Kevin Mangano ▶ Arcade mode
Chief Digital & Marketing Officer

Kevin Mangano

Executive leader across IT, Cyber, Digital, AI and Marketing. 20+ years of delivering business results and transformation.

Sydney, AustraliaLinkedInGitHub

About

Executive technology and marketing leader with more than 20 years across financial services, higher education and global banking. I run IT, cyber, digital, AI and marketing as one connected function: the platform, the risk, and the customer-facing channels that sit on top of it. Recent work includes designing and building Nectaria, an in-house multi-agent AI platform for mortgage brokers; cutting IT operating cost by 65% over four years; and taking a brand to #1 across social platforms in its sector. A people-focused leader who builds high-performing teams through a positive culture: empowering individuals, encouraging collaboration, and developing skills and creativity. A customer-focused relationship manager, hands-on when it matters, and a direct communicator with boards, regulators and engineers alike.

Outside work: Cricket · Rugby · Squash · Guitar · Bass · Didgeridoo · Fishing · Film editing and production

Capabilities

IT Strategy

Strategic planning and implementing IT operation frameworks, technology transformations, technical architecture, enhanced support models, strategic roadmaps, and policies and controls for emerging IT trends. Managed enterprise IT infrastructure, cloud, Windows and Linux server, virtualisation, networking, storage, voice, and data centres.

  • Strategy
  • Architecture
  • Cloud
  • Infrastructure
  • Data centres

Artificial Intelligence (AI)

Expert-level knowledge and application of AI technologies: design, development, and implementation of agentic AI applications, AI agents, and multi-agent platforms with shared memory and data infrastructure. RAG, CAG, agentic AI, infrastructure as code, GitHub automation, CI/CD into Cloudflare, Azure, and Google Cloud Platform. Expertise in using Claude, Claude Code, Gemini, ChatGPT, Groq, Mistral, and Microsoft Copilot.

  • Agentic AI
  • RAG
  • CAG
  • MCP
  • Claude & Claude Code
  • Gemini
  • ChatGPT
  • Groq
  • Mistral
  • Copilot
  • IaC
  • CI/CD

Cybersecurity and Technology Risk

Experienced CISO and cybersecurity architect. Designed and implemented cybersecurity technology, processes, and controls to enhance cybersecurity maturity in highly regulated businesses. Highly skilled at cybersecurity architecture, enterprise architecture, cyber operations, cyber incident response, threat modelling, and cyber awareness training. Adept social engineer.

  • CISO
  • Security architecture
  • SOC
  • Incident response
  • Threat modelling
  • ISO 27001
  • CPS 234
  • Technology risk
  • Awareness

Marketing and Digital

Omni-channel marketer with a technical focus. Lead generation, web, social, video and podcast production, SEO, and digital marketing optimisation.

  • Lead generation
  • Social
  • Video
  • Podcast
  • SEO
  • Brand

Financial Management

Financial management of P&L, cost control, budget forecasting, CAPEX/OPEX, and financial reporting.

  • P&L
  • Cost control
  • Forecasting
  • CAPEX/OPEX

Program Management

Delivering large, complex technology and cyber programs. Skilled in time and task management, Agile, Scrum, and PRINCE2 methodologies. PRINCE2 certified.

  • Agile
  • Scrum
  • PRINCE2
  • Cyber programs

Experience

Yellow Brick Road Home Loans

Sydney
  • Chief Digital & Marketing OfficerMar 2024 – Present
  • Chief Digital & Risk OfficerSep 2023 – Mar 2024
  • Chief Digital OfficerMar 2023 – Sep 2023
  • Chief Information OfficerMar 2022 – Mar 2023
  • Executive leader across multiple remits including IT, Marketing, Legal and Compliance, Sales and Operations across Yellow Brick Road, Vow Financial, and Resi Mortgage Corporation. Managing several teams, up to 30 staff.
  • Working directly with Mark Bouris, the YBR Board, and the Audit & Risk Committee. Supporting the business strategy and outcomes, ASX, ASIC, and regulatory requirements. Balanced scorecard, KPIs, and risk management.
  • Business and digital transformation across the complete IT remit, supporting the re-architecture of IT services, cyber security maturity, and the operating model.
  • Legal, risk management and compliance, and technology risk. CISO for the business and network. Involved in regulatory and industry reviews and audits.

