David B. Email & Phone Number

•Manages application security assessments on a wide range of IT products, including Web Applications, Web Services, Mobile Applications, Thick Clients and Infrastructure Interfaces•Works closely with project teams to ensure adequacy of deployment plans and priorities of remediation•Oversees and participates in managing the secure development training of all developers•Oversees and participates in managing the SDLC Security Requirements Management system.•Periodically demonstrates the services and results offered by the application security vendors to the internal stake holders

Houston, Texas Area

• Continuously identify, assess, measure and monitor information technology risk by performing independent hands-on risk assessments. Includes both in house systems and vendor based solutions covering Information Security, Business Continuity and compliance risk.• Perform security risk assessments for potential vendors, business partners and service providers.• Perform application security risk assessments for internal and external applications as required.• Maintain broad knowledge of best practices and trends in the field of Information Security and Business Continuity.• Identify, mitigate and report on known vulnerabilities.• Work with business and IT groups to identify, classify and protect digital assets.

Houston, Texas Area

Compliance Analyst II (August 2014 - January 2015)• Preparation and maintenance of NERC CIP related Procedures• Assisted IT Operations with execution of compliance-related tasks for NERC CIP. • Participated in the development, implementation, and maintenance of company compliance efforts which cover procedure updates, evidence gathering and management, and tracking of requirements and reporting established by external agencies.• Researched new and emerging regulatory activities affecting the company and update impacted business groups and Senior Management as needed.IT Internal Auditor I & II (December 2012 - August 2014)• Executed risk-based audits on plant and corporate systems, infrastructure, and processes.• Managed Information Technology related audits. • NERC regulatory compliance.• Performed SSAE16 reviews.• Prepared detailed documentation and recommendations of audit findings.• Actively participated in the IA Team Building committee.• Assisted with NERC-CIP compliance activities.• Content manager for Internal Audit’s SharePoint portal.• Interacted with all levels of management.