About me
David started full-time at CAS in 2009 and has worked in CAS IT Project Management, IT Collaboration Services, and in leadership roles including IT Service Management (ITSM) Improvement Program Lead, and Disaster Recovery Coordinator. He joined Enterprise Information Security (EIS) in 2018 as a security analyst and designed, built, and leads EIS services for customer security questionnaires, third-party risk management, and the information security risk management program. David also supports security compliance and control requirements for policies, cyber insurance, frameworks, regulations, and assessments.
David has Lean Six Sigma (LSS) black belt training and experience. He is certified by the EPA to handle TSCA Confidential Business Information (CBI). He has professional certifications for PROSCI Certified Change Practitioner (PCCP), ITIL Foundation, Lean IT Foundation, Total HIPAA Privacy and Security Compliance Program, and Open FAIR 2 Foundation (Factor Analysis of Information Risk). He is a member of CIS SecureSuite, Third Party Risk Association (TPRA), The FAIR Institute, The Open Group, and Information Systems Audit and Control Association (ISACA).
