Steven R. Combs

Co-Founder & Managing Director

Steven R. Combs

LinkedIn: linkedin.com/in/stevenrcombs/

Email: scombs@cochatechnology.com

Phone: (281) 842-2431

Fractional CIO/CISO with 30+ years of enterprise IT and security leadership, delivering hands-on technology strategy and execution for mid-market companies at critical inflection points. Steven specializes in enterprise-scale transformations that others defer: M&A divestitures affecting thousands of users with zero downtime, enterprise AI deployments with governance frameworks that actually work, and cybersecurity program buildout from the ground up.

At BDO USA, Steven directed full-lifecycle technology strategy for a Global 2000 manufacturer divestiture spanning 9,000 users across M365, Azure, and identity infrastructure — delivering complete separation with zero business disruption while maintaining full compliance. He led enterprise Microsoft Copilot deployment for 1,700 users at a large ERP firm, building the governance frameworks and Purview data policies that enabled safe AI adoption at scale. He also migrated three enterprise data centers into Azure AVS for a global logistics company, consolidating 2,000+ servers and eliminating on-premises infrastructure while maintaining full business continuity.

Steven brings deep hands-on expertise in Microsoft 365 and Azure architecture, data governance and DLP at scale, enterprise AI governance across multiple platforms, and incident response leadership. His work across law firms, energy companies, financial institutions, and PE-backed manufacturers has shaped his understanding of how technology decisions translate into measurable business outcomes — cost discipline, risk reduction, and competitive advantage.

He holds certifications in Varonis, Check Point, FinOps, and Microsoft 365 security, with CISSP certification expected May 2026.

Specialties

Microsoft 365 Security & Governance
Data Access Governance
Cloud Security Architecture
M365 Conditional Access & MFA
Zero Trust Implementation

Enterprise AI Governance
Microsoft Copilot Deployment
AI Readiness Assessment
AI Data Policy & DLP
Incident Response & Threat Hunting

FinOps for Cloud Environments
Compliance & Data Residency
SOC 2 & CMMC Readiness
M&A Divestiture & Migrations
vCISO Services