Open to opportunities

Jamal Davison

@jamaldavison

Message

Senior IT risk & assurance analyst improving SOC 2/ITGC and PCI DSS audit outcomes.

United States

Message

What I'm looking for

I’m looking for a role where I can own IT risk and assurance outcomes end-to-end—SOC 2/ITGC and PCI readiness, evidence-based control testing, remediation tracking, and auditor coordination—while improving governance and access security at scale.

I’m a Senior IT Risk & Assurance Analyst with 20+ years leading IT risk, assurance, and security compliance across regulated financial, healthcare, government, and SaaS-adjacent environments. My focus is making audits succeed in practice—through strong evidence collection, control documentation, and external-auditor coordination.

I supported nine consecutive PCI DSS assessment cycles by maintaining assessment-ready artifacts, tracking remediation lifecycles, and preparing control operations for auditor walkthroughs. I also deliver SOC 2 control support for change management, availability monitoring, privacy/confidentiality protection, evidence collection, and corrective-action coordination.

I’ve consistently improved control effectiveness at scale—maintaining CVSS-ranked vulnerability findings across 450+ systems and remediating 90%+ of critical/high issues within SLA. I strengthen access governance (33% improvement via PowerShell-supported workflows), build structured asset governance across 1,000+ assets, and support incident response/corrective actions to reduce downtime.

Experience

Work history, roles, and key accomplishments

Current

Freelance Cybersecurity Advisor

Current

Intechgrity Solutions

Jul 2021 - Present (5 years)

Supported identity lifecycle governance for 5,000+ users by administering Okta-integrated Microsoft 365 access for onboarding, role changes, and terminations. Led secure migration of 25% of trading turret systems to IP-based infrastructure and configured call recording and secure communications for regulated financial-services environments.

Identity Governance Okta Access Governance Business Continuity data recovery Security Communications IP Based Infrastructure Migration Onboarding And Offboarding

Desktop Support Technician

Affinity Solutions

Jan 2015 - Oct 2025 (10 years 9 months)

Supported annual PCI DSS and SOC 2 audit readiness by maintaining evidence repositories, coordinating remediation, preparing control artifacts, and demonstrating system configurations to auditors. Ran daily Rapid7 vulnerability scans across 450+ systems, remediating 90%+ critical/high findings within SLA, and delivered SOC 2 controls for change management, Cisco Meraki availability monitoring, and

PCI DSS SOC 2 Audits Control Artifacts Vulnerability Management Rapid7 CVSS Risk Register Access Governance Quarterly Access Reviews Segmentation MFA Audit Logging Change Management Cisco Meraki Email DLP Incident Response

System Administrator

Citigroup

Jan 2010 - Feb 2012 (2 years 1 month)

Implemented structured IT asset governance across 1,000+ assets with yearly recurring audits, improving inventory accuracy from 75% to 90%. Maintained endpoint security controls, conducted vulnerability assessments, remediated identified risks, and supported documented infrastructure operations in a financial-services environment.

IT Governance Endpoint Security Vulnerability Assessment remediation Technical Documentation Inventory Management Infrastructure Operations

System Administrator

Macmillan

Jun 2004 - Jan 2009 (4 years 7 months)

Served as on-call incident response lead, triaging high-severity issues, routing tickets to the correct engineering owner, and resolving emergency calls within a 30–60 minute callback SLA. Developed and implemented ITIL v2-aligned security policies and risk assessments in partnership with IT and compliance teams to enforce control standards.

Incident Response ITIL Security Policies Risk Assessment SLA Management

Deployable Network Administrator

United States Air Force

Nov 1999 - Nov 2003 (4 years)

Redesigned deployable network infrastructure, reducing deployment time by 25%+ through standardized configurations, segmentation, repeatable procedures, and disciplined operational governance. Configured and secured SIPRNet connectivity in compliance with DoD 8500.01 and RMF requirements and conducted COMSEC inspections across 75 global deployments with 100% compliance and zero security incidents.

Segmentation SIPRNet DoD RMF COMSEC Inspections Operational Governance