Dave Kania Email & Phone Number

CAREER OVERVIEWMore than 25 years’ experience as an information technology professional who has worked from the bottom to achieve management and leadership roles. This makes me a unique candidate as I can relate with team members as well as work constructively with all levels of management, customers, employees, and vendors. Have thorough understanding of all aspects of the technology stack. Strong expertise in IT management, cybersecurity, governance, risk, and compliance. Successfully demonstrated expertise in establishing and implementing successful information security programs to bridge technical functions with core business operations. Assessing risk, performing evaluations, and selecting teams and tools to protect confidentiality, integrity, and availability of critical business systems. Protecting what matters most by securing sensitive data and critical assets from current and emerging threats. Managing personnel, developing their skills and capabilities to meet the needs of the organization. Management style is defense in depth while functioning with these basic principles – Identify, protect, detect, respond, and recover. None of this can be achieved individually, a manager is only as good as the team that supports these goals. Teamwork is the key to success.QUALIFICATIONS  Cybersecurity – Strategy, Architecture, Identity & Access Management, social engineering, incident detection and response, security operations, and services optimization. Governance, risk, and compliance since 2007 – SOC2, PCI, FDIC, FFIEC, HIPAA, GLBA, SIG.  Third party risk management (questionnaires and assessments both ways). Chaired technology steering committees since 2014. Infrastructure Management – Security, Server, Network, Virtualization, Storage, Database, Telecom Vulnerability management programs – Analize, prioritize, remediate. Standards and frameworks familiar with –NIST CSF, ISO 27001, CIS Controls, MITRE, COSO (Just SOC related). Business impact analysis, business continuity process, incident management, and disaster recovery – Strategy, Design, Implementation.