David Kidd Email & Phone Number

Charlotte, Nc, Us

Chicago, Illinois, Us

Charlotte, North Carolina, Us

• Spearheaded the development and execution of comprehensive GRC strategies, closely aligning them with organizational objectives, regulatory requirements, and prevailing industry trends. Formulated and communicated a clear vision for initiatives, fostering a culture of accountability and compliance awareness at levels of the company.• Created, refined, and managed a robust set of policies and procedures, ensuring a consistent approach to data protection, information security, and compliance adherence throughout the organization.• Conducted thorough and methodical risk assessments, identifying potential threats to information assets, technology infrastructure, and operational processes.• Continuously monitored and interpreted complex regulatory frameworks and programs such as ISO 27001, PCI-DSS, HITRUST (HIPAA), NIST, FISMA, SOC (SSAE 18/ISAE 3402), translating them into actionable compliance measures for the company's operations.• Mentored team members, provided guidance and fostered a collaborative environment that promoted knowledge sharing and innovative problem-solving. Demonstrated strong leadership by building and nurturing a high-performing GRC function, fostering professional growth, skill development, and engagement within the team.• Pioneered and managed the implementation of targeted security awareness programs, leveraging innovative approaches to cultivate a heightened culture of cybersecurity vigilance among employees, clients, and stakeholders. • Regularly interfaced with executive leadership and the Board of Directors, delivering insightful reports on GRC status, key risks, compliance updates, and the progress of improvement initiatives. Collaborated seamlessly with IT, legal, and operational teams, facilitating cohesive and harmonized strategies that balance risk mitigation with business agility.

Charlotte, North Carolina, Us

• Architected and implemented a robust GRC framework, encompassing risk assessments, in-depth control evaluations, and continuous compliance oversight. Adhered rigorously to prevailing regulations, industry standards (such as ISO 27001, NIST, GDPR), and sector-specific best practices, expertly tailored to the intricacies of the IT services and consulting domain.• Collaborated extensively with multifaceted business units to discern, evaluate, and meticulously prioritize risks intrinsic to diverse projects, products, and services. Crafted and executed targeted risk mitigation strategies, shoring up operational resilience and effectively protecting client interests.• Exhibited proactive vigilance in monitoring industry trends, regulatory shifts, and emerging risks, enabling timely strategy adjustments to ensure steadfast compliance. Nurtured robust affiliations with regulatory authorities, external auditors, and influential industry bodies, ensuring seamless alignment with evolving compliance mandates.• Developed and facilitated comprehensive training initiatives, equipping staff with nuanced insights into their compliance roles, ethical obligations, and adept risk management methodologies. Effectively championed an organizational ethos that upheld integrity, accountability, and ethical decision-making, fostering an environment where all personnel felt empowered to make informed and principled choices.• Spearheaded the establishment and maintenance of a comprehensive repository of documentation, encompassing intricate policies, procedures, exhaustive risk evaluations, and compliance records. Expertly harnessed these resources to craft incisive reports for executive leadership and the board, illuminating the organization's robust GRC posture and providing actionable insights for continuous improvement.

Charlotte, North Carolina, Us

• Architected and implemented a robust GRC framework, encompassing risk assessments, in-depth control evaluations, and continuous compliance oversight. Adhered rigorously to prevailing regulations, industry standards (such as ISO 27001, NIST, GDPR), and sector-specific best practices, expertly tailored to the intricacies of the IT services and consulting domain.• Collaborated extensively with multifaceted business units to discern, evaluate, and meticulously prioritize risks intrinsic to diverse projects, products, and services. Crafted and executed targeted risk mitigation strategies, shoring up operational resilience and effectively protecting client interests.• Exhibited proactive vigilance in monitoring industry trends, regulatory shifts, and emerging risks, enabling timely strategy adjustments to ensure steadfast compliance. Nurtured robust affiliations with regulatory authorities, external auditors, and influential industry bodies, ensuring seamless alignment with evolving compliance mandates.• Developed and facilitated comprehensive training initiatives, equipping staff with nuanced insights into their compliance roles, ethical obligations, and adept risk management methodologies. Effectively championed an organizational ethos that upheld integrity, accountability, and ethical decision-making, fostering an environment where all personnel felt empowered to make informed and principled choices.• Spearheaded the establishment and maintenance of a comprehensive repository of documentation, encompassing intricate policies, procedures, exhaustive risk evaluations, and compliance records. Expertly harnessed these resources to craft incisive reports for executive leadership and the board, illuminating the organization's robust GRC posture and providing actionable insights for continuous improvement.

Charlotte, North Carolina, Us

Led initiative to develop Governance, Risk and Compliance organization.Responsible for providing independent, objective assurance and consulting services designed to add value and improve the organization’s operations. Brought a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.Successfully managed the company's internal audit program and compliance activities.Responsible for the development, testing and execution of the organization's disaster recovery and emergency management programs.

Charlotte, North Carolina, Us

Helped guide company from infancy to become an Inc 500 listed company for two consecutive years. Responsible for the overall management of the data center's infrastructure and security of company data centers. Managed multi-million dollar capital projects including construction of new data center facilities and infrastructure upgrades.Developed and enforced guidelines associated with the operation of company facilities and the security of the data centers. Developed all operational documentation and coordinated customer audit activities. Also responsible for the development, implementation, and testing of the company's disaster recovery plan.