Mark Bruno

I’m an Information Security professional with experience in governance oversight, structured risk assessment, and security control evaluation within regulated environments. I maintain formal risk documentation and translate technical findings into executive-level risk guidance.

In my current work, I conduct structured security risk assessments for public and private sector clients—identifying critical assets and evaluating threat exposure across infrastructure and supply chains. I develop and maintain risk documentation (likelihood, impact, mitigation strategies, and residual risk tracking) and produce advisory risk reports to support informed decision-making and control improvements.

I’ve supported second-line security governance and structured risk management across research and client-facing operations, contributing to control gap identification and residual risk evaluation. I also help drive measurable security improvements by monitoring mitigation progress and reassessing exposure over time.

Outside of my day-to-day risk work, I’m building depth in digital governance and operational resilience through my ISACA CISM (in-progress) and master’s studies, while aligning security initiatives to defined risk appetite using ISO 27001 and NIST CSF. I’m particularly focused on turning threat intelligence and technical insights into actionable guidance for leadership and operational teams.