Skip to content
Michael MancusoProduct & technology executive
Projects & case studies

Complex work.
Concrete results.

Product launches, operating-model changes, and complex AI-enabled builds. Explore the business problem, the decisions I led, and what changed.

Built with agents

Product strategy and a repository-based second brain.

Phase 3 Benefits brings eight health, commuter, and wage-law account types onto one payment card. I built a repository-based second brain—product strategy, specifications, verified facts, and agent memory—to keep AI development aligned.

Specification-driven development at platform scale.

Shared FHIR-based contracts coordinated parallel development across clinical, operational, and financial workflows.

Leadership case studies

Showing 6 of 38

Kapitus

Led the implementation of a comprehensive security and compliance framework at Kapitus, leveraging advanced Microsoft security tools and zero-trust principles to significantly enhance data protection and operational resilience.

01

Challenge

As Kapitus expanded, ensuring the security and compliance of its IT infrastructure became paramount. The company faced the challenge of protecting sensitive financial and personal data, meeting regulatory requirements, and adapting to the complexities of remote work environments.

02

Action

To address these challenges, I led the implementation of a comprehensive security and compliance framework built on the principles of zero-trust and leveraging advanced Microsoft security tools. Key actions included:

  • Zero-Trust Architecture: Transitioned to a cloud-first architecture based on zero-trust principles, assuming breach and verifying each request as though it originates from an open network.
  • Microsegmentation and Least Privilege Access: Applied microsegmentation and least privileged access principles to minimize lateral movement within the network, using rich intelligence and analytics to detect and respond to anomalies in real time.
  • Advanced Security Tools: Deployed a suite of advanced security tools, including Azure Sentinel for SIEM, Microsoft Defender ATP for endpoint security, Intune MDM for mobile device management, Azure Information Protection for document classification, and Cloud App Security for monitoring cloud applications.
  • Compliance Framework: Established a comprehensive compliance framework to meet regulatory requirements, including regular audits and assessments.
  • Employee Training: Conducted security awareness training to ensure all employees understood and adhered to security best practices.
03

Results

The implementation of these security and compliance measures led to significant improvements in Kapitus's security posture and operational resilience:

  • Enhanced Security Posture: The zero-trust architecture and advanced security tools significantly reduced the risk of data breaches and unauthorized access.
  • Regulatory Controls: Established security policies, access controls, monitoring, and employee training to support the protection of financial and personal data.
  • Operational Resilience: Improved the organization's ability to detect, respond to, and recover from security incidents, ensuring business continuity.
  • Remote Work Security: Successfully secured remote work environments, enabling employees to work securely from any location.

Questions

What security and compliance challenges did Kapitus face?

As a PE-backed fintech lender handling sensitive financial data for 25,000+ SMB customers, Kapitus needed robust security and compliance measures to protect customer data and meet regulatory requirements.

What security tools were deployed at Kapitus?

A comprehensive suite of Microsoft security tools was deployed including Azure Sentinel for SIEM, Microsoft Defender ATP for endpoints, Intune MDM for mobile devices, Azure Information Protection, and Cloud App Security.

How did the zero-trust architecture work at Kapitus?

The zero-trust architecture assumed breach by default, verifying every request regardless of origin. It used microsegmentation and least-privilege access to minimize lateral movement, with real-time analytics to detect anomalies.

How did the security program support Kapitus's growth?

The security and compliance program enabled Kapitus to scale its lending operations confidently, meeting PE investor requirements while protecting the sensitive financial data of 25,000+ SMB customers.

How was remote work security ensured during COVID-19?

The zero-trust architecture and cloud-first approach enabled secure remote work during COVID-19 — employees could work from any location while maintaining the same security posture as in-office environments.

Need a leader who can
build with AI?

Let's talk about the product challenge, the team, and the outcomes you need—whether you're improving how your business runs or building something new.

Discuss your product challenge Connect on LinkedIn