Mike Boutwell

Giving Practical guidance to help aspiring cyber professionals start a lucrative career in cybersecurity.

➤ Serving in the capacity of a CISO to deliver key security related business strategy
➤ Presented security management reports to C-Level and auditors to address findings and close gaps. 
➤ Defined security requirements for customer systems and implemented security policies and SOPs.
➤ Developed company wide security requirements and selected third party tools aligned to needs.
➤ Led hackathons creating opportunities for software development teams to collaborate on projects. 
➤ Networked and stakeholder management to secure new business opportunities and win contracts.

Key Achievements
➤ Secured work with public and private financial service companies with 1000+ staff across UK and Europe. 
➤ Consistently achieved and maintained technology compliance rates of over 95% in diverse enterprises.
➤ Oversaw security and risk assessment for a national clearing house managing assets valued at $27 trillion.

Senior Information Security Consultant

Euroclear

➤ Overseeing critical initiatives to assure delivery is in line with risk tolerance
➤ Conducting risk assessments for critical business applications and processes
➤ Collaborating with executive stakeholders to apply risk management strategy
➤ Development and management of board level KRIs

Senior Information Security Risk Manager 

➤ Conduct risk assessments for critical financial applications and documents weaknesses for review.
➤ Design and develop security requirements based on the outcome of business impact assessments. 
➤ Work in collaboration with the CISO to build and create security requirements in line with NIST CSF.
➤ Assess third party risk in business and cloud applications and make best practice recommendations.

Key Achievements
➤ Lead for cyber risk assessments on bots and artificial intelligence
➤ Risk assessment of a critical financial application vital to capital markets processing $1Q annually.
➤ Identification of critical risks resulting in RFP to seek a new vendor to remediate open vulnerabilities.

Principal Information Security Consultant - CISO IT Risk

Takeda

➤ Digital transformation project lead in the setup of a US client’s Innovation Capability Centre in Slovakia.
➤ Defined the baseline security standards, security standard toolsets, and phased out unnecessary tools.
➤ Developed supporting SOP and policy documentation and standards and secured approval for rollout.
➤ Established endpoint protection team, a SIEM/SOAR capability, and vulnerability management program. 

Key Achievements
➤ Led global security standard for on-prem and cloud security deployments for digital transformation.
➤ Designed and implemented an executive dashboard to provide a data-driven security program.
➤ Improved executive decision making by enabling access to critical real time data and information. 
➤ Facilitated introductions for executives with Slovakian contacts helping growth from 30 to 300 staff. 
➤ Recruited and trained endpoint protection team overseeing 60,000 workstations and 120,000 servers.

Endpoint Security Team Lead

AT&T

➤	Led the security and IT strategy for the WPP Plc. account agile team, architects, and 30 engineers.
➤	Managed all client services to deliver secure architectures across EMEA, US, and APAC regions. 
➤	Worked in collaboration with the client CIO to implement technical solutions to drive cost reduction. 
➤	Technical SME conducting security analytics, control assessments, vulnerability, and risk assessments. 
➤	Mentored network team and architects to drive professional development and delivery to meet KPIs.

Key Achievements
➤	Transitioned WPP Plc. to enable a work from home setup in response to Covid from scratch.
➤	Created standardised workflows to deliver fast but consistent results for high priority projects.
➤	Appointed as Global Agile Team lead delivering a backlog of work and greatly reducing costs.

Senior Information Security Architect - Global Agile Program Lead

➤ Lead for the Citizens Financial Group account and the technology lead for the network engineers.
➤ Risk assessment and audit to identify all in scope assets and assessed existing configuration and gaps.
➤ Audited accounts to assess security posture, conducted risk assessments, and proposed improvements.
➤ Designed complex secure architectures in campus, WAN, data centres, SDN, and wireless environments.
➤ Produced documentation for RFP, RFI, and proposals, and architectural lead for projects over $100M.
➤ Developed security reference architectures aligned to business strategy and PCI-DSS requirements.

