About

Nick DeGaetani

Founder and principal. Security and compliance program builder.

“I build and reinvent security and compliance programs that last and perform.”

I've spent 16 years in GRC, IT audit and assurance, and most of it building programs rather than only reviewing them. Most recently I led security assurance, GRC and internal audit at a digital identity provider, where I was the company's expert on NIST SP 800-63 and identity assurance and owned an integrated audit program spanning commercial, federal and identity frameworks.

Before that I helped lead security assurance at Amazon Web Services, covering FedRAMP, DoD and new Region launches. I started my career at CACI, where I managed CMMI Level 5 process and product audits and worked on security controls and procedures in development, then moved into federal IT audit, information assurance and cyber risk consulting at Cotton & Company, Deloitte and Kearney & Company.

I founded Nihil Obstat Advisory to give growing companies and established businesses the same caliber of program, sized to their stage and tied to the deals it has to close. When you work with me, I'm the one doing the work, with vetted specialists alongside when an engagement needs them.

• 2021–2026 · Security assurance, GRC and internal audit leadership at a digital identity provider
• 2018–2021 · Amazon Web Services, security assurance
• 2016–2018 · Kearney & Company, IT audit
• 2014–2016 · Deloitte, cyber risk
• 2013–2014 · Cotton & Company, information assurance
• 2010–2013 · CACI, CMMI Level 5 process and product audits; security controls and procedures in development