David F. Email & Phone Number

Atlantic City, Nj, Us

· Executed an enterprise-wide cybersecurity program framework and drove roadmaps and policies that mitigated risk through the right balance of controls and operational flexibility.· Developed and administered $2M departmental budget in compliance with annual strategic plan.· Provided expertise and consultation around tactical, operational, and strategic activities in support of the CIO’s program initiatives, including secure cloud architecture and healthcare DevSecOps.· Directed IR program for enterprise cybersecurity incident management, reporting, and tracking.· Managed cyber liability insurance program analysis, liability risks, and mitigation measures.· Led team of infosec analysts and engineers.

New York, Ny, Us

· Directed InfoSec Operations capabilities across global, national, and affiliate organizations. · Operational leader for the cloud-first information security program for digital attack surface management, network security, endpoint protection, messaging security, threat alerting/SIEM analytics, and vSOC/MSSP optimization.· Developed and managed $3M annual budget encompassing cybersecurity operations for the national office and affiliates.· Negotiated and managed vendor and business partner contracts and relationships.· Managed a diverse core group of Directors, SecOps Engineers, Cyber Analysts, and MSSP Executives augmented with matrixed resources from business areas, vendor partners, and IT service providers.

Camden, Nj, Us

· Provided senior-level information technology and cyber-risk oversight of due diligence activities on major North American and International corporate divestitures, mergers, and acquisitions.· Updated existing cyber ERM/GRC practices to a fully integrated approach (policy, data governance, exception/controls management) focusing on NIST-CSF, CIS-RAM, MITRE ATT&CK, and FAIR.· Conducted risk reviews of the Campbell’s Microsoft Azure and Microsoft365 Cloud environment focusing on applications, access controls, and levels of authority.

Led IT and InfoSec functions for a $2B multinational venture funded pharma startup with a $12.5M budget for DevOps, Cloud, Mobility, Telecom, EUC/HelpDesk, CASB/DLP, SOC/CSIRT, IAM/SSO/PAM, DR/BCP, GRC/TPA, Data Privacy, and PhySec for facility (HQ/MFG) locations.· Managed Infrastructure, Operations, Security, and Enterprise Architecture teams including technical and service management resources from key managed service partners.· Developed third party assurance (TPA) vendor management program to ensure senior leadership has oversight of vendor/partner performance and emerging information technology risks.

Directed Information Security, IAM, Cyber Risk, and Data Privacy within a dynamic venture backed Pharmaceutical / Healthcare Start-Up organization.· Created DLP classification policies for PII, PHI, Intellectual Property, and other at-risk data types.· Managed data risk assessments, application security reviews, network penetration tests, internal and external assessments of key platforms and vendors.

Philadelphia, Pa, Us

AVP IT / CISO responsible for managing the information protection activities and resources for a $5 billion, 60+ branch multi-state regional bank. Ensure strategic and operational effectiveness of organizational data security and privacy programs through efficient use of internal and third-party resources.· Developed and executed IT security strategies for endpoint, mobile, and cloud data protection.· Led external service provider due diligence and attestation reviews (PCI, STAR, SOC, SSAE16).· Decreased department annual budget by ten percent through security product consolidation.· Directed and deployed customized BCP/DR LDRPS and managed business resumption tests.· Managed incident response CSIRT activities with service providers and law enforcement.

Bloomfield, Ct, Us

Managed corporate information protection activities for a Fortune 100 multinational healthcare and insurance organization. Ensured enterprise compliance with policies and controls responsible for protecting customer, employee, and business information. Key focus areas - CIP Compliance, Design & Architecture Security, GRC, Vendor Assessments, Vulnerability Assessments.· Co-developed CIP secure software initiatives for CIGNA Open-Source Software Working Group.· Managed enterprise and business unit risks based on data classification, architecture/vulnerability assessments, proposed remediation controls, and verified risk closure in Archer GRC framework.· Conducted CIP security compliance reviews for enterprise applications and environments.· Performed external service provider/vendor management compliance activities including SLA evaluations, CIP ESPQ reviews and travel to business partner sites to validate security posture.· Managed infrastructure and application HIPAA-HITECH, PCI-DSS, and SOC2 compliance for myCIGNA.com, Tel-Drug PBM, and CIGNA Hospitals.

Philadelphia, Pa, Us

Managed IT security programs, applications/systems, security products/devices, and privacy controls to protect customer PII and financial information.

Managed Philadelphia office of a national environmental toxic tort litigation support firm. Directed the development, installation, and support of insurance claim management systems and web portals.

Managed multi-property administration of IBM, Bally, and IGT based casino management, marketing, surveillance, security, customer tracking, data collection, and device monitoring systems.

Las Vegas, Nv, Us

Supported national / international casino management IT system installations and conversion projects.

Managed a casino accounting, marketing, surveillance, security and asset management system.