David McHale

About David McHale

Recently led Kno2 through complete HITRUST framework evolution, achieving HITRUST 11 r2 certification with NIST 800-171 SP2 and HIPAA Security Rule additions and delivered with zero exceptions, ahead of schedule, and under budget across all 563 controls.Proven security leader with 10+ years building resilient security programs, driving compliance excellence, and delivering measurable business outcomes. Expert in transforming security operations while maintaining operational efficiency with lean teams.Key Leadership Achievements:Directed enterprise security operations for healthcare technology platform with minimal resources (2.5 FTEs), managing 6 Azure environments and resolving 3,200+ security ticketsFounded cloud security company serving organizations globally, with products reaching individuals through security educationArchitected $13M revenue-generating infrastructure while achieving multiple compliance frameworks (SOC2, HITRUST, NIST 800-171)Led secure company closure as CISO, negotiating role with PE firm and ensuring compliant decommissioningSpearheaded DoT CI/CD implementation saving thousands of man-hours for employeesCore Expertise: HITRUST/NIST compliance, cloud security architecture, vulnerability management, DevSecOps, incident response, and building security-conscious cultures.

Experience

1. Director of Security & Infrastructure

   Kno2

   Jan 2021 — Present · Boise, ID, US

   Led Comprehensive HITRUST Certification Journey (20••••25): Successfully guided Kno2 through complete HITRUST framework evolution from initial 9.6.2 r2 certification through interim assessment to final HITRUST 11.3.2 r2 certification with NIST 800-171 SP2 and HIPAA Security Rule additions, achieving zero exceptions across all 563 controls while completing each phase ahead of schedule and under budget, maintaining QHIN designation throughout the transitionManaged Enterprise Security Operations with Lean Team: Directed comprehensive security, compliance, and IT operations for healthcare technology platform with minimal resources (part-time vCISO + 1 security analyst), efficiently resolving 3,200+ security and compliance tickets while securing 6 Azure cloud environments and maintaining SOC2T2 attestation for two consecutive yearsImplemented Scalable Vulnerability Management: Designed and deployed robust vulnerability management program across 165 software repositories, tracking and remediating 3,500+ code and dependency vulnerabilities while maintaining compliance with 700+ controls for SOC2T2, HITRUST, NIST 800-171, and TEFCA QHIN requirementsEstablished Secure Remote Infrastructure: Successfully deployed and configured secure VPN and VM infrastructures enabling remote worker connectivity while resolving dozens of incident response engagements and ensuring regulatory compliance across diverse environments

Education

• Anne Arundel Community College

  Associate Certification, Computer Aided Design & Drafting

  2009 — 2011

• University of Maryland

  Bachelor’s Degree, Computer Science

  2011 — 2013