Gabriel David Email & Phone Number

Canada

• Deployed a repeatable playbook for onboarding other organizations during Mergers and Acquisitions.• Collaborated with the organization’s Legal department to incorporate new informationsecurity requirements from applicable legal/regulatory changes into contracts.• Interfaced with global IT and business partners to provide information security guidanceand support.• Documented and reported control failures and gaps to stakeholders/control owners.• Provided remediation guidance and prepared stakeholder reports to track remediationactivities.• Evaluated and reported any security/compliance risks to track as part of the company’srisk register.• Consulted on developing security standards, procedures, and controls to manage risks.

Maryland, United States

• Supported the GRC program and the global Information Security Management System(ISMS) ensuring sustainable compliance practices across the company.• Evaluated and monitored compliance to the company’s IT controls, policies andstandards• Performed gap assessments, mapped and maintained common controls framework andcontrol scope/applicability for a portfolio of compliance audits.• Facilitated and coordinated numerous ad hoc and periodic internal/externalassessments, audits, and certifications, such as vendor assessments by key customers,ITGC and SOC 2 audits, and ISO 27001 certification.• Assisted in driving vendor security risk assessment program using the approved 3rd-party risk assessment tool and supported the vendor due diligence process.• Supported the implementation and ongoing management of the enterprise ITGovernance, Risk, and Compliance solution to enhance the company’s risk managementand risk reporting/tracking capabilities.• Supported the development and maintenance of the company’s global risk register andsupported risk treatment planning, monitoring, and reporting processes.