About
Security Leadership, Proven Where the Stakes Are Highest
World-class cybersecurity leadership shouldn’t be reserved for the Fortune 500. EnGrossed Advisory brings the same depth of leadership to growing organizations, without the cost of a full-time executive.
Michael W. Gross
CISO, Founder & CEO | EnGrossed Advisory
Michael has spent more than 30 years in technology and over two decades leading enterprise cybersecurity in healthcare and financial services, two of the most targeted and most regulated industries there are. He founded EnGrossed Advisory to put that leadership within reach of organizations that need it but can’t yet justify a full-time CISO.
At Cleveland Clinic, Michael built and led the Cyber Defense Fusion Center, serving as Cybersecurity Intelligence Leader from 2018 to 2025. He unified threat intelligence, security monitoring, incident response, and forensics into a single team, and directed a $10M+ annual security budget protecting one of the world’s most recognized health systems. His incident response leadership cut the organization’s mean time to respond (MTTR) by 40%.
Before that, Michael spent more than a decade at PNC Bank (formerly National City Bank) in business resilience and network engineering. He designed high-availability architectures for critical systems, including ATM networks, and delivered infrastructure improvements that produced $500,000 in annual recurring savings.
Today, as a Fractional CISO, Michael brings that leadership to organizations that need it: security strategy, risk reporting leadership can act on, incident response readiness, compliance, and governance for how the business uses AI. He is also developing agentic AI workflows for threat triage and incident enrichment that can help security teams cut the time it takes to respond to incidents. He writes and speaks on AI security, quantum readiness, NIST CSF 2.0, and building a security culture.
Leadership under pressure
Federal Security Liaison: National Special Security Event
Served as the lead cybersecurity point of contact for the FBI, Secret Service, and DHS during the 2020 First Presidential Debate, a National Special Security Event (NSSE). Coordinated security operations across agencies with zero disruptions in a globally visible, high-threat environment.
How Michael Leads
Risk in business terms
Boards don’t fund vulnerabilities. They fund decisions. Every recommendation is tied to business impact, cost, and priority, so leadership can act on it.
Build teams, not dependency
The goal is a stronger organization, not a permanent reliance on an outside advisor. Your people, processes, and documentation get better with every engagement.
Ready for the worst day
Years of running incident response inside a major health system shape every program: clear roles, tested plans, and decisions made before a crisis forces them.
Areas of Expertise
Fusion Center & Threat Operations
SOC and fusion center design, threat intelligence, threat hunting, incident command, and insider risk, grounded in real enterprise operations at global scale.
Risk, Compliance & Governance
HIPAA/HITECH, NIST CSF 2.0, SOC 2, Zero Trust Architecture, DSPM, and third-party risk management across healthcare and financial services.
AI Governance & AI-Powered Security
AI governance programs built on the NIST AI RMF, and agentic AI workflows designed to cut incident response time (MTTR).
Ready to put this leadership to work for your organization?
Schedule a Free Consultation