David Clutter Email & Phone Number

Lynchburg, Virginia, United States

• Lead planning and execution of cybersecurity and infrastructure audit plan• Assist executive management with the development and execution of the annual IT audit risk assessment• Lead cybersecurity team’s initiative of aligning the organization’s control library with NIST 800-53 standards• Coach various staff on audit methodology and overall technology supporting the enterprise• Serve as subject matter expert for cybersecurity related information as it applies to audit procedures• Supervise the progress and quality of work to ensure that professional standards are maintained in the planning,execution, and reporting of audit projects• Present audit finding to executive level business leaders and functional management as well as consult with them onpossible solutions for identified issues• Work closely with Chief Information Security Officer and his designees to develop viable recommendations to establishand enhance the internal control environment to best suit the organization’s needs• Develop and nurture relationships with key leaders in the technology and risk organization, demonstrating a solidunderstanding of the industry and related technology• FY20 audit engagements include: Governance, Risk Management, Risk Assessment, Supply Chain Risk management,Information Protection Processes & Procedures, Recovery Planning, and Asset Management

Research, analyze, and understand multiple log sources, particularly security and networking devices (firewalls, routers, anti-virus products, and operating systems)Develop, refine, and perform analysis processes to discover new or potential incidents and escalate results to upper managementEmploy Data Loss Prevention (DLP) tools to minimize loss of confidential, proprietary, or PII dataGather and Interpret cyber threat intelligence data to establish and refine defensive controlsInvestigate phishing incidents to determine source, and network impact; and initiate remediation actionsPerform E-Discovery tasks for authorized internal business partners Perform Root Cause analysis and forensic level reviews for security incidentsStay abreast of security issues, emerging threats, and vulnerability alerts; evaluate & recommend actions to protect enterprise networkCreate technical and executive reports that clearly communicate the scope, impact, and recovery of security incidentsUtilize SIEM technology, centralized logging, and log correlationRecommend and implement containment decisions to reduce incident impact to the firm, clients and partnersProvide enterprise architectural design enhancements to improve the TD Ameritrade security postureRecommend updates to business area policies and proceduresComply with and enforce regulatory requirements; escalate events that may impact TD Ameritrade complianceDesigned, built, configured, and implemented virtual lab for malware investigation

Maintained Active Directory, Cisco Network, VoIP, Physical Access, and SurveillanceDefined guidelines and requirements for hardware upgrades and installationsProvided network management, monitoring, performance, and securityConfigured and deployed new firewalls and switchesFrequently used remote access to provide supportIntegrated new and updated systems into current environmentImplemented work tracking and documentation systemImplemented updated point of sale system

Overhauled severely neglected missile warning system; returned to 99%+ reliabilityInstalled, configured, and provided training on Windows and Solaris SystemsInstalled, configured, and maintained production virtual environmentsPerformed routine maintenance on databases and associated storage arraysImplemented, tested, and deployed system wide configuration changesDeveloped, tested, and used disaster recovery protocolMonitored local hardware and logical network for errors/problemsManaged Windows Active Directory user accounts and resourcesPrepared systems for next-version software testingProvided written and oral status reports to superiors and fellow team members

Offutt Afb, Nebraska, United States

• Performed network troubleshooting and component level maintenance on high availability legacy missile warning andemergency action messaging systems• Maintained intercontinental ballistic missile coding system• Acted as global focal point for system information and knowledge• Trained new employees in Online Network Maintenance Center

Master'S Degree, Management / Project Management

Bachelor'S Degree, Computer Information Systems

Associate'S Degree, Military Information Systems Technology