David Cabral Email & Phone Number

San Francisco, Ca, Us

The Information Security Officer position focuses primarily on enterprise security and risk management optimization initiatives, and aligning practices with LEOs (Law Enforcement Organizations). This role provides expert-level advice for security design and planning of enterprise-wide networks, technology infrastructure, middleware, platforms, cloud based services and applications to ensure appropriate levels of risk.As the key security contact for SFPD, this role acts in an advisory role for security and risk domain expertise and helps planning of enterprise-wide initiatives to ensure appropriate levels of risk while partnering with key stakeholders to create well-defined security solutions in alignment with the overall objectives of securing employee and public/private data according to DOJ requirements/standards.

The IT Audit Manager position is responsible for performing information systems audit work throughout TWP, LLC, including audits of complex financial trading applications and existing or potential technological solutions. Decisions regarding the scope of work performed, nature of testing completed, and the reporting disposition of results are delegated to this position by the Audit Board Committee. This position interacts with departmental leadership during audit projects as well as on a consulting/advisory basis. This position also provides training on identifying high level information system risk to the financial auditors performing evaluations based on COSO / CoBIT standards.

San Ramon, Ca, Us

This strategic position lays the critical groundwork for Chevron’s Corporate Information Protection Program by building consensus, establishing best practices, promoting awareness, preparing business and technology units for compliance projects as well as actively instilling industry best practices and culture to enable solutions that preserve integrity, privacy, confidentiality of the organizations information assets. This role provides oversight of the identification of protection goals and objectives consistent with corporate strategic plan while managing the development and implementation of global security policy, standards, guidelines and procedures to ensure ongoing maintenance of information security.Main responsibilities within the position are the creation and maintenance of the overall security strategy and framework for information protection while setting short term yearly goals and updating long term plans, providing risk assessments, audit remediation, development of evergreen processes, scorecard metrics, preparation for internal / external audits as well as the day to day management of security programs for over fifty global refineries, plants, terminals, distribution centers, data centers, financial systems.

Oakland, California, Us

Responsible for day-to-day information security activities as well as setting future strategies and planning activities at the corporate level. Represent the organization as the Information Security point of contact for the Holding Company (PG&ECorporation) and consult as needed for its subsidiaries (Pacific Gas & Electric, Diablo Nuclear Power Plant). Represent the organization to third parties (auditors, courts, vendors) and government regulators (FERC, Nuclear Regulatory Commission). Manage employees, processes and procedures with the holistic view of the PG&E enterprise.Acted as the key technical contributor to all aspects of development and maintenance of PG&E Corporation’s IT security strategy, guiding the implementation of all security measures to ensure the preservation of the confidentiality, privacy, integrity and availability of information assets and systems. Maintained the privacy and confidentiality of information, protecting the assets of the organization, acting with ethics and integrity, reporting non-compliance, and adhering to the applicable federal, state and local laws and regulations, policies and procedures.

Us

Assessed, designed, implemented and secured enterprise network infrastructures for clients by request. Worked at a leading consulting firm in the computer security space. Supervised project teams of engineers to ensure that the customer’s network infrastructure reflects appropriate risk management considerations. Designed, tested, and managed new solutions and presented findings in report and / or presentation form to clients. Extensive travel to client’s sites or hosted data centers was required in this position.Provided project management, resource allocation and budgeting of projects as well as hands on activities during overall security efforts. These projects assisted clients in the development and evaluation of company-wide security plans, policies, procedures, practices, and security related training. Created profitable SOW and RFP documents for numerous projects. Provided management and technical leadership to California employee base of twelve Security Engineers and four Junior Security Engineers.

Us

Position focused on the security and availability of internally hosted systems as well as non-hosted clients at a managed security provider (MSP). Led a team of IT professionals who, as a cohesive team, engaged in the design, development and administration of critical computing environments using NT and Solaris based servers, Cisco PIX, Checkpoint, and SecureID products as well as custom applications at customer sites. Co-designed the production environment and various aspects of Pilot’s security infrastructure, including planning and conducting regular system and penetration tests, employing the use of tools such as ISS Internet Scanner, Satan, nmap and other proprietary tools.Created and implemented security and privacy policies and SLAs to ensure the privacy and security of sensitive customer data, critically important as the major offering of this security hosting company. Trained application managers, system engineers and network administrators on addressing information security with topics including cryptography, physical security, access control, logging, and general auditing methodologies. Analyzed and resolved application, computer and network security problems and issues, as well as performed security investigations and computer forensic analysis.

Solna, -, Se

AKA: Mindspring / Earthlink

Ba, Management

High School Diploma, Gerneral Education