Tyson M.
United States · Board-Level Cybersecurity, Technology Risk, and AI Governance Advisor | CISO & CTO | Former AWS Principal Advisory CISO · MIO Partners
National Association of Corporate Directors
65 followers
About
I help boards, CEOs, CIOs, CISOs, and executive teams make better decisions about cybersecurity, AI governance, cloud risk, resilience, and technology investment.
My work sits at the intersection of business risk, executive accountability, and technology execution. I help leaders understand what risk matters, what needs to change, who owns it, what should be funded, and how progress should be communicated to the board.
I have served as a CISO, CTO, Principal Advisory CISO, founder, and executive advisor across regulated, retail, financial services, cloud, and enterprise environments. My focus is not security theater. It is defensible decision-making, practical governance, measurable risk reduction, and stronger leadership visibility.
Areas of focus include board cyber governance, fractional CISO leadership, AI governance, cloud security, cyber risk quantification, security program maturity, executive scorecards, resilience planning, vendor risk, and regulatory readiness.
Specialties
- CISO / Security Leadership
- Security Governance
- Security Program Management
- Security Strategy
- Security Transformation
Skills
- Cybersecurity Executive Leadership
- Board Cyber Governance
- Cybersecurity Advisory
- Technology Risk Management
- AI Governance and Readiness
- Cloud Security Strategy
- Cyber Risk Quantification
- Security Program Maturity
- Executive Risk Communication
- Resilience and Incident Readiness
18 skills in total
Licenses & Certifications
-
Certified Information Systems Security Professional
ISC2
Issued Jun 2026
-
Four Signals Certificate in AI Governance
The Reed Group
Issued May 2026
-
NACD Directorship Certification®
NACD - National Association of Corporate Directors
Issued Dec 2025 · Expires Dec 2027
10 certifications in total
Experience
-
Chief Information Security Officer
MIO Partners
Feb 2026 — Present
New York, United States
-
Founder and CEO
CTO Input
Mar 2025 — Present
-
Principal CISO Advisor
Amazon Web Services
Aug 2021 — May 2025
5 experiences in total
Education
-
National Association of Corporate Directors
Directorship Certification Program
Unknown
-
Carnegie Mellon University
CISO Executive Program
Unknown
3 education entries in total
Recent posts
Did you know that most risk reports fail before the second slide is presented?
They answer questions nobody in the room asked. Before you present risk to a non-technical audience, make sure your update answers these:
The 5-question risk translation test
Before sending your next cyber risk update to your leadership, ask these five questions:
1. What decision do we need make with the information you are sharing?
2. What business outcomes are at risk?
3. What is the likely impact if we wait?
4. Who owns the next action?
5. What tradeoff are we asking leaders to accept?
If your update does not answer those questions, it may be technically accurate but operationally weak.
The executives you guide and inform do not need more noise.
They need sharper choices.
[celebration:new_certification]Has successfully verified **Certified Information Systems Security Professional** (ISC2), **Certified in Cybersecurity** (ISC²) and 2 more certifications
A lot of cyber professionals think the next step in their career is deeper technical expertise.
Sometimes that is true.
But for many senior practitioners, the bigger gap is different.
Can you explain risk in business language?
Can you brief executives without drowning them in detail?
Can you help a board understand what decision is needed?
Can you influence leaders who do not report to you?
Can you connect controls, investment, resilience, and accountability?
Can you stay calm when the stakes are high?
Technical depth gets you credibility.
Executive judgment gets you trusted.
That is the shift many have to make.
The job changes when cybersecurity stops being only about what you know and starts being about how well you help the business decide.