David Wright

I’m a Cybersecurity GRC leader with 10+ years of experience in IT risk management, governance, compliance, and security auditing across enterprise environments. I specialize in translating technical security controls into business risk context, so stakeholders can make confident decisions.

I’ve served as Director Information Security, leading the organization’s security program and client security engagement strategy as the primary executive-facing security liaison. I directed security compliance and governance initiatives aligned with SOC 2, ISO 27001, and client-driven regulatory requirements, coordinating cross-functional teams to achieve audit readiness and successful third-party security assessments.

In consulting and GRC roles, I led PCI DSS scoping and compliance assessments, performed gap analysis, and developed remediation plans to strengthen continuous compliance. I assessed network security controls (firewall rules, access controls, logging mechanisms) and performed access control and authentication assessments across operating systems, including evaluating password policies and MFA.

Most notably, as GRC Compliance Manager I used SAP Archer GRC to lead policy governance and audit lifecycle management, improving compliance workflows and reducing SLA-related financial penalties by 10% annually. I also managed Third-Party Risk Management (TPRM) audits, integrated risk assessments into policy management, and supported sustained HIPAA-aligned compliance for two consecutive years.