Steven Sacks

Associate Director

  • Americas
  • Digital Risks
  • Security Consulting
  • Information Governance
Steven Sacks is an Associate Director within Control Risks’ Digital Risks Americas practice. In this role, Steve regularly briefs boards, executives and managers on the intersection of digital risk with business strategy and operations. He supports organizations to improve their cyber security management through a wide range of programmatic assessments, policy/governance advisory, regulatory compliance and cyber crisis management exercises.


Steven specializes in providing technology risk, regulatory risk, intelligence and geopolitical risk advisory to executive clients throughout the Americas region. He serves as a cyber risk strategist addressing business impacts posed by new and disruptive threats to critical business functions and operations.

Recent tasks that Steven has worked on include:

  • Led a comprehensive cyber due diligence program for a broad spectrum, venture capital portfolio companies to enhance holistic protection and corporate resilience, informed by the current cyber threat intelligence environment. 
  • Developed and facilitated an annual cyber crisis management exercise program for a multi-national pharmaceutical company, focusing on long-term capacity building and worldwide business resilience. 
  • Served as a virtual Chief Information Security Officer for a global private equity firm, developing a cyber security strategy and governance process to drive programmatic maturity growth and establish an effective baseline for organizational digital risk management.
  • Led a cyber security regulatory working group for a global oil and gas company, working directly with legal counsel to identify and address programmatic digital compliance and legislative risk within the organization’s business operations. 
  • Before coming to Control Risks, Steven spent almost ten years serving in the U.S. Marine Corps as an intelligence officer, where he focused on mitigating nation-state threats to critical technologies and communications. 

    Steven is a Certified Information Systems Security Professional (CISSP), holds a Master of Arts degree in National Security Studies from Georgetown University’s Walsh School of Foreign Service, and a Bachelor of Arts in Government and Near East Studies from Cornell University.

    Get in touch

    Can our experts help you?

    Related articles