This is a profile image of Charlie Lewis

Charlie Lewis

PartnerConnecticut – Darien

Helps leading institutions transform the approach to cybersecurity to protect what matters most and create a secure and sustainable future

Charlie is a partner in McKinsey’s Stamford office who leads strategic cyber transformations for the world’s most iconic brands to help business, technology, and cyber leaders improve digital resilience. Beyond addressing technical controls, Charlie also focuses on the human side of digital risk, designing enhanced organization and operating models to improve operational effectiveness, talent, and development strategies to place the right people in the right roles to address the most critical cyber risks.

With over 15 years of security experience, Charlie serves clients across a range of industries, including banking, technology, and state and local governments. Within banking, Charlie helps clients address regulatory requirements by designing technology and cyber risk organizations and processes.

His recent experience includes the following:

  • designing “second line of defense” technology and the cyber risk organizations and processes for two global banks
  • building an enhanced security capability model based on guidelines from the National Institute of Standards and Technology (NIST), and applying it to design a cyber strategy for a global technology company, which included a talent strategy and risk model
  • designing a cyber risk culture survey to target high-risk user groups with tailored training at multiple companies
  • preparing organizations on how to respond to cyber crises through playbook design and tabletop exercises

Prior to joining McKinsey, Charlie served for over 13 years in the US Army where he worked as an officer dealing with cyber operations, and continues to serve in the Army Reserves as an assistant professor. Additionally, Charlie also contributes his editorial expertise to the Cyber Defense Review journal.

Published work

What should you be asking your team after the CrowdStrike outage?,” McKinsey & Company, July 2024

Cracking the code on enhanced digital and cyber risk maturity,” McKinsey & Company, November 2023

From the military to the workforce: How to leverage veterans’ skills,” McKinsey & Company, November 2023

Building a cybersecurity culture from within: An interview with MongoDB,” McKinsey & Company, October 2022

Creating a technology risk and cyber risk appetite framework,” McKinsey & Company, August 2022

Securing your organization by recruiting, hiring, and retaining cybersecurity talent to reduce cyberrisk,” McKinsey & Company, June 2022

Cybersecurity trends: Looking over the horizon,” McKinsey & Company, March 2022

Organizational cyber maturity: A survey of industries,” McKinsey & Company, August 2021

Building security into the customer experience,” McKinsey & Company, June 2020

Past experience

U.S. Army
Officer, cyber operations, field artillery

The U.S. Military Academy at West Point
Assistant professor, political science

Education

Harvard Kennedy School
MS, public policy

The U.S. Military Academy at West Point
BS, geography, systems engineering