Achievements

  • Designed and implemented a multi-agent agentic AI platform, “Nectaria”, for mortgage brokers: agent runtime, RAG, CAG, agentic workflows, shared agent memory (NoSQL), vector database, SSO, MCP, AuthZ, API, and data warehouse integration. Developed in-house with internal staff.
  • Supported the FY24 business restructure that saw YBR record profits in the following years through business reorganisation, cost rationalisation, and technology innovation.
  • $2.1m in savings and over 65% reduction in IT OPEX budget in 4 years, through a combination of insourcing from managed service providers, reducing and refining technology investments, and offshoring.
  • 35% increase in digital marketing lead generation while delivering over 5% reduction in Marketing OPEX budget.
  • #1 brand across social media platforms (Facebook, Instagram, TikTok, YouTube) for the sector, growing over 150% in 3 years on established platforms and over 2000% on emerging platforms.
  • Launched the “Property Insights” podcast with Mark Bouris to #1 on YouTube and podcast services for the sector.
  • Brand marketing: launched digital mortgage brand Y Home Loans and rebranded Vow Financial to YBR Aggregation.

Rabobank

Sydney
  • Head of Security and Support Services APACMar 2020 – Mar 2022

Managed 3 teams covering the Security Operations Centre APAC, Identity Management, Technology Risk, and IT Service Management for over 1,200 APAC staff, with 24/7 support for a 48,000-person global bank.

  • Cyber security operations centre: frontline incident response, monitoring and alerting for critical systems including online banking, CRM, and financial systems, as well as threat intelligence and digital forensics.
  • Identity management: access and account lifecycle across the bank, access control system design, recertification, privileged access management, and audit.
  • Technology Risk line-1 risk function: incident and issue management, risk and control framework design and implementation, control assurance program, risk and control assessments.
  • IT service management service owner for service strategy, transition, operations, and continuous improvement.

Achievements

  • Led the global cyber maturity and uplift program for APAC for compliance with the ISO 27001 and TIBER frameworks. Re-designed the IT risk and control framework across APAC, implementing control assurance and metrics in RSA Archer and achieving the first Audit pass in the region's history.
  • Regulatory recertification for CPS 234 and CPS 220, and development against CPG 235. Blue team lead for the CORIE attack-simulation pilot for Australian financial services with APRA and the RBA.
  • COVID-19 crisis management: successfully managed a fully remote team, cultivating a strong, open, and positive culture to support staff through lockdowns and remote working.

Aussie Home Loans

Sydney
  • Senior Manager, Cybersecurity and Technology RiskJul 2018 – Mar 2020
    • Responsible for building and maturing the cybersecurity operations and technology risk function and capabilities for 1,700 head-office staff and brokers.
    • Led cyber awareness and training, marketing, and executive briefings, increasing staff awareness and resilience to phishing, major data breaches and vulnerabilities, and cyber safety for staff and their families.
    • Cybersecurity operations, incident response, monitoring and alerting for critical core systems including online banking, CRM, and finance systems. Penetration testing and ongoing vulnerability management, scanning and hardening.
    • IT security framework and technology risk management: policy, risk and control libraries, control assurance testing. Third-party risk assessments for technology architecture, services, and suppliers, including security architecture reviews and risk analysis.

    Achievements

    • Established the cybersecurity operations, incident response, and technology risk function at Aussie from scratch. Implemented the first cyber program for 1,700 head-office staff and brokers, lifting cyber maturity to meet CBA bank standards as the first cloud-native subsidiary to achieve compliance targets.
  • Senior Manager, Infrastructure ServicesApr 2016 – Jul 2018

    Responsible for all aspects of infrastructure management and support services, managing 2nd and 3rd level infrastructure support across server, data centre, network, and cloud technologies.

