I am an Operational-Native CISO and Singapore OnePass holder with extensive experience securing high-velocity FinTech and Cloud-Native environments. Currently serving as the CISO for Trust Bank, I have successfully matured the security posture of a digital bank with over 1 million customers, navigating rigorous regulatory landscapes while maintaining speed-to-market. Core Expertise & Services I provide strategic and technical leadership across several critical domains: Regulatory Compliance & Governance: Expert in orchestrating defenses for MAS Technology Risk Management (TRM) audits, achieving "Clean Audits" with zero major findings. I align organizational maturity with global standards including NIST CSF 2.0, ISO 27001, and SOC 2 Type II. Secure AI & Innovation: Specialized in architecting guardrails for the safe deployment of GenAI (Microsoft Copilot, AWS Bedrock), mitigating "Shadow AI" risks while enabling productivity. Fusion Center & SOC Transformation: Proven ability to build and scale global security operations from scratch, reducing false positive rates by 80% and OPEX by over 40% through advanced AI automation. Post-Quantum & Future-Proofing: Forward-looking expertise in authoring Post-Quantum Cryptography (PQC) roadmaps to future-proof customer data. Threat Intelligence: Global contributor to the MITRE ATT&CK framework, with a background in defending Fortune 500 clients and critical banking infrastructure against advanced persistent threats (APTs). Professional Credentials Education: MBA in Management & Operations and B.Sc. in Computer Science. Certifications: CISSP, CCSK v.4, AWS Certified AI Practitioner, and Microsoft Azure Security Engineer Associate. Military Background: Major (Res.) in Operations & Communications for the Israel Defense Forces (IDF).

Specializations

David is the founder of Carve Line, a management consulting firm offering strategic cybersecurity advisory and managed GRC to SMB and mid-market companies. He has 27yrs experience spanning roles in InfoSec, Risk, and Audit. Having built and run security programs for multiple companies in regulated industries, he is sensitized to the requirements of demanding operating environments. His industry experience includes Finserv, Fintech, SaaS, Health-tech, Manufacturing, Insurance, and SLED, and he is proficient in ISO 27001, ISO 42001, SOC2, NYDFS, and HIPAA compliance.

Specializations

I am a US-focused Fractional CTO and Virtual CISO with over 20 years of hands-on technical depth and executive business acumen. My career spans building, scaling, and defending mission-critical engineering cultures across defense, cloud architecture, and AI ecosystems. As an Adjunct Professor of Cyber Security Engineering, I don't just understand compliance frameworks, I actively author the graduate-level curriculum on secure network engineering, cryptography, and incident detection. I specialize in translating complex security demands into practical, buildable technology roadmaps that protect company capital and unlock growth. I have scaled cybersecurity divisions by 250%+, orchestrated advanced penetration test remediation strategies, and engineered patent-pending Zero Trust architectures for the Department of the Navy. Furthermore, I bring deep FinOps discipline to my security practices, having strategically re-architected AWS cloud footprints to drive up to 87.5% in annual infrastructure cost savings without sacrificing performance or compliance posture. Whether you need to pass an upcoming vendor security audit, build an ironclad Incident Response capability, or establish an executive Strategic Roadmap, I provide elite, secure-by-design leadership without the enterprise overhead.

Specializations

Results oriented cyber security leader who is passionate about delivering threat solutions and tangible real-world services to stay ahead of the flood of industrial hacking that threatens businesses today. Advisory roles in threat intelligence, AI governance, security architecture, vulnerability management, data privacy, incident response, governance of enterprise IT, business risk optimization, IT strategy, and benefits realization. Currently hold CGEIT, CRISC, CISA, CISM, and CISSP Certifications.

Specializations

Anthony Mostak, C|CISO, is the Founder and Principal Consultant of Mostak Strategic Advisory, providing Fractional CISO and executive cybersecurity advisory services to small and midsize organizations. With more than 25 years of IT and cybersecurity leadership experience across healthcare, life sciences, SaaS, manufacturing, and other regulated industries, Anthony helps organizations identify and reduce cyber risk, strengthen security and compliance programs, prepare for audits and incidents, and align cybersecurity investments with business priorities.

