Michael Rowley

IT Risk Management and Security Specialist

Professional Overview
Michael Rowley is an experienced IT Risk Management and Security professional with a strong track record of driving cybersecurity initiatives and managing enterprise-level risk across the financial services industry. With over 30 years of diverse experience, he specializes in developing and implementing robust risk management frameworks, leading incident response and vulnerability management programs, and aligning security strategies with business objectives.

Experience Summary

Current Role
As an IT Risk Management and Security professional at Flagstar Bank, Michael is responsible for assessing and mitigating cyber risks, implementing advanced security controls, and ensuring compliance with industry regulations. He collaborates closely with cross-functional teams to enhance the organization's overall security posture and protect critical assets from emerging threats.

Career Progression
Prior to his current role, Michael held several leadership positions in risk management and cybersecurity at Ally, where he served as the Director of Cyber Security and Business Line Risk Management. In this capacity, he led the development and execution of enterprise-wide risk governance strategies, oversaw the implementation of security technologies, and drove the integration of security practices into business processes. Earlier in his career, Michael held technical roles in security consulting, vulnerability assessment, and incident response at Ford Motor Company and Kautex - Textron.

Academic Background
Michael holds a Bachelor of Science degree in Computer Science from the University of Michigan, where he graduated with distinction. He has also completed various industry certifications, including the Certified Information Systems Security Professional (CISSP) and the Certified in Risk and Information Systems Control (CRISC) designations.

Areas of Expertise

• Cybersecurity strategy and risk management

• Incident response and threat detection

• Vulnerability assessment and patch management

• Regulatory compliance and risk governance

• Secure software development and DevSecOps

• Collaboration and cross-functional leadership

Professional Impact
During his tenure at Ally, Michael led the implementation of a robust vulnerability management program that reduced the organization's attack surface and improved its overall security posture. He also spearheaded the development of a comprehensive risk management framework that enabled the company to proactively identify, assess, and mitigate emerging cyber threats.

Conclusion
With his extensive expertise in IT risk management and cybersecurity, Michael Rowley is a valuable asset to the financial services industry. His proven ability to align security strategies with business objectives, foster cross-functional collaboration, and drive measurable improvements in risk management makes him a trusted advisor and strategic partner for organizations seeking to enhance their security resilience and protect their critical assets.