Matthew Kaufman

Israel Discount Bank (IDB Bank), New York, NY

• Direct cybersecurity governance across engineering, risk, and operations for the CIO organization, reporting to the CISO. Manage a $3M budget and full-time consultants supporting security work throughout the year.
• Serve as the point of contact for FDIC and NYDFS examiners on cybersecurity matters, briefing executive leadership on evidence collection status.
• Replaced manual risk reports with a single integrated dashboard, cutting reporting turnaround by roughly 75%.
• Rebuilt how issue evidence and remediation ownership are tracked, taking repeat audit findings to zero.
• Run the cybersecurity issues management program end-to-end for exercises like FedLine and SWIFT CSCF, typically managing 15+ open items in Archer at once and closing them roughly 50% faster than before.
• Lead AI governance and control requirements, including onboarding CrowdStrike's AI Detection and Response platform (now Falcon Guardian).

Mizuho Americas, New York, NY — Vice President (2020–2022) · Assistant Vice President (2018–2020)

• Ran governance oversight for the Incident Response program, including tabletop exercises, policy updates, and maturity initiatives, taking the program's maturity score up roughly 50%.
• Set up the bank's first application security governance program, partnering with developers on SAST/DAST testing across 100+ applications using Checkmarx, SonarQube, AppSpider, and Netsparker.
• Built the KRIs and reporting metrics used to track application security risk and remediation progress.
• Partnered directly with Internal Audit, Compliance, and Risk Management to close remediation items and keep governance controls audit-ready, using Archer as the system of record.
• Rewrote security policies for cloud, acceptable use, and end-user computing, and ran monthly security awareness communications reaching 3,000 Mizuho Americas employees.

BNY Mellon, New York, NY

• Directed and quality-controlled 15+ cybersecurity assessments for bank affiliates and third parties using NIST, ISO 27001, and BNY Mellon's Cybersecurity Services Model.
• Pushed remediation of the highest-risk control gaps those assessments turned up, which held up through the regulatory reviews that followed.
• Identified control gaps and vulnerabilities, partnering with stakeholders during the M&A process to remediate root causes across several boutique banks and affiliate institutions.
• Built cybersecurity maturity dashboards that gave executives better visibility into program adoption and risk-based decisions across business units.

Blue Canopy Group, Arlington, VA

• Led 20+ NIST 800-53A security assessments for federal enterprise systems.
• Coordinated vulnerability assessments and penetration testing aligned with OWASP Top 10 using Tenable, Splunk, and SailPoint.
• Developed Windows and macOS security configuration baselines to meet USGCB and FDIC requirements.
• Led secure architecture review and remediation initiatives across infrastructure and application environments.