Nicholas Davis 🔑 🔒 Email & Phone Number

Verona, Wi, Us

Milwaukee, Wi, Us

• Develop, implement, and maintain comprehensive cybersecurity, risk, and privacy policies, processes, and controls for MTS technologies and solutions. This includes ensuring alignment with applicable laws and regulations.• Own and manage responses to cybersecurity posture questionnaires and client-required privacy information requests.• Lead the technical development and operational deployment of a bespoke AI-driven response generation framework, utilizing natural language processing (NLP) and machine learning (ML) to interpret, analyze, and address cybersecurity inquiries with accuracy.• Collaborate strategically with regional and global IT security teams on policy development, posture assessments, customer communications, and incident response protocols.• Champion the development and execution of the global Komatsu cybersecurity strategy, ensuring alignment with MTS business objectives.• Lead the creation and ongoing management of privacy programs for MTS technologies and solutions, encompassing data governance across all locations and jurisdictions.• Partner in the development of CR&P training programs for employees and contractors, fostering a culture of security and privacy awareness within MTS and the broader Komatsu organization.• Advocate for and promote the CR&P program to MTS engineering teams and Komatsu stakeholders, ensuring alignment with business goals.

Madison, Wi, Us

• Lead a large and diverse cybersecurity team in the development, implementation, and monitoring of a comprehensive enterprise-wide information security and risk management program and roadmap, with a focus on protecting sensitive healthcare data.• Provide strategic guidance and consultation to executive leadership and technical leads on security issues and threats, including malware, ransomware, phishing attacks, and data breaches, that are specifically relevant to the healthcare industry.• Drive and influence software and infrastructure security across the organization, including penetration testing, vulnerability assessment, and security awareness training, to protect patient health information (PHI).• Guide the technical development of security tools and product features to reduce security risk, such as firewalls, intrusion detection systems, and encryption, appropriate for the high availability operating environment.• Proactively identify security issues and potential threats using threat intelligence, security analytics, and machine learning, to protect against targeted attacks.• Provide strategic risk guidance and consultation for corporate IT projects, including the evaluation and recommendation of technical standards and controls, such as ISO 27001, HIPAA, and PCI DSS.• Identify, track, and communicate detailed metrics and reporting indicating overall security risk factors, such as the number of security incidents, the cost of security breaches, and the compliance status of the organization, with a focus on meeting HIPAA requirements.• Align the program with NIST 800-53, HIPAA, PCI, and other industry standards and frameworks, such as the Center for Internet Security (CIS) Controls, to ensure compliance with healthcare regulations.• Promote a culture of strong information security, increasing overall awareness and compliance with security policies and procedures, to protect the confidentiality, integrity, and availability of PHI.

Brussels, Be

• Served as contracted external subject matter expert in information security, evaluating and monitoring European Commission Horizon 2020 and Horizon Europe funded projects.• Conducted independent written evaluations of MSCA-ITN projects.• Served as Project Monitor, tracking the progress of funded projects and ensuring that they met their objectives.• Reported on progress to the European Commission.

Columbia, Maryland, Us

• Develop and deliver engaging CISSP and CCSP boot camps at PhoenixTS, equipping individuals with the knowledge and skills to excel in information security.• Guide students through comprehensive curriculum aligned with (ISC)² exam objectives, covering critical security domains and best practices.• Leverage real-world experience and industry insights to create a dynamic learning environment that fosters critical thinking and practical application.• Prepare candidates for successful completion of challenging certifications and advancement in their cybersecurity careers.

Madison, Wisconsin, Us

• Led and collaborated with internal stakeholders to ensure compliance with industry frameworks, system security plans, internal policies and standards, software deployment, change control, contractual and regulatory requirements.• Anticipated, assessed, and mitigated operational, third-party vendor, and compliance risks from current and changing business practices, systems, policies, regulations, and laws using threat intelligence, security analytics, and machine learning.• Prepared briefings and executive-level reports for the Board of Regents, Internal Audit, Risk Management Committee, and CIOs on cybersecurity risks and mitigation strategies.• Oversaw the risk register, risk exceptions, metrics, reporting, and the management of identified risk, remediation action plans from IT audit, technology risk assessments, vulnerability scans, penetration testing, etc.• Coordinated information security internal audit and external audit responses, regulatory, GLBA and SOX reviews representing information security and technology risks. Coordinated responses to RFI/RFPs and client security related questionnaires.• Led the development, education, and adherence of change management processes to effectively ensure proper review and approval within defined service-level metrics.• Led the negotiation and renewal of cyberliability insurance.

