OUR STORY
Enterprise Security. Built by Practitioners, Not Resellers.
For more than 25 years, we’ve built and led security in high-stakes, regulated environments. InfoSec LI brings that same caliber of expertise to small and midsize businesses—without the complexity, bloated tool stacks, or enterprise overhead. InfoSec LI serves growing businesses and regulated organizations across Long Island and the New York metropolitan region.
EXPERIENCE / PRACTICAL APPLICATION
WHY WE EXIST
Enterprise-Caliber Defense. Right-Sized Execution.
Modern threat actors don’t check employee headcounts before launching automated ransomware, credential abuse, or cloud identity attacks. Yet small and mid-market organizations are often forced to choose between hollow compliance checklists and seven-figure enterprise tool sprawl.
InfoSec LI was built to break that compromise.
We engineer proactive security architectures and operational playbooks tailored to your real-world attack surface. No shelfware, no endless alert fatigue, and no oversized overhead—just defensible security grounded in real operating environments and embedded directly into your daily operations.
Defensible security isn't about buying more tools—it's about engineering an architecture you or your team can actually sustain.
EXPERIENCE AT A GLANCE
Tenured Experience
25+ Years
Enterprise IT & Security Experience
More than two decades working across infrastructure, security engineering, architecture, and operations—from traditional enterprise environments through hybrid cloud, modern identity, and today’s evolving threat landscape.
Regulated Environments
Security Built for High-Stakes Requirements
Experience shaped in banking, financial services, and other highly regulated environments—building defensible security programs aligned with regulatory, audit, and customer requirements including NYDFS 500, PCI DSS, HIPAA, SOC 2 readiness, and NIST CSF.
Identity. Endpoint. Detection.
Modern Controls, Engineered to Work Together
Hands-on engineering across Zero Trust, Conditional Access, EDR/XDR, SIEM, cloud security, security telemetry, and detection automation—connecting the controls that protect today’s hybrid environment.
Operational Execution
CISO to Console
Strategy to Execution
Bridging boardroom cyber-risk strategy with hands-on security engineering—working alongside internal IT teams and MSP partners to turn priorities into implemented, operational controls.
BUILT THROUGH EXPERIENCE
Enterprise defense forged in live environments—not whitepapers.
01
Enterprise Infrastructure Foundations
You cannot defend what you don’t understand. Decades spent architecting, administering, and scaling enterprise networks, directory services, infrastructure, and hybrid environments created the technical foundation for everything that followed in security.
02
Hands-on Security Architecture & SecOps
Engineering security across the attack surface. Implementing Zero Trust identity controls, endpoint hardening, security telemetry, SIEM/XDR capabilities, and detection engineering designed to improve visibility, reduce noise, and identify meaningful threats earlier.
03
Defensible Governance & Risk Quantification
Turning governance and compliance into an operational discipline—not a paperwork exercise. Establishing defensible security baselines aligned with frameworks and requirements such as NYDFS 500, NIST CSF, SOC 2 readiness, and customer obligations—supported by measurable controls, repeatable processes, and audit-ready evidence.
04
Executive & Fractional Cyber Leadership
Connecting cybersecurity decisions directly to business risk. Translating technical exposure into priorities executives, boards, founders, and financial leaders can understand, fund, and defend—to customers, auditors, regulators, insurers, and other stakeholders.
05
The InfoSec LI Mandate
Enterprise-grade security, right-sized for operational reality. InfoSec LI brings decades of enterprise security experience directly to small and midsize organizations—delivering focused leadership, practical engineering, and defensible security programs without unnecessary complexity, oversized tool stacks, or enterprise-scale overhead.
INDEPENDENT SECURITY
Security is an independent discipline—not an add-on service.
Cybersecurity is often packaged alongside traditional IT services, but the disciplines are not interchangeable. Operating infrastructure is different from independently assessing its exposure, designing security architecture, governing risk, engineering detection, and preparing the organization for an incident.
InfoSec LI was founded to bring that dedicated security perspective to growing organizations while working alongside the internal IT teams and MSPs they already trust.
The same team operating a control should not be the only team evaluating whether that control is effective.
Independent oversight is not distrust. It is sound governance.
Our role is to strengthen the people already running the environment while giving leadership an objective view of security risk, architecture, and readiness.
Strategy when you need leadership. Engineering when you need execution.
01
Fractional CISO & Strategy
Executive security leadership aligned to business priorities. We develop strategic roadmaps, executive and board-level risk reporting, cyber insurance readiness, and clear investment priorities—without the cost and complexity of a full-time security executive.
02
Hands-On Security Architecture
Engineering security across identity, endpoint, cloud, and hybrid infrastructure. We implement Zero Trust controls, harden attack surfaces, improve security telemetry and detection, and rationalize existing technology to reduce complexity and unnecessary tool sprawl.
