Skip to content
Open to board advisory and board seats — 2H 2026, then CY 2027–2028.
See details →

Michael York — Technology & Infrastructure Executive · CIO / CISOAI Governance, Cloud & Platform · Board Advisor

Michael York

Strategic Focus

Enterprise AICloud & DevOpsSecurity & Governance

Bridging legacy stability and future intelligence. Leading organizations through the transition from digital-first to AI-native.

I lead information security and DevOps at SavvyMoney, a fintech platform serving 1,500+ financial institutions as they deliver credit and financial-wellness products to the people they serve. My work sits at the intersection of three things that don't always get along: moving fast, staying secure, and proving it to auditors, regulators, and demanding partners. I came up through security and risk — holding the CISSP, CISA, CISM, and CRISC — but I also own DevOps, so I don't treat security as something that happens to other people's systems. I'm responsible for the pipelines, the cloud architecture, and the uptime as well as the controls that protect all of it. That dual mandate shapes how I think: the best security makes the business faster and more credible, not slower and more annoyed. Lately I spend a lot of time on AI — as a threat and as a tool — and on the controls layer underneath it: audit trails, scoped tool authority, and the boundary between an output a system can act on and one that needs a human first.

30+

Years in Technology

CISSP · CISA
CISM · CRISC

Industry Certifications

About

I lead information security and DevOps at SavvyMoney, a fintech platform serving 1,500+ financial institutions as they deliver credit and financial-wellness products to the people they serve. My work sits at the intersection of three things that don't always get along: moving fast, staying secure, and proving it to auditors, regulators, and demanding partners.

Explore

Latest writing on AI governance & security

All posts

Fintech security & DevOps case studies

All work

Let's work together

Advisory engagements, fractional security leadership, or just an intro call.