Michael Ruiz
@michaelruiz1
Senior cybersecurity executive specializing in third-party risk management, GRC, privacy, and identity governance.
What I'm looking for
I’m a seasoned information security leader who drives strategic, measurable outcomes across third-party risk management, GRC, cybersecurity, privacy, and AI risk governance. I translate executive priorities into practical programs that protect critical systems, sustain business continuity, and strengthen organizational resiliency.
I’ve built and matured TPRM and identity governance capabilities across enterprise environments—partnering with teams across security, IT, procurement, legal, and senior leadership. I improved third-party program maturity by 80%, increased risk awareness by 71% through global supply chain due diligence, and boosted data privacy compliance by 50% with policy development for PII and data classification.
My work consistently delivers compliance and security posture gains. I’ve driven CMMC engagement resulting in an 80% uplift in security posture, increased regulatory compliance in gaming by 35% via TPRM directives, and improved identity governance maturity using role-based access control models and enhanced authentication workflows.
I lead with transformation and advisory clarity, negotiating and influencing to remove friction while meeting strict regulatory and control requirements. I’ve secured over $100K in contract savings, advanced ISO/NIST-based control frameworks (including NIST 800-53, NIST 800-63, and NIST CSF), and operationalized continuous monitoring and risk scoring using tools like ZenGRC, OneTrust, RSA Archer, and SecurityScorecard.
Experience
Work history, roles, and key accomplishments
Principal Cybersecurity Consultant
BoldMarc LLC
Jan 2025 - Present (1 year 3 months)
Served as a trusted cybersecurity and TPRM subject matter expert, maturing TPRM and supply-chain lifecycle requirements by 80% and improving identity governance controls to boost security posture by 80%. Delivered data privacy improvements (50% compliance increase), elevated CMMI maturity from 2 to 4 in under a month, and increased internal compliance by 30% through optimized policy and procedure
Senior Cybersecurity Risk Auditor
Ampcus
Jan 2025 - Jan 2026 (1 year)
Provided expert advisory support assessing business and technology risks, evaluating control effectiveness, and communicating audit findings and recommendations to stakeholders and audit leadership. Planned and executed multiple TPRM assessments to validate controls, identify vulnerabilities, and strengthen governance.
Third-Party Risk Manager
American Tire Distributors
Jan 2021 - Jan 2025 (4 years)
Led the company’s Third-Party Risk Management (TPRM) program, integrating it with enterprise risk management and reducing third-party risk incidents by 90%. Streamlined vendor due diligence and assessments (70% faster), increased contract/security requirements compliance, reduced onboarding time by 75%, and operationalized continuous monitoring to cut post-onboarding incidents by 90%.
Principal Cybersecurity Consultant
BoldMarc LLC
Jan 2018 - Jan 2021 (3 years)
Led TPRM and supply-chain improvement engagements across multiple client environments, increasing program maturity globally and improving onboarding due diligence to raise risk awareness by 71%. Supported identity access management assessments and implemented security requirements into vendor contracts to reduce vendor risk and improve governance outcomes.
Cybersecurity Analyst III
GM Financial
Jan 2015 - Jan 2018 (3 years)
Executed internal and third-party cybersecurity risk assessments and contract negotiations, reducing GM Financial’s risk exposure by 44%. Improved TPRM workflows by 35%, increased vendor compliance by 26%, negotiated master service agreements and statements of work for $50K in corporate savings, and mentored junior risk team members (80% improvement).
Principal Security Consultant
World Wide Technology
Jan 2014 - Jan 2015 (1 year)
Collaborated to establish a GRC Center of Competency and launched a security practice, leading information security projects and improving risk assessment artifact consistency and quality by 30%. Enhanced data segmentation and security environments and led security/privacy risk assessments, improving security and privacy posture by 32%.
Education
Degrees, certifications, and relevant coursework
American Military University
Master of Arts, Homeland Security
Grade: GPA: 3.74
Earned a Master of Arts in Homeland Security. GPA reported as 3.74.
The University of Baylor
Bachelor of Business Administration, Entrepreneurship / International Business
Earned a Bachelor of Business Administration with a double major in Entrepreneurship and International Business.
Availability
Location
Authorized to work in
Website
michaelstephenruiz.comJob categories
Skills
Interested in hiring Michael?
You can contact Michael and 90k+ other talented remote workers on Himalayas.
Message MichaelFind your dream job
Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!
