David E. Smith Email & Phone Number

Thousand Oaks, Ca, Us

As a Director of Cybersecurity for Amgen, I oversee the teams that provide endpoint security and data protection for Amgen's operations worldwide. I am accountable for the complete services lifecycle from policy development and vendor selection through implementation and operations. I have received company and industry awards for innovation, automation, and significant cost reductions. Over the last four years, I have implemented over $1.5 million in operational cost reductions against a mid-seven figure budget, while improving service delivery without impacting staffing levels. My endpoint security team uses our EDR and file allowlisting technologies to protect over 50,000 Amgen enterprise desktops, servers, and manufacturing SCADA systems. The endpoint security services support systems running on traditional hardware, cloud services, application containers, and industrial control systems. We respond around the clock to resolve alerts and events, identifying potential threats to Amgen. Thanks to our automation processes and quick response time, we handle over 99.7% of incidents within an hour of being notified. Our visionary approach guarantees that vital manufacturing systems maintain continuous operations.Using machine-learning CASB and DLP technologies, my data security team protects Amgen's data at rest and in motion on both traditional and cloud systems. Our approach toward data challenges is resourceful and dynamic. We strive to find practical solutions for today's challenging data issues, including generative AI and the changing data border of modern business. We are preparing Amgen to address tomorrow's emerging data security risks, such as post-quantum cryptography and external data management.By developing a risk-based focus, my teams have increased detection rates, decreased response times, and recognized significant cost savings while protecting and defending Amgen's mission To Serve Patients.

Mumbai, Maharashtra, In

Out of the three North American Information Security Officers, I was accountable for the security of all aspects of TCS's North American financial services platform line of business. As the information security liaison to clients, I translated the Statement of Work (SOW) requirements to operational processes in the service delivery model. I represented the platform line of business in internal and external audits and developed plans of action and milestones (POA&Ms) to address identified improvements. I participated in pre-contract meetings with future clients to represent the service's security capabilities and negotiated key elements of SOWs for future business. As the United States in-country Business Information Security Officer (BISO), I conducted all security reviews for operations at four sites. These reviews comprised controls such as application development, cryptography, and confidential data handling. Additionally, I conducted physical security reviews of TCS and third-party sites to ensure compliance with SOW requirements and industry best practices. I led the security response team for SOC 2 Type 2 audits by providing supporting evidence of compliance with customer and regulatory requirements. I also coordinated internal audit responses to address controls maturity and incident investigations. I participated in security architecture and design initiatives for innovative automation to improve the speed and accuracy of policy origination processes. Developers submitted some of these processes for patent consideration.

Tampa, Florida, Us

Started a security consulting company focused on helping large organizations in multiple industries improve their ability to protect their business. Worked with organizations including ACT (educational testing), Bloomin' Brands (restaurant), and Jackson Hewitt (tax services) to advise and solve emerging security challenges to support business strategy.- Advised CISOs on governance and risk strategy, implementing global programs, and establishing policies to meet privacy, compliance, and Federal Government regulatory requirements.-Implemented security standards for an external customer website with 1,000,000+ users; Implemented authentication and monitoring controls to detect unauthorized third parties' attempted misuse of customer profile data.- Liaised with HR, Legal, and IT Leadership executives to build awareness and gain support for security initiatives and in the resolution of security incidents. - Provided advisory services, including developing security awareness training for employees, contractors, and business partners. - Built and implemented a comprehensive security governance program, incorporating unified information security policies, configuration baselines, and security operations processes.- Implemented global privacy requirements through policy, architectural design, and executive advisory services to support a consumer services website serving the Americas, Europe, and Asia. - Built a SOC program, including training and managing technical resources (internal and client employees) on security operations, using custom algorithms to provide around-the-clock coverage with minimal staffing. -Increased Security KPI performance from below 70% to over 95% by innovating custom technical tools, including analytics modeling tools, automated reporting and custom scripts to present data in web dashboards.- Architected security specifications for key technical projects, including open-source IAM, Hadoop, unified website redesign, and VPN upgrade.

San Jose, California, Us

Strategist and evangelist working with large and small companies to help them build out worthwhile, effective IT security controls technologies and provide the highest quality risk governance.

San Jose, California, Us

Managed global, matrixed delivery team of information security consultants; developed consulting delivery methodology; Advised executive level clients on strategy and operations of information security programs focused on continuous monitoring and regulatory complaince (SOX, HIPAA, ISO 27000, NIST, COBIT)

The Hague, South Holland, Nl

Originated information security program from inception, including operationalizing and managing security tools. Increased audit performance from worst performing division to best division in 12 months. Executed annual risk assessments, identifying key risks and implementing controls according to financial compliance requirements and business priorities. Wrote the first unified information security policies. Trained and mentored 20 peers at other divisions regarding implementing compliance-driven security programs and appropriate audit documentation. Managed a team of analysts operating SOC tools.

Baltimore, Maryland, Us

New York, Ny, Us

Developed security monitoring and reporting program for 150 Chase Manhattan Mortgage branches nationwide

Bachelor Of Science - Bs, Computer And Information Systems Security/Information Assurance

Undergraduate Certificate, Cybersecurity Policy And Governance

Liberal Arts And Sciences/Liberal Studies