    • Cloud transformation of complex IT solutions to Azure, involving strategic planning, enterprise architecture, design, and implementation.
    • IT service management service owner for service strategy, transition, operations, and continuous improvement.
    • Financial planning, forecasting, and budgeting for CAPEX ($4M) and OPEX ($3M).
    • Agile project management (Scrum, Kanban), Scrum master and product manager.
    • 3rd level support for Azure, Azure DevOps, Power BI, AWS, and Microsoft 365. Linux and Windows server infrastructure, data centres, storage, backup, VMware, DNS, Active Directory, and telephony.
    • Enterprise application support for online banking platforms, Exchange, SharePoint, LAMP, and the Atlassian suite.
    • Vendor management and support, relationship and contract management.

    Achievements

    • Built an infrastructure operations team and moved outsourced IT infrastructure to the cloud (Azure) and internal support, saving 50% in OPEX and headcount required.
    • Transformed 90%+ of IT systems to the cloud, including cloud-native SaaS and PaaS, and hybrid IaaS solutions.
    • Recognised and awarded for cloud transformation projects including new online banking platforms, CRM migration, and a new business intelligence platform.
    • Implemented a new ITSM strategy for the insourced IT operational model.
    • Implemented enterprise monitoring and alerting, improving system uptime and availability by 5% and reducing outage downtime by over 30 minutes on average.

Oriel Technologies / Superloop

Sydney
  • Service Delivery ManagerMay 2015 – Apr 2016
  • Delivery of IT services and relationship management for a diverse range of clients as their IT service provider, across B2C and B2B models: IT software and services, real estate and construction, government, manufacturing, higher education, financial services, and superannuation.
  • Managing complex service contracts including fully managed IT services, infrastructure, network, cloud services (IaaS, PaaS), applications, and desktop services. Proactive service improvement, strategic planning, and service-level reporting.

Achievements

  • Awarded the group employee of the month award for the deployment of a services and reporting portal for new and existing customers.

University of Technology, Sydney

Sydney
  • IT Infrastructure Manager, SystemsSep 2010 – Mar 2015
    • Managed a team of 15 server administrators providing 3rd level infrastructure support to enterprise systems for 35,000 users.
    • Strategic planning, enterprise architecture, capacity, infrastructure standards, system maturity, system and network security hardening and consolidation, saving over $150,000 per year.
    • Server infrastructure and data centres: Unix/Linux and Windows servers, storage, backup, archiving, VMware, DNS, OpenLDAP, Active Directory, messaging services, and Microsoft 365.
    • Financial planning, forecasting, and budgeting for CAPEX/OPEX. Portfolio development, prioritisation and budgeting for core technology infrastructure.
    • Program management and project delivery: time, resource, and risk management. PRINCE2, Agile, and Scrum.
  • Service Desk Manager, IT Support CentreSep 2008 – Sep 2010
    • Managed a Service Desk team of 12 providing 1st and 2nd level support to 35,000 users.
    • Financial planning, forecasting, and budgeting. Performance management, training and staff development.
    • IT Operations Manager secondment, managing 23 staff across desktop support and server administration.

UBS AG

Sydney (US regional support)
  • Service Desk Team LeaderDec 2007 – Sep 2008
    • Managed and coached a 1st and 2nd level support team of 25; technical training and mentoring.
    • Primary escalation point for US regional support, part of 24/7 global support for 80,000 employees including front-office traders and corporate users.
  • Service Desk Deputy Team LeaderSep 2006 – Dec 2007
    • Supervised IT service provisioning for the US Regional Service Desk of 20 staff.
    • Mentoring and coaching staff, monitoring team KPIs, and service level reporting.
  • IT Services CoordinatorApr 2006 – Sep 2006
    • Managed IT service provisioning for the investment banking trading floors in the US region.
    • Relationship management with regional business managers and IT support teams.
  • Service Desk AgentApr 2005 – Apr 2006
    • General support: hardware/software, desktops, printers, scanners, and mobile devices.
    • Troubleshooting a wide range of IT issues and handling business-critical escalations with 2nd/3rd level support teams.