Madison, Wisconsin, Us

• Led the development and implementation of a comprehensive cybersecurity program for UW System institutions, including the development of an enterprise security framework based on NIST 800-53 guidance, working with campuses to deploy security controls and ensure compliance with policies, serving as a central point of contact for information security budget items and external vendors, and leading a security assessment team that conducts risk assessments and vulnerability testing.• Developed cloud systems information security procurement standards and acted as a centralized contact and communication point for IT Security issues.• Provided opinions to senior legal counsel on information security matters • Led the University of Wisconsin Technology and Information Security Council.• Managed and trained security staff, by leading the creation of position descriptions, conducting the interview process, performing candidate selection and the hiring of information security analysts, including onboarding, short- and long-term work assignments, performance management, career development, and overall direct supervision.• Evaluated, acquired, and implemented ongoing cloud based measured phishing awareness campaigns, serving 77,000 UW faculty and staff, across all campuses.

• Provided SME advisory services to enhance enterprise cybersecurity readiness using the FFIEC Cybersecurity Assessment Toolkit.• Assessed cybersecurity inherent risk profile and maturity of technical, administrative, and physical controls.• Developed a control crosswalk document aligned with NIST 800-53 control families.• Produced a gap analysis and roadmap of next steps to bridge current state to desired level of maturity.• Produced due diligence evaluation reports on third-party subservice providers.• Presented current state of cybersecurity to the bank’s Board of Directors.• Developed cybersecurity maturity action development plan, including new technology deployments, risk mitigation activities, and supporting policies and procedures development.• Created and delivered in-person information security awareness and compliance training to all employees.• Performed a comprehensive hardware and software inventory of the bank’s IT assets, including asset risk assignment.• Developed, populated, and managed a comprehensive online hardware and software asset inventory tracking system for the bank.• Compiled a complete set of information security policies in support of the bank’s information security program.• Acted as the bank’s information security representative, during its annual audit exam from the State of Wisconsin Department of Financial Institutions.

Columbus, Ohio, Us

• Built an ISO 27001 standards based cybersecurity program that included a written risk assessment and information security policies to address how the company detects cybersecurity events, identifies risks, and how policies and procedures are executed, to prevent unauthorized access to consumer and company personally identifiable information (PII) and other mission critical data. The cybersecurity program developed was designed to comply with the New York Department of Financial Services Cybersecurity Regulation 23 NYCRR 500.

Madison, Wi, Us

• Taught the following topics in formal, semester long, 3 credit course, at UW-Madison:Introduction to Visual Basic and .NET Framework, getting familiar with Visual Studio, event procedures, properties, and controls, variables and data types, assignment and arithmetic operators, comparison and logical operators, control structures, loops and arrays, procedures, helper forms, menus and toolbars, error handling and prevention

Madison, Wi, Us

• Taught the following topics in formal, semester long, 3 credit course, at UW-Madison:Security trends, risk management, access control, security architecture and design, physical and environmental security, telecommunications and network security, cryptography, business continuity and disaster recovery, legal, regulations, compliance and investigations, application security, operations security, cloud security, bring your own device (BYOD) security, the Dark Web.

Madison, Wi, Us

• Led the implementation of a campus-wide digital certificate program that included dual factor authentication, email encryption, and electronic document signing.• Managed the day-to-day operations of the program, including requirements gathering, authoring of RFPs, system design, deployment, and implementation.• Negotiated with vendors and developed system solutions that met the needs of the campus community.• Authored help desk documentation and provided end user training.• Promoted the campus PKI service to faculty, staff, and students.• Led efforts to secure organizational infrastructure associated with personal digital certificates, software code signing certificates, and SSL certificates.• Used Qualys to perform periodic vulnerability/patch assessments of servers on the UW-Madison campus.• Developed an asset inventory of SSL web server certificates in use across the campus environment.• Represented the UW-Madison digital certificate initiative in higher education at the national level.• Hosted the First Annual Educause PKI Deployment Forum at UW-Madison.• Identified and promoted opportunities to expand usage of digital certificate and other related security technologies throughout the UW-Madison campus.• Analyzed, defined, and documented security requirements for sensitive FERPA and HIPAA related data, in transit and at rest.• Prepared and delivered presentations, demonstrations, and proof of concept prototypes for data encryption solutions deployed throughout the campus community.• Documented IT Security controls and processes for securing the enterprise.• Periodically assessed controls and processes for compliance with the security program.• Coordinated IT Security audit efforts with the State of Wisconsin Legislative Audit Bureau, Internal Audit, and external auditors as needed.• Identified threats and vulnerabilities, and then provided recommendations to address and mitigate risks.• Led campus-wide information security awareness program.

