Technology you can trust. Compliance you can prove.
Since 2016, MarkTillson has helped organizations in Dallas and across the country design, secure and evidence the technology their business depends on.
One firm for the systems you build, the controls you run and the auditors who check both.
Most organizations buy technology from one firm, compliance from another and testing from a third, then spend months reconciling what each of them said. MarkTillson brings the three together: technology consulting, compliance and cloud security engineering, delivered by one senior team that answers for the whole result.
Our clients are banks, payment companies, SaaS and AI providers, healthcare groups, public bodies and operators of critical infrastructure. Each answers to someone: an auditor, a regulator, an enterprise buyer or an attacker. We make sure the answer holds.
- Years in business
- 10
- Founded in Dallas, Texas
- 2016
- Defined service lines
- 35
- Specialist practices
- 3
“Every control we touch should survive the hardest question anyone will ever ask of it.”
Lola Osoba founded MarkTillson in 2016 on a simple standard: security work is only finished when it can be proven. As a Certified Information Systems Auditor and a Certified Information Security Manager, Lola built the firm around both halves of that promise: engineering that works, and evidence that convinces.
Three practices. One standard.
Every practice runs the same lifecycle, the same quality review and the same standard of evidence.
01 · 12 service linesFinancial Services Security & CompliancePayment security, interbank messaging and operational resilience for institutions that move money.Explore
02 · 12 service linesAI Governance, Cloud & Digital TrustGovernance for artificial intelligence, assurance for cloud services and the attestations customers ask for.Explore
03 · 11 service linesOffensive Security & Enterprise ResilienceAdversarial testing that finds what matters, and the resilience disciplines that keep the business running.Explore
What we are, and what we refuse to be.
We are
- Practitioners who do the work ourselves
- Engineers who build the controls that auditors later test
- Specialists in compliance, cloud security, AI governance and offensive testing
- Prepared to tell a board what it needs to hear
We are not
- A reseller of security products
- A firm that inflates findings to sell remediation
- A volume shop that staffs senior engagements with juniors
- A checklist exercise dressed up as assurance
Inside MarkTillson.
Our StoryTen years from one Dallas practice to a full-service firm.
LeadershipLola Osoba, CISA, CISM, and the senior team behind every engagement.
Our Expertise & CredentialsThe credentials and frameworks behind our work.
Our ValuesThe standards our clients hold us to.
Our ApproachDiscover, Assess, Remediate, Validate, Sustain.Meet the people who will do the work.
Your first call is with a senior practitioner, the person who will lead your engagement.