Looking for a job

Daniel Trunk

@danieltrunk

Message

Cybersecurity leader specializing in GRC, vCISO services, NIST CSF, TPRM, and executive advisory.

United States

Message

What I'm looking for

I’m seeking a cybersecurity leadership or advisory role where I can help organizations strengthen security programs, manage risk, and align cybersecurity with business goals. I’m passionate about governance, risk management, security strategy, vCISO services, and executive engagement.

I am a cybersecurity and risk management professional with more than 9 years of experience helping organizations strengthen their security posture, manage risk, and align cybersecurity programs with business objectives. Throughout my career, I have led security assessments, governance initiatives, third-party risk management programs, compliance efforts, cybersecurity strategy development, and executive advisory engagements for organizations across both the public and private sectors.

My expertise includes vCISO services, cyber risk management, security program development, policy and standards creation, audit support, vendor risk management, security maturity assessments, and executive reporting. I enjoy working with senior leadership teams to transform complex cybersecurity challenges into practical, business-focused solutions that improve resilience and support organizational growth.

I am particularly interested in cybersecurity leadership, governance, risk management, security strategy, and helping organizations build scalable security programs. I thrive in environments where I can bridge the gap between technical teams and business stakeholders while driving meaningful improvements in security and risk management.

Outside of work, I enjoy staying current with cybersecurity trends, emerging technologies, leadership development, sports (hockey and golf especially), and spending time with family. I am always interested in opportunities where I can contribute strategically, solve complex problems, and create lasting value for organizations.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Consultant

Current

CISO Global Inc.

Sep 2023 - Present (3 years 1 month)

Serve as vCISO for a portfolio of clients, advising executive leadership on cybersecurity strategies and leading NIST CSF 2.0 assessments end-to-end. Manage cyber supply chain risk programs and support government agencies with NIST 800-53 control evaluations.

VCISO Advisory NIST CSF NIST 800 53 Third Party Risk Management Security Assessment and Authorization (A&A)Gap Analysis Policy and Governance Development Project Management Stakeholder Communication

Senior Consultant

Baker Tilly U.S.

Apr 2022 - Sep 2023 (1 year 5 months)

Developed and executed third-party risk management strategies and contributed to audit programs and IT control assessments. Evaluated control effectiveness against industry frameworks and delivered executive-ready reports.

Third Party Risk Management Vendor Assessment Contract Review IT Audit Control Assessment Risk Quantification Regulatory Compliance Business Continuity

Senior Information Security Analyst / Information Security Analyst

ACA Group

Apr 2019 - Apr 2022 (3 years)

Supervised associates and mentored the team on best practices while advising clients on risk findings. Owned phishing and vishing campaigns and conducted gap analyses against COBIT, NIST, and SANS frameworks.

Phishing Campaigns Vishing Gap Analysis COBIT NIST SANS Vendor Due Diligence (SIG CAIQ)Security Policies Training Materials

Information Security Operations Analyst (Intern)

Federated Investors

Mar 2017 - Mar 2019 (2 years)

Reviewed third-party applications against cybersecurity standards, performed weekly vulnerability scans, and managed privileged access controls for sensitive systems.

Vulnerability Scanning Privileged Access Management Third Party Privacy Review Security Standards