03
Defensible Governance & Audit Readiness
Turning governance and compliance into a repeatable operating discipline. We build defensible policies, controls, and evidence aligned with requirements and frameworks such as NYDFS 500, SOC 2, HIPAA, and NIST CSF—while improving audit readiness and simplifying customer security assessments.
04
IT & MSP Co-Management
Security expertise that strengthens the teams you already have. We work directly with internal IT leaders and MSP partners to establish hardened configurations, repeatable operating procedures, incident-response playbooks, and the knowledge needed to sustain the program over time.
Secure. Govern. Enable.
Our objective is never to make you permanently dependent on outside advisors. We engineer defensible architectures, build sustainable governance, and equip your team to operate, maintain, and strengthen the environment over time.
SECURE
Harden the critical attack surface.
Architecting Zero Trust identity controls, endpoint visibility, detection capabilities, and cloud protections designed to reduce exposure, contain threats, and limit the business impact of compromise.
GOVERN
Establish defensible governance.
Translating regulatory, contractual, and framework requirements—including NYDFS 500, SOC 2, and NIST CSF—into repeatable controls, meaningful risk metrics, and audit-ready evidence for customers, regulators, auditors, and insurers.
ENABLE
Build capability inside your existing team.
Embedding operational playbooks, incident-escalation workflows, technical standards, and security knowledge into internal IT teams and MSP partners so the program can be operated and improved long after the engagement ends.
Engineered to strengthen the team you already trust.
Enterprise security is a specialized operational discipline—not an extension of day-to-day IT administration. InfoSec LI works alongside internal IT leaders, MSPs, technology partners, and executive leadership to add dedicated security depth without disrupting the teams already running the business. We bring enterprise security architecture, defensible governance, and hands-on engineering expertise while keeping your existing team at the center of the operating model.
01 /
Collaborate
One team. Clear responsibilities.
We work directly with internal IT staff and trusted MSP partners to align priorities, reduce friction, and address meaningful security risks together.
02 /
Augment
Specialized depth where it matters.
We add enterprise security leadership, hands-on engineering, cloud and identity expertise, detection capabilities, and governance support without requiring a full internal security organization.
03 /
Transfer Knowledge
Build capability that stays with you.
We deliver documented playbooks, repeatable processes, clear roadmaps, and practical knowledge transfer so your team can operate and improve the security program with confidence.
REPRESENTATIVE EXPERIENCE
Security leadership shaped by real operating environments.
InfoSec LI is built on more than 25 years of hands-on experience designing, operating, governing, and improving security programs across complex, regulated environments. The representative examples below illustrate that perspective; organizational and proprietary details are intentionally omitted.
SECURITY MODERNIZATION
Consolidating a fragmented enterprise security stack
Situation
A complex financial-services environment relied on multiple overlapping endpoint, detection, and security-management platforms, increasing operational complexity and making consistent visibility difficult.
Work
• Evaluated overlapping endpoint, detection, and security-control capabilities
• Helped design consolidation around modern EDR/XDR and centralized security telemetry
• Integrated endpoint, identity, cloud, and monitoring requirements into the target architecture
• Addressed coexistence, migration, policy, and operational-transition risks
Perspective
The objective was not simply to replace tools. It was to reduce unnecessary complexity while improving control consistency, visibility, and operational ownership.
SECURITY PROGRAM DEVELOPMENT
Building security governance for a regulated technology business
Situation
A technology organization supporting financial-services customers required a security program capable of satisfying customer expectations, third-party scrutiny, and multiple security and compliance requirements.
Work
• Developed security policies, standards, procedures, and clear control ownership
• Aligned technical and administrative controls with applicable security and compliance requirements
• Supported internal, external, and third-party audit and evidence activities
• Embedded governance into operational processes rather than treating compliance as a documentation exercise
Perspective
Effective governance works when policy, technical controls, evidence, and accountability reinforce one another.
SECURITY OPERATIONS & LEADERSHIP
Strengthening operational detection, response, and escalation
Situation
A large regulated environment required stronger operational visibility, more effective alerting, clearer escalation, and closer coordination between security engineering and day-to-day security operations.
Work
• Tuned SIEM detections while improving SOC escalation and operational response workflows
• Performed threat hunting and attack-surface review
• Strengthened endpoint detection while coordinating firewall, identity, and SIEM controls
• Translated technical findings into operational priorities and leadership reporting
Perspective
Security operations become more effective when detection engineering, technical controls, escalation, and leadership accountability are treated as one operating system rather than separate tools.
LET’S TALK
Let’s build the security program your business actually needs.
Whether you’re preparing for regulatory scrutiny, untangling tool sprawl, or building a security program from the ground up, InfoSec LI brings experienced leadership and hands-on engineering to help you reduce risk, prioritize what matters, and build a defensible roadmap that fits your business.
Practical security for a more resilient tomorrow.
© 2026 InfoSec LI. All rights reserved.