Specializations

I’m a CISO and IT transformation executive who helps organizations modernize, scale, and secure their technology platforms while enabling business growth. Over my career, I’ve led global security, infrastructure, and enterprise IT teams through complex transformations — shifting legacy environments into cloud-first, automation-driven, and AI-enabled operating models. My work sits at the intersection of security, data, systems, and operational execution, ensuring technology is an accelerator rather than a constraint. I’m most often brought in when organizations need to: Modernize SaaS and enterprise platforms at scale Reduce cyber risk while supporting rapid growth Align security strategy with business outcomes Build and lead high-performing, globally distributed teams Simplify complex systems and operating models My leadership style is pragmatic and execution-focused. I believe strong security and IT organizations are built through clear priorities, measurable outcomes, and trust with the business, not through fear or bureaucracy. Areas of focus include: Enterprise & Product Security Leadership Zero-Trust & Cloud Security Architecture AI-Driven Automation & Operational Intelligence SaaS & Platform Modernization Regulatory, Compliance & Risk Management Executive Stakeholder & Board Engagement Currently open to senior leadership opportunities where security, IT, and AI-driven transformation are core to business strategy.

Specializations

Cyber Risk Advisory Service that ensures sensitive data protection and compliance with required control frameworks. This involves sensitive business and personal data mapping and gap analysis against required control frameworks. The outcome is a risk-based control gap remediation plan that meets all required control frameworks.

Specializations

Cybersecurity leader with 13+ years of experience in governance, risk, and compliance (GRC), specializing in NIST SP 800-171/800-53, CMMC, and enterprise security program design. CISSP and CEH certified, with an MS in Cybersecurity and an MBA. I help organizations build practical, audit-ready compliance programs and risk management frameworks — translating complex regulatory requirements into actionable security roadmaps for leadership and technical teams alike.

Specializations

Cybersecurity leader and multi-certified CISO with 28+ years of experience leading enterprise, cloud, and automotive cybersecurity programs across complex, highly regulated environments. Demonstrated expertise in enterprise security governance, risk, and compliance (GRC), including policy architecture, risk quantification, regulatory alignment, and security operating models and standards. Proven track record in designing, scaling, and operationalising enterprise security capabilities that translate cyber risk into business-relevant outcomes, enabling board-level decision-making, regulatory assurance, accelerated digital and cloud adoption, and sustained customer trust while strengthening threat resilience across complex multi-vendor and partner ecosystems. Recognised for translating complex cyber and enterprise risk into clear, decision-ready board and executive narratives, enabling informed investment, risk acceptance, and regulatory posture decisions. Has led large-scale, enterprise-wide transformation programs across private 5G systems, V2X ecosystems, and global enterprise security architectures, aligning security strategy with business growth, regulatory obligations, and technology roadmaps. Deep expertise in embedding security-by-design and security-by-governance across products, platforms, and partner ecosystems, ensuring resilience is engineered not only into technology, but into enterprise operating models, third-party risk management, and lifecycle governance. A trusted C-suite and board advisor known for integrating technology, governance, risk, and people to build resilient, future-ready organisations. Brings strategic foresight, execution discipline, and a mature security-first culture to drive sustainable outcomes. Leads with credibility and pragmatism in high-stakes negotiations, and consistently builds and operates high-performing, distributed, and cross-cultural teams through a people-centric leadership approach.

Specializations

With a decade of experience in governance and cybersecurity, currently serving as Managing Director at Citra Tekindo Pratama. Bringing expertise in risk management, regulatory compliance, and cybersecurity frameworks, including NIST, CIS, ISO, and COBIT. Previous roles at The ITSEC Group and American Honda Motor Company, Inc. showcased collaborative efforts enhancing IT governance and risk strategies. Dedicated to fostering secure, compliant, and resilient environments, aligning with organizational goals and values. Known for bridging technical acumen with strategic leadership for impactful solutions.

