Over twenty years running security inside financial services. Now available as your CISO, your guide to the security technology worth adopting, and your practitioner sounding board on the way to market.
For hedge funds, asset managers, fintechs and growth-stage companies that need senior security judgment — and a regulator-ready program — without a full-time executive hire.
Own the program end to end: strategy, roadmap, budget, team and incident leadership — or build the function from scratch and hand it to a full-time leader when you're ready. Investor and LP due diligence answers that read like they came from inside the business.
SEC, FINRA, NYDFS Part 500, SOX and FFIEC expectations translated into controls, evidence and policies that hold up in an exam or an operational due diligence review.
Access to vetted, next-generation security technology before it's mainstream — matched to your actual problems, piloted with discipline, and deployed without vendor theater.
Practical guardrails for adopting AI tools and agents: data exposure, model and vendor risk, acceptable-use policy and the controls regulators will ask about.
A vendor and service-provider risk program proportionate to your size — tiering, due diligence, contract terms and ongoing monitoring.
Board and InfoSec Committee reporting your directors will actually read: program status, key risk metrics, and maturity against NIST CSF, tracked quarter over quarter with clear decisions and asks.
A fixed-scope review of your risks, controls and regulatory posture, ending in a prioritized roadmap you can take to leadership.
A monthly retainer with defined hours, a standing cadence with leadership, and on-call support when something goes wrong.
When it's time for a full-time leader, help define the role, interview candidates and transfer the program cleanly.
I've been the first design partner, the first enterprise customer and an early investor. I know what makes a CISO take the meeting, run the pilot and sign the PO — and what makes them stop answering.
Advisor and angel investor to early-stage companies building the next generation of security and AI.
A security executive with over twenty years inside financial services — from engineering and regulatory remediation at bulge-bracket banks to building and leading security programs at investment firms.
Why Bitahon? בִּטָּחוֹן is the modern Hebrew word for security. Its older, deeper meaning is trust — the confidence that what you rely on will hold. That's the standard this practice is built to.
Whether you need a CISO next month or a practitioner's read on your product, start with a 30-minute conversation.
Start with a 30-minute call
Tell me whether you're a firm looking for CISO coverage, exploring new security technology, or a founder building a company — and what's on your mind.
Native Security
Daylight Security