Michael Ricci

Background

About Michael Ricci

Seasoned Governance, Risk, and Compliance (GRC) professional with over 20 years of experience in Information Security and Technology Risk Management. I specialize in developing and implementing comprehensive risk management strategies for the financial and healthcare sectors, ensuring regulatory compliance, and driving cutting-edge cybersecurity initiatives.Key areas of expertise:• Third-Party Risk Management• Regulatory Compliance (HIPAA, PCI DSS, SOX, GLBA, NYS DFS Cybersecurity)• Information Security Architecture• Identity and Access Management• Cloud Security (Microsoft 365, Azure, AWS)• Penetration Testing and Vulnerability Analysis• Policy Development and Implementation• SDLC Security IntegrationThroughout my career at organizations like Excellus Blue Cross Blue Shield and Northern Trust Company, I've consistently delivered results by:• Designing and implementing secure enterprise solutions• Developing comprehensive Third-Party Risk Management programs• Integrating advanced identity management solutions across complex systems• Optimizing security operations and maximizing the effectiveness of penetration testing• Leading high-stakes IT audits and regulatory compliance testingI'm passionate about fostering collaborative partnerships to address complex challenges, develop innovative solutions, and drive continuous improvement in organizational security postures. My approach combines technical expertise with strategic vision, allowing me to effectively communicate with both technical teams and executive leadership.