David Carter

About David Carter

An engaging and charismatic leader, David has over 19 years of experience in technology risk management, mitigation strategies, compliance assessments, and navigating complex regulatory requirements. For the past 11 years, David has specialized in coaching, mentoring, and leading teams to develop cyber risk management capabilities aligned with enterprise business objectives. Combining strong technical expertise with the ability to build trust with stakeholders across multiple departments, David has delivered significant impact in risk management, governance, and the evolution of controls to meet the ever-changing needs and risk appetite of businesses. He has also spoken at and championed innovations in risk management at several conferences, including the National GRC Conference hosted by the Institute of Internal Auditors (IIA) and the Information Systems Audit and Control Association (ISACA). David is also a big fan of GRC engineering and a firm believer in the awesome power of people coming together to solve problems.

Experience

1. Senior Manager, Cyber Risk Management

   Delta Dental Ins.

   Sep 2018 — Present · San Francisco, CA, US

Education

• Indiana University Bloomington

  Master of Science, Human-Computer Interaction Design

  2003 — 2005

• Indiana University Bloomington

  Bachelor of Science, Informatics - Data Telecommunication Networks

Skills

• Internal Audit
• Information Security Management
• Strategy
• Program Management
• IT Controls
• Leadership
• Security
• Governance
• Vulnerability Management
• Payment Card Industry Data Security Standard (Pci Dss)
• Analysis
• Process Control
• Risk
• Financial Risk
• Pci Dss
• Sas70
• Risk Assessment
• Sarbanes-Oxley Act
• Sdlc
• IT Governance
• Audit
• Enterprise Risk Management
• Information Security
• Controls Development
• Auditing