Dave Williams Email & Phone Number

Melbourne, Vic, Au

Melbourne, Victoria, Au

Commenced as Praemium’s first dedicated Information Security resource. Had an immediate impact in changing the profile of Information Security at all levels of the organisation from frontline staff to executive and Board level stakeholders. While developing the longer term strategy, I was busy uplifting and maintaining the operational secuity toolsets and making technical changes to establish baseline controls.

Geelong, Victoria, Au

Took ownership of Information Security in an immature organisation and built understanding across senior stakeholders while developing a robust uplift strategy and initiating key projects to establish foundational components. Transformed Information Security at GMHBA from a compliance led function to a risk based and objective driven function that empowered the business.Security Transformation✅ Developed and initiated a 3-year Information Security uplift program and obtained Executive and Board approval for internal resources and program delivery budget in excess of $2m.✅ Executed the Information Security uplift program by re-configuring and re-platforming the Information Security toolset to deliver effective technical Information Security controls and reduce risk to within our risk appetite.Risk Mitigation and Information Security Optimisation✅ Significantly influenced Enterprise Risk Management and the Project Delivery Lifecycle to assist in the effective delivery of Information Security initiatives.✅ Re-designed the Information Security Management System (ISMS), including a revised suite of security standards, aligned to CPS234, ISO27001, NIST-CSF and NIST SP800-53.✅ Developed Technology GRC processes and was part of the Technology and Data Leadership Team developing and leading the strategic direction for the Technology and Data group.

Melbourne, Victoria, Au

Acted as the “CISO” for the Corporate Portfolio (that is charged with digitally enabling the >60,000 strong extended workforce across Australia) by providing SME input into projects, minor works and BAU activities regarding information security requirements. Developed practical and achievable solutions to address information security risks in consultation with a wide range of business and technology stakeholders.Secure Solution Development✅ Overcame significant resistance to specific security controls seen as impeding solution uptake through persistent stakeholder education, well-articulated compensating controls and defined risk scenarios.✅ Was the sole Information Security Office representative with responsibility for ensuring corporate portfolio information security controls were implemented to meet Board expectations for information security risk reduction, comply with organisational information security standards and enable the IT strategy for digital enablement.Risk Mitigation and Information Security Optimisation✅ Re-designed the Information Security Management System (ISMS), including a revised suite of security standards, in accordance with NIST-CSF and NIST SP800-53.✅ Decreased the risk exposure of the organisation due to third parties by developing and implementing a prioritised information security assessment process to address a backlog of >9,000 suppliers.

Abbotsford, Victoria, Au

Provided vision and direction to develop a robust, enterprise security strategy to protect the organisation and its customers. Integrated risk management into security operations to support current and future contracts, including real-time prescription monitoring solutions for state and federal government clients. Managed large operating budget.Security Transformation✅ Built momentum by engaging stakeholders and targeting “quick wins.”✅ Built and communicated a convincing case around the importance of information security and worked with staff to balance long-range goals with current rapid market advancement.✅ Coached and influenced staff to prioritise security operations.Risk Mitigation and Information Security Optimisation✅ Designed the Information Security Management System (ISMS), including a suite of security policies and standards, in accordance with ISO27001 and the Australian Government Information Security Manual.✅ Introduced process improvements across Identity and Access Management (IAM) and change management.✅ Established security requirements and started the process of embedding secure-by-design principles into technology development.✅ Implemented a Security Information and Event Management (SIEM) tool and began the process of refining alerts and updating the incident-response process.

London, Gb

Identified needs, presented solutions, and managed end-to-end cyber-security engagements to minimise risk and eliminate vulnerabilities for corporate and government clients. Set priorities, implemented efficient processes, and directed teams in executing deliverables within established timelines. Managed budgets of $500K to $1M.Security and Risk Management✅ Developed and implemented ISMS policies and standards aligned to a specific threat profile and the NIST Cybersecurity Framework for a large utility company.✅ Facilitated workshops to pinpoint IT risks and built an Enterprise IT Risk Register. ✅ Swayed a major retailer to bring their ISMS into ISO27001 alignment via a series of recommendations. ✅ Reviewed the security posture of a national critical infrastructure business. Interviewed stakeholders from C-suite executives to front-line employees, and applied other methods to gather, analyse, and determine the effectiveness of the existing security program. Proposed a feasible remediation strategy.✅ Performed in-depth analysis of a government agency’s information security management approach across ISO27001, COBIT 5 and EY’s cyber program management methodology.✅ Proposed information management improvements for a large-scale manufacturer and federal government agency.Team Building, Leadership, and Advancement✅ Delivered projects on budget and on time—resulting in repeat and extended, multi-year engagements.✅ Achieved target revenue in FY18 through skillful utilisation management.✅ Earned fast-track promotions from graduate to consultant, senior consultant, and manager—advancing through the ranks in 36 months.

Built and directed all operations of this start-up arboricultural and environmental consulting business providing advice and guidance to public and private land managers.Established a team of scientifically focused experts and support staff to provide efficient, knowledgeable service. Managed stakeholder relations.✅ Created highly customised tree risk assessment and management frameworks/strategies based on the distinct needs and variables of different properties/urban areas.Planned and executed projects to assist hundreds of clients in understanding and resolving environmental issues, council requirements, and other challenges.✅ Delivered presentations at TreeNet and other forums on urban tree management. Presented a scientific paper on mathematical models for tree population management at Melbourne University.✅ Installed, managed, and supported the technology infrastructure to create a reliable, secure business foundation.

Sandringham, Victoria, Au

Provided strategic planning and risk assessment for the council’s tree population. Directed maintenance of 70,000 trees in road reserves and public parks—including 15,000 planned projects for the city, 5,000 resident requests, and up to 2,000 plantings each year. Built relationships with stakeholders in government and the public.✅ Embraced accountable, transparent financial management while managing multi-million-dollar annual budget.✅ Reduced risk and improved quality by implementing standard auditing procedures.✅ Developed the tree management strategy—approved and endorsed by the council—by effectively balancing the demands of elected officials, residents, environmental groups, and contractors. ★ This strategy was recognised by the 2010 Independent Board of Enquiry into Management of Trees on Public Land, established by the State Executive Committee of the Local Government Association (LGA) of South Australia.

Performed in high-risk position that required diligence, endurance, and attention to detail. Evaluated sites and used a variety of equipment to dismantle, hedge, and remove trees and stumps. Achieved flawless safety record.

✔ Managed infrastructure, planting, grazing/mineral leases, safety, and operations of large pine and eucalypt plantation estate. ✔ Supervised staff and up to 200 contract employees. ✔ Managed $8M budget, $90M in assets, and maintenance of >100km roads per year. ✔ Provided OH&S and fire risk assessment and mitigation, including incident response. Served on the team sent to the 2003 alpine fires—credited with saving the town of Bright.

Master Of Applied Science (Information Security And Assurance), Information Security And Assurance

Master Of Urban Horticulture, Arboriculture

Graduate Diploma Of Horticulture, Arboriculture

Bachelor Of Forest Science, Forest Science

Bachelor Of Science, Botany & Ecology

Vce, Vce