AI and emerging-technology risk
AI governance assessments, including a fitness-for-purpose evaluation of an AI platform for a major international body. Experience in post-quantum encryption risk.
Partner · Security and resilience
CISSP · CCSP · Geneva
More than twenty years leading cybersecurity in banking, aerospace and international organisations.
Board advisory, and hands-on incident response.
Worked across financial services · aerospace · manufacturing · pharmaceuticals · biotechnology · shipping and logistics · defence contractors · international organisations
What he is called in for
The questions that sit under an AI programme long before anyone asks about the model.
AI governance assessments, including a fitness-for-purpose evaluation of an AI platform for a major international body. Experience in post-quantum encryption risk.
Risk appetite, control maturity and investment trade-offs presented to boards, executive committees and regulators.
Detection through to recovery, regulatory notification across jurisdictions, and post-incident remediation.
Cyber due diligence and post-close integration for an acquisition programme, supplier and third-party risk, and secure IT and OT integration with minimal impact on production.
Career
Senior cyber risk advisor in aerospace, logistics, biotechnology, financial services and international organisations. Audit lead for FINMA-mandated IT and cyber supervisory audits at a global bank, 2023 to 2025. Designed the cyber due diligence model for a logistics group's acquisitions, and built an AI governance assessment approach.
Led the global security programme across IT and operational technology in five countries. Defined the IT/OT target operating model, achieved CMMC Level 2 certification, and reported security KPIs to the CEO, CIO and board.
Led response and recovery with a 30-person team, and coordinated regulators, insurers, legal counsel and law enforcement.
Founding CISO and CTO, and Head of Technology and Innovation. Partnered with industry CISOs, regulators and boards on cybersecurity governance standards, and launched programmes on AI, blockchain and quantum risk.
Ran the regional security framework and supervisory relationships with FINMA and the OCC. Built the security operations centre from 1 to 12 analysts, cutting mean time to detect by 50%, and led GDPR readiness across EMEA.
Established the application security programme at Guardian Life, for platforms supporting more than $60bn in assets. Managed IT security operations across trading and wealth management at Morgan Stanley.
Also
Marco on LinkedIn · English (native) · French (intermediate)