David Dekker Email & Phone Number

Juno Beach, Fl, Us

London, Gb

Rockville, Md, Us

Performed a SCADA security assessment for a water utility. Developing a utility-focused consulting practice.

Chicago, Il, Us

Responsible for OT cyber security and compliance across the SCADA, Field Operations, and Physical Security Teams.• Created PHI’s NERC CIP-005, CIP-007, CIP-009 and CIP-010 compliance programs with roles, interpretations, and evidence expectations. Transitioned PHI programs from Version 3 to Version 5 months ahead of the required compliance date. • Transitioned PHI to Exelon compliance programs and tools. Performed the lead change agent role to move PHI to Exelon processes and tools across OT.• Participated in three NERC audits. Performed internal program verification audits. Lead the annual cyber vulnerability assessment.• Expanded log collection, patch management, and malware protection to remote substations.• Harmonized the compliance processes across operating areas including evidence, tools and cycles. Maximized operating efficiencies and common tools. • Implemented key security controls including procedures unification, risk assessments (including a FMEA), forms automation, virtualized field devices, and security tools including several SIEMs, NAC and Vulnerability Management. • Formalized the change and configuration management programs within OT. Implemented baseline management with Tripwire.• Served as the EMS Functional Lead role. Reviewed and approved all security and compliance related SCADA activities.• Managed the security and compliance aspects of two SCADA replacement projects in 2018.

Washington, Dc, Us

Responsible for OT cyber security and compliance activities within the Field Operations Team.• Architected security standards for a common OT network across PHI’s multiple regions. • Designed a formal OT security architecture and implemented the associated tools and enhancements.• Supervised a team to automate, collect, and document NERC compliance. • Created a secure FML (Field Maintenance Laptop) that was authorized for use in CIP protected areas.• Worked directly with the engineering and field operations teams to implement security best practices across the smart grid, substations automation, and the supporting data networks.

Washington, Dc, Us

Responsible for the Security Program, Enterprise Architecture, and Vendor Management for IT.• Managed enterprise licensing, vendor management and related renewal functions. Saved more than $100k in 2010 through active contract management.• Documented and enhanced PHI’s IT security program and related policies.• Utilized external security services, Software as a Service (SAAS) solutions, and outside partnerships.• Led a matrixed team to review PHI’s Smart Grid Security Program. Performed a security architecture review, a NIST SP 800-53 gap analysis, and a partner security review. Scoped requirements for formal product security testing.• Formalized the NERC CIP compliance program for IT. Performed PHI’s first NERC Cyber Vulnerability Assessment.• Responsible for MSSP services, internal security event correlation (SIEM), security assessments, risk assessments, secured wireless deployment, vulnerability management, and secure coding practices.• Directed IT research including analyst briefings and new technology initiatives.

Washington, Dc, Us

Responsible for security architecture and program development, vendor management, setting technology priorities and maintaining the IT Business Plan.• Reported directly to the CIO in support of IT security and enterprise architecture strategies. Managed the budget and labor resources for technology projects and IT security services. Prepared the annual IT Business Plan which aligned the IT projects to the business priorities and industry technology trends.• Implemented security services including security assessments, risk assessments, secured wireless deployment, vulnerability management, security awareness, incident response, malware protection, and security event management.• Managed new technology initiatives including: SOA, ITIL, Open Source Strategy, WEB 2.0, and Identity Management.• Accomplished merged infrastructure, tested the disaster recovery plan, and adopted standard software and hardware life cycles. • Engineered the technology frameworks for corporate desktop, servers, and web hosting. • Responsible for enterprise licensing, IT vendor management, and related renewal functions.

Washington, Dc, Us

Responsible for IT operations including server, desktop, messaging, Help Desk, application integration, and application development.• Managed a team of 16 engineers to design and perform these IT Services.• Designed and implemented a three-year infrastructure enhancement project to expand IT services to 16 company locations. • Established Pepco’s IT Security Policy and Acceptable Use Guideline.• Responsible for Disaster Recovery planning and testing. This included maintaining BIAs, and implementing an DR platform.• Responsible for storage management and backup / recovery services including the development of a redundant SAN across distributed locations.• Implemented centrally managed desktop and application services. • Launched the IT Help Desk to provide timely end-user support.• Performed IT Vendor Management duties including procurement oversight, asset management, maintenance renewal, lifecycle management and software licensing.

Master'S Degree, Information Security Engineering

Master Of Science - Ms, Computer Science

Bachelor Of Science - Bs, Computer Science

Bachelor Of Science - Bs, Business Marketing