David Underwood

WORK HISTORY

EDUCATION

SKILLS

ABOUT DAVID UNDERWOOD

David has lead teams of security consultants that specialise in Penetration Testing (PT) and Threat and Vulnerability Management (TVM). David is often involved in improving current security controls and providing guidance on achieving security accreditations and compliance.David has experience with several governance and compliance frameworks including Cyber Essentials Plus, PCI DSS, NIST, CHECK, Mitre ATT & CK and ISO27001. With over a decade of information security experience, he has worked with many household names on multi-national projects as well as working with central and local government.He has a broad skill range and is capable of conducting, leading or managing assessments for most information security disciplines. David has been a people manager and strategically improved the Technical Assurance practice to achieve CREST accreditation and more than doubled the team\'s productivity. David often attends leadership meetings and focusses on strategic business key performance indicators including growth, utilisation, profit and loss etc. David has had ownership of the Technical Assurance products and championed the sales and pre-sales element for large or complex opportunities. His role often involves briefing stake holders on complex technical issues to non-technical audiences up to the executive level.Furthermore, he has a proven record for training junior members and helped them achieve industry recognised certifications.David has held high level security clearances and achieved CREST, Tigerscheme, CESG CHECK Team Member and IASME Cyber Essential Plus assessor qualifications.