San Ramon, California, Us

• As a subject matter expert (SME), assisted GE Digital in creating a cybersecurity skills framework that describes and categorizes the desired skills and learning paths for GE's cybersecurity employees.• The framework includes earning paths in specialty cybersecurity areas, based on tasks, knowledge, skills, and abilities (KSAs), as well as internal and external relevant certifications, and knowledge of appropriate government and industry standards.• The framework is designed to support GE's Predix system needs and covers proficiency levels for beginner, intermediate, and advanced cybersecurity positions.• The formal document deliverable provides a common roadmap of skills, knowledge, and expertise required for cybersecurity job performance and career advancement within GE.

Fitchburg, Wisconsin, Us

• Provided Phoenix Nuclear Labs with cybersecurity consulting services, including operational, tactical, and strategic recommendations.• Developed a comprehensive cybersecurity framework based on NIST 800-53 to help ensure the security of the enterprise's proprietary information.• The framework provided guidance on cybersecurity strategic direction, tactical management, operational data protection methods (such as data encryption), employee security awareness, and disaster recovery.

Madison, Wi, Us

• Provided Facility Gateway Corporation with information assurance consulting services, including operational, tactical, and strategic recommendations.• Developed a comprehensive security plan based on NIST 800-53 to help ensure the technical, administrative, and physical security of a managed data center facility.

Madison, Wi, Us

• Provided strategic guidance and applied tactical skills in the implementation of information security systems and associated controls, for internal and customer use, including encryption, authentication, regulatory compliance and system event monitoring solutions• Provided advice for PCI DSS and HIPAA compliance initiatives, including the development, authoring, and vetting of corporate information security policies and procedures• Researched competitive security providers, new security technologies, and pursued potential security partnerships, enabling new value-added service solutions • Created and delivered an in-person HIPAA compliance training module for employee education, as part of the overall security awareness program

Milwaukee, Wi, Us

• Taught the following topics in formal, semester long, undergraduate level course, at Cardinal Stritch University:Electronic funds transfer, digital supply chain management, internet marketing, online transaction processing, analysis and application of payment card industry (PCI) standards, electronic data interchange (EDI), inventory management systems, automated data collection systems

Madison, Wi, Us

• Taught the following topics in formal, semester long, undergraduate level course, at MATC:Legislation, local, state and federal privacy regulations, liability of individuals and institutions, related to data confidentiality, integrity and availability, risk management, security policies, common threats and countermeasures.

Madison, Wi, Us

• Provided cybersecurity-minded guidance to senior management on the implementation of a digital signing solution for mortgage loan applications, with the goal of enhancing the security and efficiency of the credit union's lending process.• Consulted with senior leadership on the benefits of digital signing, including its ability to improve compliance, reduce fraud, and speed up the loan approval process.• Modeled potential solutions for upper management and assisted in the preparation of a request for information (RFI) to vendors.• Produced recommendations and next steps for organizational leadership, with a focus on ensuring the security and reliability of the digital signing solution.

Madison, Wi, Us

• Directly managed and delivered mission-critical network system security projects, with a focus on identifying and mitigating vulnerabilities.• Developed and implemented technical, administrative, and physical controls to protect corporate servers from cyberattacks.• Held primary technical responsibility for enterprise-wide remote user authentication systems, ensuring that only authorized users had access to corporate systems.• Managed the corporate PKI digital certificate system and dual factor hardware token-based RADIUS authentication system, providing strong authentication and access control for users.• Designed, planned, and implemented a corporate PGP secure data transmission and management system, enabling secure data exchange with external business partners over the Internet.• Authored standards and procedures for the integration of PGP data exchange with external business partners, ensuring that data was exchanged securely and in compliance with corporate security policies.

Middleton, Wi, Us

• Provided a wide range of general corporate IT support, with a focus on information technology (IT) infrastructure and applications.• Provided remote access support, ensuring that users had secure access to corporate systems and applications.• Supported Microsoft Office applications, helping users to use them effectively and efficiently.• Supported the mainframe, ensuring that it was running smoothly and that users could access critical data and applications.• Provided help desk telephone support, resolving user issues in a timely and efficient manner.• Provided desktop support, installing and configuring hardware and software, and troubleshooting problems.• Supported custom applications, ensuring that they were developed and maintained in accordance with IT standards and best practices.• Repaired and upgraded hardware, keeping systems up to date and running smoothly.• Performed basic ABAP programming in SAP, developing and maintaining code that was efficient and secure.

Mba, Information Systems

Ba, French Language

Ba, Journalism

High School Diploma, General Studies