About Techem Group
Enterprise Cyber Risk. Governance. Resilience.
Techem Group is an independent cybersecurity and technology risk advisory firm helping organizations understand, govern, and reduce technology and cyber risk in increasingly complex and regulated environments.
Our work sits at the intersection of cybersecurity, enterprise risk, technology governance, regulatory requirements, and executive decision-making.
We help leadership move beyond compliance checklists and technical findings to establish practical governance, accountability, measurable risk reduction, and informed investment decisions.
What We Believe
Cybersecurity is not simply a technology problem. For executives and boards, the fundamental questions are:
- What are our most significant technology and cyber risks?
- Which risks require immediate attention?
- Are our controls actually effective?
- Are regulatory and audit requirements being addressed?
- Are remediation efforts producing measurable risk reduction?
- Can leadership clearly understand the organization's cyber-risk position?
Techem Group helps answer those questions through structured risk assessment, governance, control assurance, regulatory readiness, and executive advisory.
Our Experience
Techem Group’s advisory approach is informed by more than 25 years of experience across enterprise risk, cybersecurity governance, critical infrastructure, financial services, government, and regulated technology environments.
Experience includes:
- Enterprise cyber-risk and governance program development
- Critical infrastructure and NERC CIP environments
- Technology and operational risk
- Cybersecurity control assessment
- Regulatory and audit readiness
- Enterprise GRC
- Third-party risk
- IT/OT risk
- Remediation governance
- Executive and board-level risk reporting
- Large-scale regulated technology programs
Our Approach
We begin by understanding the organization’s business objectives and risk environment. We assess the effectiveness of existing controls and governance. We prioritize risks according to business impact rather than simply producing longer lists of technical findings. We establish clear ownership, remediation governance, and measurable outcomes. We then help leadership maintain visibility as the risk environment evolves.
Where We Work
Energy & Critical Infrastructure
Cyber risk, NERC CIP, IT/OT governance, regulatory readiness, and operational resilience.
Financial Services
Technology risk, enterprise controls, third-party risk, regulatory expectations, and governance.
Healthcare & Life Sciences
Regulated technology environments, cybersecurity governance, data protection, and control maturity.
Government & Public Sector
Cyber governance, risk management, regulatory requirements, and program oversight.
Regulated Enterprises
Cross-sector regulated organizations needing enterprise cyber-risk governance.
Leadership
Principal Advisor
The Principal Advisor brings more than 25 years of experience across enterprise risk, cybersecurity governance, technology risk, critical infrastructure, financial services, and regulated technology programs.
The advisory practice is grounded in experience working across complex organizations where cybersecurity, regulatory obligations, operational continuity, and executive accountability intersect.
With more than 25 years of experience across enterprise risk, cybersecurity governance, technology risk, and regulated environments, the Principal Advisor of Techem Group brings a cross-industry perspective spanning critical infrastructure, financial services, government, and highly regulated technology programs.
The advisory practice focuses on helping organizations strengthen cyber risk governance, assess control effectiveness, navigate regulatory and audit requirements, manage technology and third-party risk, and translate complex cybersecurity issues into clear, actionable information for senior leadership and boards.
Experience includes building enterprise cyber risk and governance programs, leading risk and control assessment initiatives, coordinating regulatory and audit readiness, governing remediation programs, and managing complex technology and cybersecurity portfolios in environments where operational resilience and regulatory accountability are critical.
The approach is practical and governance-focused: identify what matters, understand the organization's actual risk exposure, establish accountable remediation, and give leadership the information needed to make informed risk decisions.
Core Expertise: Enterprise Cyber Risk | Cybersecurity Governance | IT Risk | GRC | Critical Infrastructure | NERC CIP | Regulatory & Audit Readiness | IT/OT Risk | Third-Party Risk | Executive Risk Reporting
Credentials: CISSP | CISM | CRISC | PMP | CISA
Representative Experience
Anonymized. Details are limited by confidentiality.
- Context
- Regional healthcare system operating multiple hospitals and clinics.
- Challenge
- Prior-year audit findings across access control, protection of patient data, logging, and incident readiness, with no unified compliance governance.
- Role
- Led the HIPAA compliance and governance program, from risk assessment through remediation governance.
- Outcome
- An enterprise HIPAA governance framework with clear ownership and a sustained review cadence, and prior findings addressed ahead of the subsequent external audit.
- Context
- Regional financial institution with a growing digital banking and payments platform.
- Challenge
- Enterprise clients required SOC 2 Type II assurance, and controls and evidence were inconsistent across cloud environments.
- Role
- Designed and directed the SOC 2 Type II readiness program and control framework.
- Outcome
- The organization completed its first SOC 2 Type II audit cycle with a sustainable evidence and control-ownership model.
- Context
- State government agency delivering critical public services on legacy infrastructure.
- Challenge
- Grant eligibility required NIST Cybersecurity Framework adoption, with no formal security governance and a constrained budget.
- Role
- Developed and led a phased NIST CSF implementation roadmap with an emphasis on governance and knowledge transfer.
- Outcome
- Formal cybersecurity governance established, a phased roadmap adopted, and internal capability built to sustain the program.
Why Techem Group
Independent perspective
Advisory focused rather than tied to a particular cybersecurity product or technology vendor.
Governance-first thinking
Connecting technical cybersecurity issues to enterprise risk and business decisions.
Regulated-environment experience
Understanding the additional accountability created by regulatory, audit, and critical-infrastructure requirements.
Executive communication
Translating complex cyber and technology risks into information leadership can understand and act upon.
Have a cyber-risk, governance, or regulatory challenge that needs an independent perspective?
A 30-minute, no-cost conversation to discuss your most pressing cyber-risk or governance question.
Request a Cyber Risk Briefing