Mr. John Bates CISSP, CCSP
Senior Manager, Assurance - Technology Risk, Ernst & Young LLP
John G. Bates is a cyber leader within the Assurance, Technology Risk practice at EY. He has counseled clients on cybersecurity matters for over 15 years, with experience in highly regulated industries, including financial services and healthcare. He has conducted enterprise cyber and AI governance assessments for several Fortune 500 companies, utilizing NIST CSF 2.0, CMMC , ISO 27001, ISO 42001, HITRUST, NYDFS, NIS2, and CCPA cyber audit. He has significant hands-on experience building and improving cyber programs, including multi-year enterprise cyber transformations. By blending technical rigor with pragmatic legal guidance, he helps organizations mitigate emerging risks and harness Responsible AI for sustainable growth.