Personal Projects

cooldeals.ai (opens in a new tab)

Website · Australian retail deals
Founder and Solo Developer · 2025 – present

Designed, built and maintain a $0-operating-cost full-stack web solution for an Australian retail deals website that automatically collects sales and discounts from thousands of retailers and presents them in one searchable place. Designed the end-to-end automation behind it: retailer emails, deal feeds and a nightly automated browser sweep of retailer sites feed AI pipelines that extract, verify and publish each deal to the site. AI output is tightly controlled, and a secondary AI agent reviews the evidence each night through a quality escalation ladder. The platform also posts a daily “top deals” card to Instagram and Facebook and monitors itself, alerting me if any scheduled job fails. System design, deployment and maintenance.

Web
  • Astro
  • Preact
  • Tailwind
  • Cloudflare Pages
Automation
  • n8n
  • GitHub Actions
  • CI/CD
  • Dependabot
  • Database
  • Email
  • Playwright
  • APIs
  • Discord
AI
  • Groq Llama 3.x
  • Google Gemini
  • Claude Code agents
  • AI output controls
Infrastructure
  • Proxmox
  • Ansible
  • Semaphore
  • Cloudflare Zero Trust
  • Cloudflare Pages Functions
  • PostgreSQL
Social automation
  • Instagram Graph API
  • Facebook Graph API
  • Cloudflare R2

Cool Notes (opens in a new tab)

Chrome extension · Chrome Web Store
Founder and Solo Developer · 2026 – present

A private, on-device AI Chrome extension for web content extraction. Integrated with Google Docs and Google Drive for multi-document content storage and logging, personal notes, and automated RSS information, with whole-of-document AI summarisation.

Extension
  • TypeScript
  • React
  • Vite
  • Chrome Extensions MV3
AI
  • Chrome built-in AI (Gemini Nano)
  • Claude Code agents
Integrations
  • Google Docs API
  • Google Drive API
  • OAuth2
Tooling
  • fast-xml-parser
  • EasyMDE / CodeMirror
  • Vitest
  • ESLint
  • GitHub Actions
  • Dependabot

Bright Sparks Home Energy (opens in a new tab)

Website · brightsparkshomeenergy.com
Web Application Lead Developer · 2026 – present

Designed, built and maintain a $0-operating-cost full-stack web solution for an independent Australian home-energy consultancy. The site runs a two-stage customer journey: intake forms each feed an automated backend that notifies the consultant, logs the enquiry and sends the customer a branded acknowledgement with a reference number. Designed a five-layer anti-abuse and security model for the forms, set up a browser-based content management system so the consultant can publish articles without touching code, and had the whole thing independently security reviewed against OWASP and NIST guidance. Hosted entirely on serverless infrastructure with automatic deployments.

Web
  • Astro
  • Tailwind
  • Cloudflare Pages
Backend
  • Cloudflare Pages Functions
  • Cloudflare KV
  • n8n
  • Database
  • Gmail
Infrastructure
  • Proxmox
  • Ansible
  • Semaphore
  • CI/CD
Security
  • Cloudflare Zero Trust
  • Turnstile
  • JWT API
  • Rate limiting
  • CSP and HSTS
  • OWASP and NIST review
Content
  • Decap CMS
  • GitHub OAuth
  • Markdown content collections
Tooling
  • Node test runner
  • GitHub Actions
  • Dependabot
  • Claude Code agents

website-audit-tool (opens in a new tab)

Open-source project · GitHub
Author · 2026 – present

A repeatable, scriptable website-audit pipeline. Eleven stages cover discovery (robots, sitemaps, crawl), DNS and RDAP, TLS (Qualys SSL Labs), security headers and vulnerability scanning, reputation (urlscan.io), responsive screenshots across viewports, SEO and indexability, accessibility (WCAG via axe-core plus contrast checks), Lighthouse performance, and multi-page regression. Evidence lands as machine-readable artifacts that an AI coding agent synthesises into a client-ready report.

Packages
  • Python
  • Bash
  • httpx
  • nuclei
  • whatweb
  • Playwright
  • shot-scraper
  • Lighthouse
  • axe-core
AI
  • Claude Code
  • AI coding agents
Integrations
  • Qualys SSL Labs
  • urlscan.io

Media Centre

In the News

Video

Podcasts