Open to opportunities

Dana Wright

@danawright

Cybersecurity GRC leader at CFGI who delivers client remediation and resilience programs, including NIS2 remediation and BCDR engagements.

United States

Message

At CFGI, I lead BIA and BCDR engagements for clients in insurance, retail, manufacturing, and hospitality. I’ve also built a NIS2 remediation POAM and third-party risk procedures for clients.

At FanDuel Group, I cut monthly security reporting from seven days to two with AI-assisted Power BI workflows and built a catalog of 65+ cybersecurity metrics. I led teams and programs spanning analytics, governance, training, and awareness.

At WarnerMedia, I grew the BISO team from one to 11 and raised compliance with critical security controls by 40%. I delivered a $20M program portfolio on time and on budget, including 20+ concurrent programs during the AT&T alignment.

At Turner Broadcasting, I owned the PCI DSS program and led an enterprise project that removed all cardholder data from corporate systems. I also built a Privacy Operations team, implemented OneTrust, and served as the primary contact for external auditors.

Experience

Work history, roles, and key accomplishments

Current

Senior Manager, Cybersecurity GRC and Data Privacy

Current

CFGI

May 2026 - Present (6 months)

Led BIA and BCDR engagements for clients in insurance, retail, manufacturing, and hospitality. Built a NIS2 remediation POAM, third-party risk SOPs, and a risk rating matrix.

Bias BCDR NIS 2 Third Party Risk Risk Assessment POA&M Policy Development Internal Audit ISO 27001 SOC2 SOC 3 HIPAA NIST CSA Cloud Control Matrix AI Governance

Director of Cyber Insights, Analytics, Outreach, and Governance

FanDuel Group

Aug 2024 - Apr 2026 (1 year 8 months)

Cut monthly security reporting from 7 days to 2 by automating data collection with AI-assisted workflows in Power BI. Built a cybersecurity metrics catalog of 65+ KPIs, KRIs, and contextual metrics to guide executive risk decisions.

Power BI AI Metrics KPIs KRIs Cybersecurity Governance Policy SOC2 Continuous Controls Monitoring AI Governance Executive Reporting Communication Skills

Director of Cybersecurity PMO, Insights and Analytics, Training and Awareness

FanDuel Group

Aug 2023 - Aug 2024 (1 year)

Directed a portfolio of 15+ security programs against budget, schedule, and OKR targets. Implemented a continuous improvement framework for security program delivery.

Program Management Metrics Security Awareness Executive Reporting Risk Management

Vice President and Head of the Business Information Security Office

Warner Bros. Discovery

Sep 2022 - Apr 2023 (7 months)

Led a 12-person BISO office of directors and individual contributors, partnering with the CISO and CTO to apply one cybersecurity framework across lines of business. Reviewed monthly KRI dashboards with executives to reduce residual risk over time.

BISO Leadership KRIs Executive Reporting Audit Risk Analysis Cloud Computing M&A Incident Response Awareness

Vice President of Cybersecurity Client Engagement

WarnerMedia

Oct 2021 - Sep 2022 (11 months)

Led a 12-person Client Engagement division of directors and individual contributors, spanning BISOs, CyberConsult, PMO, Knowledge Management, awareness and training, communications, and CNN Journalist Security. Drove compliance training completion above 80%.

Leadership BISO ServiceNow Compliance Awareness Executive Reporting Risk Acceptability TPRM Application Security Audit Program Management

Vice President of Cybersecurity PMO, Finance, Metrics, and BISOs

WarnerMedia

Jun 2019 - Oct 2021 (2 years 4 months)

Grew the BISO team from 1 to 11 in 2 years to meet business demand. Raised compliance with critical security controls by 40% through gap remediation.

BISO Leadership Compliance remediation Program Management M&A Metrics Automation Finance Risk Acceptability Security By Design Audit

Vice President of IT Compliance, Privacy Operations, and Governance

Turner Broadcasting

Mar 2017 - Jun 2019 (2 years 3 months)

Built a 4-person Privacy Operations team to run GDPR and CCPA compliance. Implemented OneTrust to manage data subject requests and cookie consent across Turner properties.

Privacy GDPR CCPA OneTrust ServiceNow GRC SOX and ITGC Compliance Audit PCI DSS SOC2 TPRM Incident Response Awareness

Director of Compliance and Program Management Office

Turner Broadcasting

Oct 2013 - Mar 2017 (3 years 5 months)

Owned the PCI DSS program for nearly six years across both Turner roles, Oct 2013 to Jun 2019, through annual assessment cycles. Led an enterprise project to remove all cardholder data from corporate systems, shrinking PCI scope and breach exposure.