Nathan Settelmaier

Background

About Nathan Settelmaier

I graduated 2 years early from the University of Texas at Arlington and at 20, began working in Deloitte’s Risk and Financial Advisory practice working with a Fortune 500 Silicon Valley client in their third party risk management team. Through close collaboration across various cross-functional legal, business, and engineering teams, I conducted DPIAs to ensure compliance of third party vendors and applications with global data privacy and security criteria, such as SOC 2, ISO 27001, GDPR, CCPA, and other global regulations, ensuring sensitive client and user data was adequately protected. Outside of my client work, I became deeply involved with various internal Deloitte development initiatives, supporting sales pitches, practice development, metrics reporting, and internal eminence efforts. Through these roles, I had the chance to participate in and lead teams across multi-industry cloud-centric engagements, giving me a broad understanding of the technology landscape and needs of many Fortune 500 clients. Most importantly, I met countless amazing colleagues and friends across the world. After a busy year at Deloitte, gaining firsthand experience with both the business and technical data privacy and protection principles of major global institutions, I joined a financial technology startup as a program manager at the increasingly complex and scrutinized intersection of commercial real estate finance and cybersecurity. I manage the compliance and information security initiatives across subsidiary B2B SaaS companies. I also serve as the external point of contact for all new and existing inbound client cybersecurity diligence requests, and frequently advise in-house counsel on cyber-specific aspects of contract negotiation. While building out industry-best practices at my current company, I continually strive to improve and specialize in the broad data privacy and security landscape through ongoing education. I passed my Certified Information Protection Professional (US) exam, and am currently studying EU regulation (CIPP/EU) and Project Management Professional (PMP) material. I plan to apply to Master’s programs focused around the intersection and implementation of Cybersecurity & Regulatory Law. It’s my goal to continue to build on my professional experience and educational background to become a well-rounded global cybersecurity/privacy leader and public policy advocate as the regulatory landscape and technology continues to evolve.