Open to opportunities

David Johnson

@davidjohnson1

Message

Senior GRC analyst with 20 years' experience delivering PCI DSS, SOC 2, and federal compliance success.

United States

Message

What I'm looking for

I am seeking a leadership role to mature enterprise compliance programs (PCI DSS, SOC 2, NIST 800-53), drive audit readiness, and expand into HIPAA/ISO adoption in a collaborative, growth-focused environment.

I am a Senior Governance, Risk, and Compliance (GRC) analyst with 20 years of hands-on experience supporting enterprise security, regulatory compliance, and risk management programs.

I have deep expertise in PCI DSS, SOC 2, NIST 800-53, FedRAMP, and HIPAA, and I am CISSP certified; I have implemented and validated controls that contributed to a 60% reduction in organizational risk and 100% audit success for PCI and SOC 2 engagements.

I lead control implementation, evidence collection, gap analysis, third-party risk assessments, and cloud compliance efforts (Azure IaaS/SaaS), and I seek to lead and mature enterprise compliance programs while expanding expertise in emerging frameworks.

Experience

Work history, roles, and key accomplishments

Senior GRC Analyst

Intellectual Technology, Inc.

Jul 2014 - Aug 2025 (11 years 1 month)

Led enterprise GRC, reducing organizational risk by 60% and achieving 100% success on PCI DSS and SOC 2 Type II audits by implementing and validating 85% of PCI controls and managing evidence collection.

PCI DSS SOC II NIST 800 53 Drata Risk Assessment Tenable Rapid7 Azure Incident Response

Senior GRC & Security Analyst

Intellectual Technology, Inc.

Jul 2014 - Aug 2025 (11 years 1 month)

Led enterprise GRC, audit, and compliance programs, supporting PCI DSS and SOC 2 audits and implementing 85% of PCI controls to achieve 100% audit success while reducing organizational risk by 60%.

PCI DSS SOC NIST 800 53 Drata Risk Assessment Tenable Rapid7 Azure

Information Technology Manager

Intellectual Technology, Inc.

Jan 2011 - Jul 2014 (3 years 6 months)

Managed IT teams and led infrastructure virtualization and monitoring initiatives, improving scalability and achieving 99.9% network uptime through configuration management and security hardening.

Virtualization Infrastructure Monitoring Configuration Management Disaster Recovery Network Security System Hardening Team Leadership Performance Optimization

Systems Administrator

Intellectual Technology, Inc.

Feb 2005 - Jan 2011 (5 years 11 months)

Administered 200+ Windows servers and enterprise network infrastructure, configuring and managing Cisco ASA firewalls and 800+ site-to-site VPN tunnels to support multi-site operations.

Windows Server Exchange IIS SQL Server Cisco ASA VPN Network Engineering WSUS

Systems Administrator and Network Engineer

Intellectual Technology, Inc.

Feb 2005 - Jan 2011 (5 years 11 months)

Administered 200+ Windows servers and designed enterprise network infrastructure, managing firewalls, routers, switches and 800+ Cisco ASA firewalls with site-to-site VPNs across remote locations.

Windows Server Exchange IIS SQL Server Cisco ASA VPN