David Coss, Phd, Email & Phone Number

Richmond, VA, US

Frisco, Texas, US

• Lead Cyber Security Governance Engineer, Governance Privacy Risk Compliance Team
• Responsible for developing and maintaining cybersecurity policies in accordance with industry best practices and regulatory requirements such as NIST 800-53/171, SOC1, SOC2, SOX, HIPAA, HITRUST, FISMA/FedRamp, CMMC.
• Establish cadence with Magellan’s Cyber Security Senior Leadership and their teams to mature cybersecurity and data governance policies through an annual review and update process.
• Work with Compliance tower to remediate audit findings through the Corrective Action Plan/Plan of Action and Milestones process by managing the process for cross functional teams to close identified policy and.
• Assist the Risk tower with the risk assessment process by verifying implementation of cybersecurity policies and procedures.
• Collaborate with Magellan’s Business Information Security Officers to ensure cybersecurity policies, procedures and controls are in alignment with client contract requirements.

Virginia State University, VA, US

Conducted academic research in the area Environmental, Social and Governance (ESG) measurement and reporting frameworks. Developed working papers with respect to the importance of including cybersecurity and privacy governance within the ESG reporting frameworks. Developed course material and provided instruction for Business Analytics, Business.

Richmond, Virginia, US

Manage a team of Information Systems Security Auditors. Review and perform information system security audits that support the Commonwealth’s financial audit of its state agencies. Develop audit work papers and audit methods to evaluate the effectiveness of IT controls, processes, policies and procedures versus General Computer Control (GCC) standards and.

Created and performed and managed a NIST CSF assessment across multiple divisions of a large multi-national communication company to identify strengths and weaknesses in current state cyber security practices. Led cyber assessment discovery meetings with stakeholders to understand the unique aspect of cyber security within their division of the.

Charleston, SC, US

The core focus of my academic teaching and research resides at the intersection of accounting, information systems and internal audit. I developed course material and provided instruction for Internal Audit and Forensic Accounting, Cost Accounting, Accounting Information Systems, Financial and Managerial Accounting. I was actively involved with university.

Virginia State University, VA, US

Conducted academic research in the area of information privacy and information security within cloud computing environments. Developed course material and provided instruction for Cost Accounting, Accounting Information Systems, Financial Accounting and Managerial Accounting. I was actively involved with university and college of business leadership.

Richmond, Virginia, US

Conducted information system security audits to support the Commonwealth’s financial audit of its State agencies. This included the responsibility of evaluating the effectiveness of IT controls, processes, policies and procedures versus General Computer Control (GCC) standards and Sarbanes-Oxley IT (SOX) requirements and SEC 501 of the Virginia Code. We.

Richmond, VA, US

Philadelphia, Pennsylvania, US

Responsible for managing resort accommodations, food and beverage, special events and retail operations with combined revenue of 5.5 million. Led a management team of five department managers and 120 frontline employees to a successful year with positive year over year growth. Utilized analytical skills to perform revenue forecasting and expense budgeting.

Chicago, US

Responsible for ensuring gaming compliance for multiple Nevada and international properties. Worked with resort executive management teams to develop best practice procedures. Worked with the property Controllers in developing training programs for accounting staff. Prepared Internal Audit Reports and issued reports to Audit Committee and State Regulators..

London, GB

Senior in charge of performing casino compliance audits for Nevada clients to ensure clients were in compliance with gaming regulations. Performed Currency Transaction Remediation projects for casino industry’s largest companies. Assisted in the asset valuation process of a multi-property acquisition for a mid-market gaming company.

Worldwide, OO

Utilized analytical skills to perform an organizational restructuring for a government agency. Lead a team of six auditors on a currency transaction project that mitigated risk for leading national gaming company. Developed work programs that utilized available system data to increase productivity of audit team. Re-engineered Standard Operation Procedures.

Phd, Business/Information Systems

Mba, Bs, Information Systems, Hotel Administration

Education record