David Broad, Cissp, Cipp/E Email & Phone Number

Toronto, Ontario, Canada

GTA, Ontario Canada

Toronto, Ontario

• Took on newly established Information Security and Audit Lead role with the mandate of improving the Information Security Program and gaining PCI Certification. Additionally, was appointed to lead the Privacy Program.
• Established Privacy Program in line with requirements of GDPR, PIPEDA, and other privacy regulations and legislation.
• Created new Information Security Policy Framework to update old policies and prepare for PCI certification, including the creation of a formal Risk Management framework for the formal tracking of organizational risks.
• Lead the preparation for PCI Certification Audit, and coordinated auditor activities and information requests as part of the audit.
• Presented on Privacy issues at Western Canada Information Security Conference and Identity North conference.

Mississauga

Responsible for a number of key security functions in support of Bell’s business including: negotiating customer contracts and supporting sales initiatives, representing Bell at a number of Government/Industry forums and initiatives for security.

Mississauga, ON

Managed a team of 4-5 Information Security Architects responsible for recommending new technologies and architectures for Bell’s internal and externally facing systems and networks. Established catalogue of approved technologies to provide guidance to Information Technology and Network teams. Responsible for maintenance and development of Information.

Mississauga

Managed a team of project advisors responsible for security governance of Bell customer facing networks, and Bell’s internal Digital Forensics team. Introduced Cyber Threat Intelligence function to Bell in order to anticipate emerging threats and address them proactively. Responsible for liaison with Government and industry partners for cyber security.

Responsible for overall Security Governance for Bell Mobility’s Wireless Network. Managed a team of Security Advisors who advised projects on security and privacy requirements. Recommended and coordinated the introduction of new security technologies for the Technology Development and Information Technology teams. Provided practical solutions for security.