowdStrike.
• Reduced repeat audit findings by 50% by overhauling incident response governance and tabletop exercise programs.
• Directed enterprise control alignment across engineering and security organizations to maintain compliance with FFIEC, NYDFS 500, NIST CSF, and SWIFT CSCF.
• Led remediation of FedLine, SWIFT CSCF, and internal audit findings across critical banking systems, tracking and managing findings in Archer.
• Evaluated emerging AI security tools and governance frameworks to assess risk and compliance impact.
• Main point of contact for cybersecurity regulatory examination evidence requests.

Mizuho Americas — Americas Risk Management (2LOD) & CIO Organization (1LOD)

• Led governance oversight for the enterprise Incident Response program, including tabletop exercises, policy management, and maturity initiatives.
• Directed application security governance and secure SDLC initiatives across development teams, overseeing SAST/DAST testing for 100+ applications using Checkmarx, SonarQube, AppSpider, and Netsparker.
• Built KRIs and reporting metrics to track application security risk and remediation progress.
• Partnered with Internal Audit, Compliance, and Risk Management to track remediation activities and strengthen governance and control processes using Archer as the GRC platform of record.
• Provided guidance on IAM, data protection, and DLP-related security controls.
• Updated enterprise security policies and standards across cloud security, acceptable use, and end-user computing, and led monthly security awareness communications.

Mizuho Americas — Americas Risk Management (2LOD)

• Held the same core responsibilities as the role above prior to promotion to Vice President, building the foundation for the Incident Response, application security governance, and GRC reporting programs.

BNY Mellon, New York, NY

• Led and quality-controlled cybersecurity assessments for bank affiliates and third parties using NIST, ISO 27001, and BNY Mellon's Cybersecurity Services Model.
• Identified control gaps and vulnerabilities, partnering with stakeholders on sustainable, risk-aligned remediation strategies.
• Built cybersecurity maturity dashboards that improved executive visibility and risk-based decision-making across business units.

Blue Canopy Group, Arlington, VA

• Led 20+ NIST 800-53A security assessments for federal enterprise systems.
• Coordinated vulnerability assessments and penetration testing aligned with OWASP Top 10 using Tenable, Splunk, and SailPoint.
• Developed Windows and macOS security configuration baselines to meet USGCB and FDIC requirements.
• Led secure architecture review and remediation initiatives across infrastructure and application environments.