Specializations

Strong record of success in information security management, IT strategy and budget planning, organizational development, and strategic technology architecture. Value creation through process improvement, organized optimization, talent development, and technology integration. Proven ability in collaboration, information security, application development management and governance structures. Over 20 years IT experience, over 10 years in information security and over 12 years in IT management roles. Experienced in leading web and application development functions and managing the delivery of systems on-time and under budget. Skilled at staff development, strategic and budget planning, project management, vendor management, process improvement, systems analysis, and technology integration. Adept at creating scalable internet architectures, managing multiple projects simultaneously. Able to bridge the gap between technical and non-technical personnel. Specialties: consulting, talent and organizational development,enterprise architecture,strategic planning, security and risk,cloud computing, networking Certifications: HCISPP, CISSP, CISM, CGEIT

Specializations

Experienced cybersecurity professional specializing in comprehensive security solutions.

Specializations

Virtual CISO ISO,(vCISO, vISO, vISM) and Cybersecurity & GRC leader with 20+ years of experience designing, implementing, and governing enterprise cybersecurity, risk management, and compliance programs across global organizations. Specialized in building and operating security programs aligned with ISO/IEC 27001:2022, SOC 2 Type I & II, and NIST Cybersecurity Framework (NIST CSF), with a strong focus on risk-based decision making, regulatory compliance, and business enablement. Core expertise includes: • vCISO and executive cybersecurity advisory • Enterprise cyber risk management and risk treatment • ISO 27001 ISMS design, implementation, and audits • SOC 2 readiness, gap assessments, and assurance • Governance, Risk & Compliance (GRC) program management • Cloud security governance for Azure and AWS environments • Vendor and third-party risk management • Incident response, business continuity (BCP), and disaster recovery (DR) • Board-level reporting, security metrics, and executive communication Proven ability to partner with boards, CXOs, and senior leadership to translate cybersecurity risks into business impact, strengthen security posture, and support scalable growth in cloud-first and SaaS-driven environments. Experienced across BFSI, Healthcare, SaaS, and regulated industries, supporting organizations as a trusted vCISO, cybersecurity advisor, and GRC leader. Proven track record of leading audits, reducing risk exposure, and enabling business growth through scalable compliance programs. Worked with BFSI, Healthcare, SaaS, and Global Enterprises across APAC, US, EU, and UK.

Specializations

Cybersecurity leader with 15+ years of experience across banking, insurance, and global services. I currently lead a 20-person Cybersecurity Architecture team in a highly regulated financial environment, covering security strategy, cloud and SaaS security, IAM, data protection, vulnerability management, network security, and AI security governance. I am CISSP, CCSP, CCSK, and CISA certified, with strong experience translating cyber risk into practical security roadmaps aligned with business needs, regulatory requirements, and frameworks such as NIST and ISO 27001.

Specializations

I am a strategic cybersecurity executive and operational leader who helps organizations modernize, scale, and secure their technology platforms while enabling business growth. Currently serving as a Director of Cybersecurity in the healthcare sector, I bring nearly a decade of hands-on technical depth and executive business acumen. My career includes seven years defending highly regulated financial environments, progressing through roles in SOC analysis, incident response, ethical hacking, and vulnerability management. Holding a Master of Information and Cybersecurity from UC Berkeley, my work sits at the intersection of security, systems, and operational execution, ensuring technology is an accelerator rather than a constraint. I specialize in translating complex security demands into practical, buildable technology roadmaps that protect company capital and unlock growth.

Specializations

Strategic Business Operations & Strategy professional with a background in Security Engineering and a focus on systemic optimization. Expert at orchestrating cross-functional teams to resolve complex organizational bottlenecks and logic gaps. Leverages a pattern-recognition mindset and MBA-level analysis to align technical execution with long-term corporate stability, risk mitigation, and social mission.

