David Clift

Background

About David Clift

Proven IT risk / security, regulatory compliance, and audit leader with broad experience implementing security programs, establishing regulatory compliance, and building audit and control practices to protect organizations and ensure security in the health care, retail, technology, and financial services industries. Individually contribute and lead teams in implementing IT risk / security and compliance solutions and frameworks; auditing to identify control weaknesses; and reporting program results to key stakeholders (e.g. regulators, business functional groups, IT, audit, Board of Directors, and executive leadership). Also experienced and familiar with FFIEC Guidelines, NIST SP 800-53, ISO standards (e.g. IS 27001 / 27002), AICPA Trust Principals (SSAE16 / SOC 1, SOC 2, and SOC 3), FedRAMP, COBIT, COSO, HIPAA, PCI DSS, Gramm-Leach-Bliley Act (GLBA) privacy and security rules, and Sarbanes-Oxley (SOX).