David Spooner

I am a dedicated Information Security professional with a Bachelor's degree in IT and a minor in Secure Computers and Networking. With nearly five years of experience in Risk Management, Governance, and Compliance, I have developed a strong foundation in cybersecurity principles and practices. My proven ability to lead teams and resolve workplace issues efficiently has been instrumental in my career. I pride myself on my excellent character and work ethic, exemplified by achieving the rank of Eagle Scout in the Boy Scouts of America.

In my role as an Information Security Analyst at AdventHealth, I was an integral part of the Cybersecurity GRC team within a HITRUST certified Health Care System. I was directly responsible for minimizing risks through annual security risk assessments based on HIPAA Security Rule, HITRUST CSF, NIST, and SOC 2. My experience includes designing and utilizing GRC tools like ServiceNow and LockPath Keylight to enhance team efficiency and user experience. I have also facilitated risk remediation by collaborating with Risk Owners to develop and implement Risk Treatment plans.

Most recently, I worked as an IT Compliance & Governance Analyst at NBCUniversal, where I upheld compliance with GDPR/CCPA laws and automated PCI-DSS User Access Reviews. My role involved maintaining communication with application owners to ensure compliance across systems and supporting the development of IT Disaster Recovery Plans. I am eager to leverage my skills and experience to contribute to a forward-thinking organization.