Specializations

Vivek Srivastava is a senior cybersecurity and managed security services leader with over 20 years of experience driving enterprise and national-scale security transformation across telecom, government, smart cities, and cloud ecosystems. As a Cybersecurity Practice Head, he has led the design and delivery of large NOC and SOC operations, hybrid and multi-cloud security architectures (AWS, Azure, GCP), SIEM/SOAR platforms, identity and access management, application and network security, and compliance programs aligned with NIST and ISO/IEC 27001. He has advised CXOs, government bodies, and global enterprises on secure digital transformation, combining deep technical expertise with strong techno-commercial leadership, OEM and SI partnerships, and program governance for mission-critical cybersecurity initiatives.

Specializations

Seasoned cybersecurity leader with 15+ years of experience in global threat operations, incident response, and security governance across SaaS, healthcare, and highly regulated environments. Strong background in HIPAA, SOC 2 and ISO 27001 execution, AWS-native security controls, secure SDLC, and customer trust enablement. Known for reducing friction between security, engineering, and sales while maintaining audit-ready environments. Expert at leading cross-functional teams, designing enterprise-wide controls, and scaling SOC efficiency and audit-ready governance within NIST and ISO frameworks. Adept at translating complex cyber analytics into board-level security briefings and aligning technical initiatives with organizational risk and resilience objectives.

Specializations

Regulatory compliance expert with 18 years in financial services security. Former bank CISO who has guided 20+ organizations through SOC 2, PCI DSS, and SOX compliance. Known for practical, business-aligned security strategies.

Specializations

Former IDF Unit 8200 cybersecurity officer with extensive experience in financial services compliance and security training.

Specializations

Veteran cybersecurity consultant with deep expertise in financial services and cross-border data protection. Specialized in GDPR, PDPA, and Hong Kong's privacy regulations.

Specializations

Senior security consultant with extensive experience in DevSecOps and cloud-native security. CISSP and AWS Security Specialty certified. Former CISO of fintech unicorn.

Specializations

Leading cybersecurity consultant in Taiwan with deep expertise in GDPR, PDPA, and cross-border data protection. Served clients in semiconductor and manufacturing industries.

Specializations

Former cybersecurity lead at major tech firms. Expert in incident response and penetration testing with CISM and CEH certifications. Passionate about building security-aware cultures.

Specializations

Former CISO at Fortune 500 healthcare company with 15 years securing critical infrastructure. Specializes in HIPAA compliance and healthcare security frameworks. Led security teams through multiple SOC 2 and HITRUST certifications.

Specializations

Cloud security architect with 14+ years experience. Expert in AWS, Azure, and GCP security implementations. Helped 50+ SMBs achieve SOC 2 and ISO 27001 compliance.

Specializations

PhD in Computer Security with extensive research background in threat intelligence and data protection. Combines academic rigor with practical business solutions. Specializes in privacy regulations including GDPR and CCPA.

Specializations

ISO 27001 Lead Auditor with extensive experience in French and EU compliance frameworks.

Specializations

Technion graduate specializing in advanced penetration testing and cloud security architecture.

Specializations

Senior cybersecurity consultant with extensive experience in Japan's financial sector. Specialized in ISO 27001, PCI DSS, and cloud security architecture for enterprise clients.

Specializations

Ethical hacker and security researcher with OSCP and CISSP certifications. Specialized in offensive security, red teaming, and building robust incident response programs.

Specializations

Former NCSC consultant specializing in UK financial services cybersecurity and compliance.

Specializations

Manufacturing and industrial security specialist with OT/ICS expertise. Helps traditional businesses modernize security while protecting legacy systems. Strong focus on practical, cost-effective security for mid-market companies.

Specializations

Financial services security expert with deep knowledge of Swiss and EU banking regulations.

Specializations

CISM-certified security leader specializing in incident response and employee security training for SMBs. Former Fortune 500 CISO with hands-on SMB experience.

Specializations

Cloud security specialist helping startups and tech companies build secure infrastructure from the ground up.

Specializations

Cloud security architect specializing in AWS and Azure security implementations for startups.

Specializations

Ben-Gurion University cybersecurity researcher specializing in threat detection and response.

Specializations

CISM certified with deep expertise in Nordic and EU data protection regulations.

