David Haley Email & Phone Number

Frisco, Tx, Us

Dallas, Tx, Us

Given responsibility to manage newly formed Cyber Privacy, Risk, and Compliance group reporting directly to CISO. Extensive career experience, knowledge of various security frameworks, and legal education allows me to fill a unique role to bring numerous disparate fields together to tackle difficult privacy and security challenges.Manage a team and provide mentorship to engineers covering a range of topics including cyber security audit and compliance, data privacy, and gap remediation project management and tracking. All while still providing architectural and engineering guidance where needed throughout the Cyber Security group.

Dallas, Tx, Us

Managed a small group of engineers to tackle a number of issues and projects across the organization covering Cloud Security (AWS & Azure), Zero-Trust, Endpoint / Mobile Device Management, and a number of product and due diligence assessments.Additionally, provided input and guidance for a number of audits or compliance engagements including SOX, SOC1, SOC2, ISO27001 and PCI-DSS.

Dallas, Texas, Us

As a Member of the SMU Cyber Advisory Council, collaborate with thought leaders and experts in cybersecurity to assist SMU in the development of curriculum and programing. Advisors share news, industry trends and forecasts to inform the development of initiatives, special events and learning opportunities for cybersecurity professionals and students.

Plano, Tx, Us

Work with Alkami CISO to research, evaluate, and make recommendations on a number of security-related products including next-generation anti-virus, incident detection and response agents, log management, SIEM, and MSSP offerings. Work shifted to implementation of these tools while also providing feedback with candidate selection to grow the security team from two to five.While not directly responsible for their implementation, I provided guidance to other team members in the selection and implementation of patching, single-sign on, and firewall configuration and compliance monitoring solutions. I also work across multiple groups discussing topics ranging from infrastructure, to network engineering, and application security.All this is undertaken to not only ensure the security of our corporate environment, but also vital infrastructure as we transition from a traditional data center offering to one where all assets are located within Amazon’s cloud offering.

Savannah, Georgia, Us

Work with internal groups to develop, implement, and monitor processes and procedures to ensure that the TMX Finance IT organization meets or exceeds all of the security, audit, and compliance requirements, including PCI and SOX. Other responsibilities include (1) understanding security vulnerabilities and threats to advise groups inside and outside of IT concerning risks and how to best mitigate them; (2) implementing internal controls; (3) regular testing of implemented security; and (4) defining, monitoring, and investigating security incidents.

I work with Compliance and Infrastructure to monitor and maintain PCI DSS certification, and collaborate with Compliance on ISO 27001/27002 audit leading to re-certification as well as follow up audits. This includes remediation of all Risk Treatment Plan items assigned, providing any needed responses relative to Compliance findings, and assisting in the preparation and re-certification of PCI DSS. I work with other members of Enterprise Security to develop and coordinate effective infrastructure operations (i.e. – Security Dashboard, ticket generation / resolution-tracking,​ etc.).Responsibilities include Barracuda (email spam and malware detection) and Symantec DLP administration, tracking of all RSA two-factor tokens, LDAP accounts, and all certificates and encryption keys currently deployed throughout the enterprise. Through my programming/scripting background, I provide for data aggregation and process efficiency through task automation and integration.In 2014, I was awarded two company awards for my efforts, one being the highest available within the company for my efforts to increase Security’s efficiency through task automation and scripting.

Irving, Texas, Us

Implemented application vulnerability assessment suite. Empowered users through migration of standalone deployment to an enterprise-wide, self-service process.Responsible for vulnerability management and remediation programs. Refined storage and processing of vulnerability data allowing for more meaningful data to be gathered while reducing time and effort.

Columbus, Ohio, Us

Support a variety of audits (PCI, SOX, etc.) and assessments (e.g. - OCC).Update information security policy and supporting documentation. Track and report quarterly on security incidents.

Irvine, California, Us

Provide support, technical and operational, in the setup and use of a host-based security suite implemented across various Department of Defense organizations.Coordinate schedules and delegate assignments to team members. Provide a single focal point for schedule and status inquiries acting as liaison between between various teams and groups on project.

Oversee the update of all systems with authorized software, patches. Ensure remediation of noted security issues and compliance with the Information Assurance Vulnerability Assessment.Oversee threat and vulnerability assessments, validating all systems comply with security requirements. Maintain computer access control records. Review and evaluate security impact of system changes.Responsible for task allocation and dissemination of CSD information to all team members. Functioned as liaison between DoD personnel and CSD. Track all work hours and leave to ensure proper coverage for current duty assignments. Made certain team members received deserved recognition and provided guidance and discipline when needed.

Columbus, Ohio, Us

Create and maintained user accounts across enterprise for Active Directory, VPN, and UNIXAssisted administration of centralized logging solution.Oversaw encryption key project.Automated redundant tasks through the use of Perl.

Engineered Linux cluster to replace outdated systems used for business-related tasks.Setup and maintained Nagios for better monitoring of system and network resources.Evaluated Snort IDS for possible use in monitoring for suspicious activity.Provided support to employees with computer or software related issues. Assisted network engineer where needed.

Assembled and configured iDirect satellite equipment. Wired office buildings, racked, and configured all server and Cisco equipment (routers, switches, IP phones, and WAPs). After site deployment, provided 24x7 on-site support for equipment and employees.Implemented various security auditing and monitoring tools (e.g. - Zabbix, Ntop, nmap).Setup Snort IDS to evaluate effectiveness and possible use on future projects.

Maintained iDirect satellite equipment. Provide technical support for equipment and to personnel as needed.Travel to remote sites as needed to build or repair other iDirect deployments.

Juris Doctor (J.D.), Law

B.S., Computer Information Systems

A.S., Network Administration