An engaging and charismatic leader, David has over 19 years of experience in technology risk management, mitigation strategies, compliance assessments, and navigating complex regulatory requirements. For the past 11 years, David has specialized in coaching, mentoring, and leading teams to develop cyber risk management capabilities aligned with enterprise business objectives. Combining strong technical expertise with the ability to build trust with stakeholders across multiple departments, David has delivered significant impact in risk management, governance, and the evolution of controls to meet the ever-changing needs and risk appetite of businesses. He has also spoken at and championed innovations in risk management at several conferences, including the National GRC Conference hosted by the Institute of Internal Auditors (IIA) and the Information Systems Audit and Control Association (ISACA). David is also a big fan of GRC engineering and a firm believer in the awesome power of people coming together to solve problems.