Specializations

CISSP certified professional with expertise in critical infrastructure protection and incident response.

Specializations

GDPR and NIS2 compliance expert helping Italian SMBs achieve and maintain regulatory compliance.

Specializations

GDPR compliance expert specializing in cloud security and data protection for European enterprises.

Specializations

Certified CISSP with over a decade of experience securing financial institutions across Southeast Asia. Specialized in regulatory compliance and cloud security architecture.

Specializations

Spanish and EU compliance specialist with focus on healthcare and pharmaceutical industries.

Specializations

CISSP-certified cybersecurity professional with 15+ years helping SMBs achieve compliance and strengthen security posture. Specialized in HIPAA, PCI DSS, and SOC 2 implementations.

Specializations

Former FBI cybercrime investigator with 16 years fighting cyber threats. Brings law enforcement perspective to corporate security. Expert in incident response, forensics, and working with government agencies during breaches.

Specializations

GDPR and Austrian data protection law expert serving Central European markets.

Specializations

Risk management expert with CISM certification. Helping organizations develop comprehensive security strategies aligned with business objectives and optimize security budgets.

Specializations

Cloud security architect turned vCISO with deep AWS and Azure expertise. Previously led incident response at a major tech company. Passionate about building security-first cultures in fast-growing startups.

Specializations

Cybersecurity expert specializing in incident response and penetration testing. Former lead security analyst at major Korean tech companies. CISSP and CEH certified.

Specializations

Experienced vCISO focused on incident response and security training. Worked with BPO and healthcare sectors. Expert in building security-first cultures in growing organizations.

Specializations

Bilingual (English/French) security consultant specializing in Canadian privacy law and cross-border data compliance. Former privacy officer at national retailer. Expert in PIPEDA and provincial privacy regulations.

Specializations

Penetration testing specialist and cloud security expert. Helped numerous Malaysian enterprises secure their digital transformation initiatives. OSCP and CISSP certified.

Specializations

Practical cybersecurity guidance for manufacturing and export-oriented businesses.

Specializations

Cost-effective security solutions for growing businesses with focus on vendor risk management.

Specializations

Offensive security expert with extensive penetration testing experience across multiple industries.

Specializations

Certified Ethical Hacker with focus on vendor risk management and penetration testing for SMBs.

Specializations

Senior cybersecurity advisor with extensive experience in Indonesian financial services and e-commerce sectors. Expert in ISO 27001, PCI DSS, and local regulatory compliance.

Specializations

CISA certified professional with extensive experience in healthcare and financial services compliance. Specialized in HIPAA, PCI DSS, and MAS regulations.

Specializations

Rising star in cloud security with focus on SaaS companies. Former security engineer at major cloud provider. Excels at helping startups achieve enterprise-grade security and SOC 2 compliance quickly and efficiently.

Specializations

Privacy and compliance expert specializing in PDPA, GDPR, and ISO 27001. Helping organizations navigate complex regulatory landscapes across multiple jurisdictions.

Specializations

Cybersecurity consultant serving Southeast Asian markets. Specialized in helping SMBs establish comprehensive security programs from the ground up. CISM certified.

Specializations

Former penetration tester and ethical hacker who transitioned to strategic security leadership. Brings offensive security mindset to defensive strategies. Known for finding creative, budget-friendly security solutions for SMBs.

Specializations

Entry-level pricing with professional quality - perfect for businesses starting their security journey.

Specializations

Affordable security training and policy development for small and medium enterprises.

Specializations

Cloud security architect with deep expertise in AWS, Azure, and GCP security. CISSP certified with focus on data protection and privacy compliance for SMBs.

Specializations

Cybersecurity consultant focused on security governance and training. Helped Vietnamese SMBs build security programs aligned with international standards. CISA certified.

Specializations

Rising cybersecurity professional with CISM certification. Focused on helping SMBs establish strong security foundations without breaking the bank. Data-driven approach to security investments.

Specializations

Security awareness specialist focused on creating engaging training programs. CISSP certified with experience building security cultures in fast-growing startups.

Specializations