Open to opportunities

Michael Winn

@michaelwinn

Cybersecurity executive at I3 VERTICALS who built its company-wide security program, achieved SOC 2 and PCI certification, and sustained zero material incidents.

United States

Message

At I3 VERTICALS, I established the first dedicated cybersecurity function for a publicly traded fintech, achieving SOC 2 and PCI certification across 30+ business units. I sustained zero material security incidents for more than four consecutive years.

I architected vulnerability management, incident response, endpoint security, and identity protection capabilities, reaching a 95% vulnerability remediation rate and reducing response time from days to minutes. I also deployed Zero Trust across AWS, Azure, and private cloud environments.

At AIG, I designed and deployed a Snowflake-based fraud detection engine that reduced fraud incidents by approximately 60%. I also launched a 24/7 multinational monitoring operation and led a team of analysts.

In the U.S. Army, I led cyber defense and operations, including a 38-person Cyber Protection Team and work to modernize military network infrastructure. I hold CISSP and CCSP certifications and master's degrees in Cyber Operations and Business and Organizational Security Management.

Experience

Work history, roles, and key accomplishments

Current

Senior Vice President, Information Security / Director, Cybersecurity

Current

I3 Verticals

Jan 2021 - Present (5 years 10 months)

Established the first dedicated cybersecurity function for a publicly traded fintech payments company, achieving a 95% vulnerability remediation rate and sustaining zero material security incidents for 4+ years. Directed security integration across 5+ acquisitions and 2 divestitures, bringing 35+ systems and 160+ applications into SOC 2 and PCI compliance.

Zero Trust Architecture AWS Azure Private Cloud MFA Microsoft Entra ID Microsoft Intune Vulnerability Management Incident Response Endpoint Security IAM M&A Security Due Diligence SOC2 PCI

Head of Fraud Intelligence

AIG

Jan 2020 - Jan 2021 (1 year)

Modernized fraud detection within the Information Security Organization, reducing fraud incidents approximately 60% by designing and deploying a Snowflake-based detection engine. Launched a 24/7 multinational monitoring operation and led a team of 6 to 8 analysts.

Snowflake Fraud Detection Data Analysis Team Leadership SOC Style Escalation Real time Alerting

Cyber Protection Team Leader

US Army – US Africa Command

Jan 2018 - Jan 2020 (2 years)

Led a 38-person Cyber Protection Team defending the Joint Enterprise Network across U.S. Africa Command. Transformed the team to an active defense posture, defeating simulated red team attacks and redesigning Active Directory identity and endpoint management to eliminate credential theft risk.

Active Directory Endpoint management Agile DevSecOps Software Defined Networking Cyber Defense Penetration Testing

Assistant Director, Cyber Fusion Center

US Army – Cyber Command

Jan 2016 - Jan 2018 (2 years)

Served as deputy director of a newly created fusion center uniting cyber threat intelligence with technical security operations. Stood up the center by designing the operations center, integrating Splunk, Power BI, and R Shiny, and producing malware analysis reports and briefings for senior military decision-makers.

Splunk Power BI R Shiny Digital Forensics Malware Analysis Threat Intelligence Operations Center