David is a seasoned risk management professional with a proven track record in designing and leading risk management programs in both highly regulated and unregulated environments. With 20 years of experience, David specializes in implementing risk programs, working across teams and businesses to promote a healthy risk culture, enhancing operational resilience through risk assessments, controls testing and automation, and ensuring compliance with regulatory requirements.At Bloomberg, David was responsible for leading and overseeing our Enterprise Risk Management program (policies & procedures, risk assessment methodologies, independent testing, issue management, risk acceptance, risk reporting, and risk governance), providing 2nd LoD risk management coverage to a variety of product areas and business units, and performing risk & control assessments in a 1st LoD capacity, where necessary. In addition, David was also responsible for the SOC Reporting Program (+20 plus SOC 1s, 2s, and 3s).Prior to David's role leading ERM initiatives, he has led and executed programs relevant to Technology Risk, Information Security, and IT audits. Experiences include: creation of information security strategy roadmaps, managing information security governance programs, performing IT audits and various cyber/InfoSec risk assessments (e.g., NIST framework assessments), and other reviews against various compliance/regulatory frameworks (PCI, GLBA, etc). Understanding of common frameworks and standards include: COSO, DORA, GDPR, NIST CSF, NIST 800 series, ISO 27000 series, COBIT, SOX and Trust Service Principles.