Michael Roza

Head of Risk, Audit, Control and Compliance

Since 2012 Michael has contributed to over 100 CSA projects completed by CSA's Internet of Things, Zero Trust/Software-Defined Perimeter, Top Threats, Cloud Control Matrix, Containers/Microservices, DevSecOps, and other working groups. He has also served as co-chair of CSA's Enterprise Architecture, Top Threats, and Security-as-a-Service working groups while also serving as the Standards Liaison Officer for IoT, ICS, EA, SECaaS, and Cloud Key Management. His contributions during 2018, 2020, 2021, and 2022 resulted in his receiving each year's Juanita Koilpillai Service Award, while his performance over time resulted in his receiving the CSA Research Fellowship Award in 2021.

Michael is a risk, audit, control, and compliance professional with 20-plus years of experience with organizations such as Bridgestone EMEA, Komatsu International, Mitsui Novus International, Johnson and Johnson Inc., and Baxter Inc. He has worked with several high-tech startups serving the network management and contact center software markets and disk manufacturing and radiological cancer treatment markets. He has held leadership positions in SAP configuration and transformation teams, SAP segregation of duties, and IT general controls projects. Michael also served as secretary or observer for various committees and councils on internal audit, risk management, corporate governance, information security, and corporate social responsibility. He is a Certified Information Systems Auditor, Certified Public Accountant, and Certified Internal Auditor. He holds an AEMBA from Claremont College, Peter Drucker Center, and an MBA from De Paul University.