Dave Bergh Email & Phone Number

Texas, United States

Plano, Tx, Us

Scope: Fortium Partners is the leading global provider of technology leadership services, focusing on CIO, CTO, and CISO roles. Fortium redefines the traditional approach to technology leadership with its innovative Technology Leadership-as-a-Service (TLaaS) model, offering scalable, on-demand executive expertise. This allows organizations to access strategic, high-level technology guidance without the long-term commitment of a permanent hire.Responsibilities:• Strategic Leadership for SMBs: Provide tailored cybersecurity solutions that safeguard against emerging threats and support SMB growth.• Cybersecurity Audits: Identify vulnerabilities and improve organizations' overall security posture, enhancing resilience.• Compliance Oversight: Drive adherence to cybersecurity regulations, minimizing risk exposure and strengthening audit readiness.

Blucora was the parent company of Avantax and TaxAct, serving consumers and tax professionals. Avantax offered tax-focused wealth management through 3,200 partners, while TaxAct provided affordable digital tax solutions. Blucora divested TaxAct in December 2022 and Avantax in November 2023.Key Achievements:• Risk Reduction & Data Protection: Reduced security incidents by 30% through a tailored cybersecurity roadmap, securing 104M+ tax records and over 3,200 broker-dealer business units.• Enhanced cybersecurity posture by enhanced cybersecurity measures by addressing technical debt across eleven network domains, ensuring strong protection of sensitive data and improving resilience against evolving threats.• Managed acquisition integration risks and integrated over 20 acquisitions annually into Avantax's security framework, ensuring consistent protection of sensitive data and alignment with organizational security standards.• Third-Party & Vendor Risk Management: Established a comprehensive third-party risk program that minimized vendor-related vulnerabilities and reduced overall remediation time by 30%.• Regulatory Compliance: Developed policies and controls for FINRA, NYDFS, SOX, IRS, and PCI DSS compliance, safeguarding legal and financial interests.• Enhanced Application Security: Initiated a program based on OWASP Top 10 guidelines that integrated SAST and DAST tools into CI/CD pipelines, achieving a 30% reduction in code vulnerabilities in software-as-a-service (SaaS) environments.

Plano, Tx, Us

Scope: Fortium Partners is the global leader in technology leadership services, specializing in CIO, CTO, and CISO roles. Their Technology Leadership-as-a-Service (TLaaS) model offers organizations scalable, on-demand expertise without the commitment of permanent hires, delivering strategic technology solutions.Key Achievements and Responsibilities• GRC Assessments & Compliance: Led compliance efforts for FINRA, NYDFS, SEC, and IRS by conducting security audits and enhancing organizational resilience. Provided Data Protection Officer (DPO) services to help organizations align with cybersecurity standards and manage privacy risks.• Risk Tolerance Alignment with Stakeholders: Collaborated with senior leadership to define risk tolerance levels, ensuring the security program aligned with business objectives while balancing regulatory and operational requirements.• Conducted security assessments using the NIST framework and recommended strategic risk mitigation.• M&A Cybersecurity Support: Advised on cybersecurity due diligence during mergers and acquisitions, strengthening negotiation leverage and ensuring protection post-acquisition.• interim CISO roles: As interim Chief Information Security Officer, ensuring continuity and regulatory compliance during organizational transitions.

Key Achievements and ResponsibilitiesAs a fractional CISO consultant, I partnered with business stakeholders and cross-functional teams to identify and mitigate PCI, GDPR, and data privacy risks while ensuring compliance with local, state, and federal laws. My work involved aligning security practices with business objectives, providing strategic security guidance, and implementing mitigation strategies for evolving threats.Key Achievements and Responsibilities• Conducted Governance, Risk, and Compliance (GRC) assessments, including evaluations for the General Data Protection Regulation (GDPR). Provided strategic guidance on regulatory compliance to enhance organizational resilience and ensure alignment with regulatory standards. • Performed DPO services, supporting organizations with cybersecurity alignment and privacy risk management. Risk Tolerance Alignment with Stakeholders: Collaborated with senior leadership to define risk tolerance levels, ensuring the security program was aligned with business goals while balancing regulatory and operational needs.