David Webb Email & Phone Number

Waldorf, De

Irvine, California, Us

• Utilized the OneTrust platform, including DSAR (Data Subject Access Requests), Assessment Automation, Incident Response, Data Mapping, DataGuidance and Enterprise Policy Management modules, to perform key Privacy Operations functions• Performed privacy risk assessments (e.g. Privacy Impact Assessments) to understand the Loan Depot risk landscape and recommended mitigation steps for identified risks• Developed action plans to address gaps identified during privacy reviews and worked with business owners to create and implement action plans to resolve issues• Communicated with privacy and security leadership on issues identified during privacy reviews• Managed privacy incidents including coordinating cross-functional resources, incident investigations, creating incident reports, identifying consumer notification requirements, and addressing identified gaps• Responded to Data Loss Prevention (DLP) alerts and triaged events• Regularly performed privacy vendor assessments on new and existing company vendors and provided feedback to the Vendor Management team• Responded to CCPA and GLBA DSAR’s in an accurate and timely manner• Provided CPO with weekly and monthly privacy program metrics and reports• Performed Privacy related access request approvals and additional ad-hoc privacy related tasks as required

Walldorf, Bw, De

• Advanced from a Privacy Analyst to Sr. Privacy Analyst while taking on more responsibilities and becoming a team SME and leader • Monitored and researched global privacy regulations and performed a gap analysis on SAP Concur products, systems, and processes to ensure regulatory compliance• Translated legal regulations and compliance frameworks into technical requirements• Served as the privacy SME on the Security Architecture Review Board (SARB)• Performed technical privacy reviews across SAP Concur products and internal systems to ensure they comply with applicable regulations and best practices • Utilized internal ROPA tool to document systems, tools, and products processing personal data• Worked with the enablement team to create company-wide, annual privacy training courses to educate company employees on data protection topics• Lead the Cookie Consent Manager (CCM) implementation on all SAP Concur websites• Participated in the Policy Review Board as a data protection SME and provided guidance on company policies• Built relationships with and provided consulting for SAP Concur lines of businesses (Product, RND, Marketing, Business Intelligence, etc) to ensure proper handling of customer and employee personal data• Worked with a wide variety of global stakeholders at all levels including Legal, Security, Developers, IT, Marketing, Sales, Business Intelligence, C-suite executives, and other SAP Concur staff• Identified and drove privacy program improvements, including process improvements, tooling requirements, and opportunities to improve data protection at SAP Concur• Responded to Data Subject access requests quickly and accurately• Worked on multiple tasks simultaneously, set priorities, communicated delivery expectations, and consistently met deadlines

Bellevue, Wa, Us

• Monitored and analyzed real-time security alerts utilizing company Security Incident and Event Management (SIEM) tool • Monitored and analyzed DLP alerts via Symantec DLP system• Acted on and investigated security alerts, virus infections, internal security violations, monitored user account activity, escalated incidents, and other security concerns in a timely manner• Performed internal and external vulnerability assessments/scans utilizing Qualys, Nexpose 7, and Nessus scan engines. Worked with internal groups to remediate found vulnerabilities• Administered security systems including Firewall, IDS, VPN, Data Loss Prevention, Web Content Filtering, Encryption, and Security Incident and Event Management (SIEM) tool• Utilized Skybox to perform firewall reviews• Ensured daily compliance tasks were completed and tracked via JIRA ticketing system• Ensured security compliance with company policy, client requirements, technical standards, and best practices

Bellevue, Wa, Us

• Managed, configured, and performed required tasks for day-to-day network administration and change requests for the following types of equipment: firewalls, routers, switches, wireless controllers & access points, load balancers, and VPN devices• Identified and resolved Internet, LAN/WAN, Wireless, Check Point, and VPN related issues on Concur’s global corporate network• Implemented, configured, and maintained company Check Point firewall appliances in corporate data center and at branch offices. Built site-to-site VPN connections from primary data center to global branch offices• Utilized OpenNMS to monitor network devices and respond appropriately to alerts• Worked with multiple Telcos to provision and turn up new Internet and WAN circuits

Dallas, Texas, Us

• Identified and resolved LAN/WAN, Wireless LAN, Firewall and VPN related issues in a mixed PC and Mac environment.• Performed and documented changes to the data center and network infrastructure. Work included new device installations, configuration changes, code upgrades, and hardware repair or upgrades to company routers, switches, firewall, wireless, and VPN devices• Lead multiple network related projects such as upgrading company Cisco VPN solution, upgrading Cisco wireless infrastructure, and migrating outdated IDF Cisco 3548XL switches to Juniper EX-4200 switches