Looking for a job

David Anderson

@davidanderson3

Message

I build cybersecurity programs that reduce risk and strengthen resilience.

United States

Message

What I'm looking for

I'm looking to lead security strategy, GRC, risk reduction, and resilient security operations in a regulated environment, partnering with executives and technology teams to turn security priorities into practical business outcomes.

I've built and led cybersecurity programs across regulated organizations, from serving as CISO at RoadSafe Traffic Systems to delivering vCISO and assurance advisory services at Agio and Anderson Consulting. At RoadSafe, I reduced security incidents by 65% while managing a $9.5M security budget and a 25-person organization.

At Mathis Home, I built enterprise GRC capabilities, reduced technology risk by approximately 40%, and drove the Palo Alto network vulnerability risk score to zero. I also teach cybersecurity at Rose State College, developing hands-on curriculum in reverse engineering, network forensics, virtualization, and Security+ preparation.

Experience

Work history, roles, and key accomplishments

Current

Adjunct Professor, Cybersecurity Department

Current

Rose State College

Sep 2019 - Present (7 years)

Develop and deliver cybersecurity curriculum in Reverse Engineering, Network Forensics, Virtualization, and Security+ preparation. Mentor students through hands-on security labs and applied risk analysis.

Reverse Engineering Network Forensics Virtualization Security+

Infrastructure and Security Manager

Mathis Home

Mar 2023 - Sep 2026 (3 years 6 months)

Built enterprise GRC capability from the ground up, including policy library, data governance, and vendor-risk processes aligned with NIST CSF and CIS Controls. Led infrastructure and security teams, reducing organizational risk by approximately 40% and implementing MFA, Zero Trust, and AI security controls.

GRC NIST CSF CIS Controls Vulnerability Management MFA Zero Trust Conditional Access Delinea Crowdstrike Rapid7 InsightIDR Microsoft 365 Azure Event Hub AI Security

vCISO, Cybersecurity Consultant, and PCI QSA

Agio

Jan 2018 - Mar 2023 (5 years 2 months)

Served as vCISO and security advisor to regulated organizations, leading security strategy, risk assessments, and incident readiness. Led PCI DSS, NIST CSF, HIPAA, SOC 2 assessments and supported HITRUST activities.

vCISO PCI DSS NIST CSF HIPAA SOC2 HITRUST Risk Assessment Incident Response Readiness Cloud Security

vCISO and Cybersecurity Consultant

Anderson Consulting

Jun 2011 - Jan 2018 (6 years 7 months)

Delivered vCISO, security architecture, governance, risk, audit-readiness, incident-response, and compliance advisory services to regulated enterprises, including healthcare organizations.

vCISO Security Architecture Governance Risk Audit Readiness Incident Response Compliance

Chief Information Security Officer (CISO)

RoadSafe Traffic Systems

Jan 2005 - Jan 2011 (6 years)

Established and led the enterprise cybersecurity program, reducing security incidents 65% while managing a $9.5M security budget and a 25-person direct organization. Directed security operations, incident response, vulnerability management, and compliance.