Key Achievements
➤ Achieved PCI-DSS compliance in a complex banking environment reducing enterprise IT risk by 68%.
➤ Responded to an RFP for Dow Chemicals architecting a secure solution resulting in a $100M contract. 
➤ Resolved instability issues which led to outages on 1200 ATMs and implemented enhanced logging.

Senior Network Security Architect - Lead for Citizens Financial Group

First Data Corporation

➤ Secured card and payment systems and networks in compliance with PCI-DSS on two continents.
➤ Strategic lead for disaster recovery planning, testing, and regulatory compliance for payment hubs.
➤ Compliance management including pre-testing, fault finding, resolutions, and regulator liaison. 
➤ Implementation and technical solutions for switches, routers, firewalls, VPNs, and load balancers.

Key Achievements
➤ Lead for 20 EMEA core credit card processing hubs exclusively managing London and South Africa. 
➤ Designed secure data centre and colocation architectures for multiple EMEA countries hubs.  
➤ Developed and rolled out cybersecurity policies and SOPs across EMEA to protect financial data.

Senior Network Security Engineer

T-Systems International GmbH

➤ Supervised the team and implemented security policies in a multi-vendor firewall environment.
➤ Network design SME providing input and advice on a wide range of critical business services.
➤ Deployed secure applications through engineering load balancing services for business continuity.
➤ Conducted risk assessments and made recommendations on best practice technology solutions. 

Key Achievements
➤ Project managed the deployment of the first 4G network in Europe for T-Systems International.
➤ Migration of a large-scale payment service to a greenfield ultra-low latency environment.
➤ Implemented network-based services for EverythingEverywhere’s search oriented architecture suite.

Network Security Engineer

Two words sum up my mission in information security: trust and expertise. With 15 years of security and 10 years of risk management experience under my belt, I've been fortunate enough to work with leading organizations like Cisco, AT&T, IBM, Kyndryl, First Data, and Euroclear.

My portfolio:

→ I help financial services firms secure their business and improve performance metrics with ISO 27001
→ Assessing AI risks in large complex environments and providing solutions to use AI in a risk-aware manner
→ I train teams and organizations on ISO 27001 implementation and auditing. 
→ Speaks to more than 30,000 people annually
→ Coaches and helps young professionals start and enhance their cybersecurity careers

My results:

→ Secured assets worth over $1 quadrillion
→ Delivered projects worth over $100M
→ Recently completed a major project with a world-renown vendor addressing cloud security risks
→ Consistently achieved security compliance rates of over 95% in diverse enterprises
→ Advised on the development of an innovative CNAPP security solution with a major vendor
→ Author of the Ransomware Handbook and Profit-Driven Cybersecurity

→ Contact: https://www.mikeboutwell.com/contact
→ X: @mikeboutwell4

DTPRO

Cybersecurity Support Technician II**  
DT Pro / NSWC Corona | 02/2024 – 07/2024
Conduct comprehensive IAM assessments aligned with NIST 800-53 controls for managing access to over 100 classified devices in preparation for ATO certification.
Implemented Role-Based Access Control (RBAC) and Privileged Access Management (PAM) to ensure only authorized personnel accessed sensitive systems.
Automated access provisioning and deprovisioning workflows, reducing manual errors and ensuring timely access updates in accordance with ISO 27001 standards.
Conducted regular access certification reviews to ensure user permissions adhered to organizational and regulatory requirements, streamlining compliance with NIST 800-53 and SOX standards.
Utilized Trellix/Host-Based Security System (HBSS) to manage system access controls, addressing critical vulnerabilities and securing classified networks.
Collaborated with system architects to streamline the Authorization to Operate (ATO) process, ensuring systems met all access control and IAM requirements.
Authored 20+ training modules and standard operating procedures (SOPs) focused on IAM policies, boosting team efficiency and improving compliance readiness

System and Network Administrator

CACI International Inc

Managed vulnerability assessments across 150+ classified systems, ensuring IAM practices were aligned with NIST 800-53 and NIST 800-37 RMF standards.
Led the deployment of Multi-Factor Authentication (MFA) for internal systems, reducing the risk of unauthorized access and improving security posture.
Developed and enforced access control procedures to enhance compliance with ISO 27001 and HIPAA, facilitating comprehensive system security documentation.
Conducted privileged access reviews, removing excessive permissions to comply with PAM best practices and reduce insider threats.
Implemented secure methods for identity lifecycle management, including access certification and recertification processes, ensuring adherence to NIST 800-53 and ISO 27001 frameworks

Engineering Technician II

Kros-Wise, Inc.

