CV - Giuseppe Quagliata (CISM)


Professional Summary


A Cybersecurity & Data Security Specialist with extensive experience in information security management, identity & access management (IAM), data security, and risk mitigation. Adept at leveraging data analytics and security telemetry to drive proactive threat detection, enhance compliance, and mitigate cyber risks. With a strategic mindset and a hands-on approach, I work closely with executives and technical teams to transform complex security challenges into business-enabling solutions.

A forward-thinking security consultant and data strategist, I specialise in designing and implementing enterprise security architectures, forensic analysis, and risk mitigation frameworks to protect organisations against cyber threats. My expertise spans cyber resilience, regulatory compliance, making me a trusted advisor for organisations looking to safeguard their most valuable assets.


Career Timeline & Experience


Varonis (2021 – Present)

Advanced Services - Value Delivery Specialist


  • Leading global security programmes, aligning cybersecurity strategies to ensure optimal service delivery and value recognition.
  • Spearheading security analytics by developing real-time dashboards in Power BI, Kusto Query Language (KQL), and Azure Data Explorer, enabling data-driven risk assessments and decision-making to assess the execution of Varonis Advance Services CyberSecurity Programmes.
  • Driving initiatives in Data Security Posture Management (DSPM), aligning them against NIST CSF 2.0.
  • Contributed on the definition of Microsoft Copilot security programme to help organisations integrate AI securely while maintaining data privacy and governance.
  • Delivering strategic advisory services to C-suite executives and security teams, helping them optimise their cybersecurity frameworks and risk mitigation strategies.


CyberArk Software (2016 – 2021)

EMEA Security Consultant & Senior Security Services Engineer


  • Conducted forensic investigations into cyber threats, providing in-depth risk assessments and incident analysis.
  • Defined Zero Trust and IAM security strategies, advising on hybrid cloud security policies for organisations leveraging AWS, Azure, OpenShift, and Kubernetes.
  • Developed custom security automation solutions using REST APIs, PSM connectors, CPM plugins, and scripting, reducing security misconfigurations and improving compliance alignment.
  • Led executive workshops on vendor assurance (defining the service practices, runbooks, procedures) , application security, and business continuity planning, equipping organisations with practical cybersecurity roadmaps.
  • Spearheaded the design, implementation, and execution of CyberArk products,architectures and programs as a senior team lead, driving robust privileged access management solutions.


LANDESK Software (2014 – 2016)

EMEA Technical Support Engineer


  • Managing high-priority escalations and stakeholder communications with Customer satisfaction over 98%.
  • Designing and maintaining complex security test environments integrating SQL, Linux, Windows, and endpoint security solutions.
  • Providing subject matter expertise in endpoint security management, mentoring new team members, and developing troubleshooting and Knowledge base documentation.


Kingston University (2013)

Bioinformatics Research Intern


  • Conducted data analysis, leveraging computational biology techniques to predict protein-protein interaction based on disulphide bonds.
  • Developed Java-based application for bioinformatics research purposes.

Education


Kingston University, London (2011 – 2014)

Bachelor of Science (BSc) in Computer Science

Grade: First Class degree with Honours.


ITC Giovanni Falcone, Italy (2003 – 2008)

High School Diploma, Commercial expert accountant and programmer

Grade : 100/100.


Key Areas of Expertise


  • Cybersecurity & Risk Management.
  • Identity & Access Management (IAM) & Privileged Access Security.
  • Data Security & Governance.
  • Certified Information Security Manager (CISM).
  • Threat Detection, Incident Response & Forensic Analysis.
  • Security Telemetry, Data Analytics & AI-Driven Security Insights (KQL, Power BI, Azure Data Explorer, GraphQL).
  • Disaster Recovery & Business Continuity Planning Strategies.


Impact & Achievements


Security Analytics & Risk Reduction


  • Established standardised processes and security metrics for global professional services delivery, improving operational efficiency.
  • Developed custom Grafana and Power BI dashboards to analyse telemetry data, identifying security trends and performance gaps.
  • Assessed Microsoft 365 and Entra ID security postures, recommending and implementing data governance enhancements.

Cybersecurity & Risk Management


  • Conducted impact assessments and gap analyses for enterprise clients, ensuring alignment with NIST CSF 2.0.
  • Advised on threat detection and response strategies, strengthening security postures for high-profile organisations.
  • Designed remediation plans for open-access permissions reducing data exposure risks.

Cloud Security & IAM


  • Led C-level cybersecurity workshops, providing strategic guidance on privacy, compliance, and security control frameworks.
  • Defined and executed forensics-driven security strategies, enabling organisations to proactively respond to security threats.
  • Supported enterprises in optimising least-privilege models and zero-trust security architectures, reducing excess permissions and mitigating insider risks.

Technical & Analytical Tools


  • Security Frameworks: NIST CSF 2.0.
  • Data Analytics & Visualisation: Kusto Query Language (KQL), Power BI, DAX, Azure Data Explorer, GraphQL.
  • Cloud & DevOps Security: Microsoft Entra ID, Kubernetes, OpenShift, AWS, Azure.
  • Programming & Automation:  REST APIs, GraphQL, CyberArk plugin development, Java.

Industry Sectors & Roles


  • Financial Services – Cloud security, data governance, IAM strategy.
  • Technology & SaaS – Risk assessment, IAM, security architecture consulting.
  • Enterprise Security Consulting – Advisory, regulatory compliance, executive security strategies, Business Continuity Planning and Disaster Recovery Strategies.