Collaborated with the Command Information Systems Security Manager (ISSM) and system administrators to monitor identity and access systems, ensuring compliance with IAM standards and NIST 800-53 guidelines.
Monitored and updated Active Directory (AD) accounts, ensuring user access was provisioned and deprovisioned securely in line with organizational policies and ISO 27001.
Facilitated secure access to the NMCI enterprise systems for over 300 local customers, ensuring proper identity management and adherence to HIPAA data protection regulations.
Contributed to the incident response process by analyzing access-related incidents and supporting the resolution of identity-related breaches.

NMCI CSR/CTR

Victor Community Support Services

Managed network domains and user accounts within a HIPAA-compliant environment, ensuring all access control processes met strict regulatory standards.
Implemented and enforced new Standard Operating Procedures (SOPs) to meet HIPAA requirements for access control and patient data protection.
Managed access for over 2,500 users utilizing Azure O365/Exchange and Microsoft SharePoint, ensuring that user identities and access rights adhered to IAM best practices.
Conducted identity verification and recertification to ensure compliance with access control policies and safeguard patient data in accordance with HIPAA regulations.

Information Technology Help Desk

TEKsystems

Managed Active Directory (AD) user access provisioning and deprovisioning, ensuring proper auditing and alignment with ISO 27001 and NIST 800-53 compliance standards.
Integrated Role-Based Access Control (RBAC) within AD to ensure users only had access to necessary systems, enhancing security according to IAM best practices.
Assisted in configuring and enforcing Multi-Factor Authentication (MFA) for critical systems to reduce unauthorized access risks.
Automated access provisioning and deprovisioning processes using IAM tools to ensure timely updates of user permissions in compliance with HIPAA and ISO 27001 standards.
Conducted access reviews and certifications to ensure users retained appropriate levels of access, improving compliance with regulatory frameworks such as SOX and NIST 800-53.

Computer Technician

I am a highly motivated and security-focused professional with over seven years of experience specializing in Identity and Access Management (IAM) and Governance, Risk, and Compliance (GRC). My background includes a deep understanding of industry standards such as NIST 800-53, ISO 27001, and HIPAA, and I am passionate about securing sensitive data, managing access controls, and ensuring compliance across various industries, including healthcare and federal systems.

Currently, I work as a Cybersecurity Support Technician II at DT Pro/NSWC Corona, where I conduct comprehensive IAM assessments and manage access controls for over 100 classified systems. My expertise spans across Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Multi-Factor Authentication (MFA), ensuring that only authorized personnel have access to critical systems. I have a proven track record of automating access provisioning workflows, improving compliance with ISO 27001, and streamlining the Authorization to Operate (ATO) process.

My certifications include CompTIA Security+ (Certified January 2023), and I am currently pursuing CISSP (expected August 2024). I am committed to continuous learning and expanding my knowledge in cybersecurity to stay ahead of evolving threats and compliance regulations.

Core Competencies:
Governance, Risk, and Compliance (GRC)
Identity and Access Management (IAM)
Role-Based Access Control (RBAC)
Privileged Access Management (PAM)
ISO 27001, NIST 800-53, and HIPAA Compliance
Vulnerability Assessments & Penetration Testing
Incident Response & Security Auditing
Multi-Factor Authentication (MFA)
Security Awareness & Training Programs
Certifications:
CompTIA Security+ (Certified January 2023)
CISSP (In Progress, Expected April 2025)

I am always open to connecting with professionals in cybersecurity, IAM, and GRC to share knowledge, collaborate, and explore new opportunities.

Feel free to reach out if you’d like to discuss how I can help your organization enhance its security posture and maintain compliance with industry standards.

taplio

The Battle

Mike Boutwell

William Draper

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?