Donald Richard

About Donald Richard

With over a decade of experience in information security and governance, I currently serve as Senior Manager, Governance, Risk, and Compliance at Hitachi Vantara. My role involves leading enterprise-wide risk assessments, facilitating vendor risk evaluations, and ensuring adherence to complex regulatory standards, including J-SOX, GDPR, and ISO 27001. Collaborating with global teams across Japan, India, Poland, and beyond, I bridge communication and compliance efforts to ensure organizational alignment with security mandates. My mission is to empower enterprises to navigate the intricate landscape of cybersecurity risk and compliance through thoughtful strategy and actionable insights. Holding certifications like CISSP, CISM, and CGEIT, I specialize in designing robust governance frameworks, coordinating audits, and supporting technical teams on critical security initiatives. Passionate about fostering collaboration, I aim to drive secure, compliant, and resilient business operations worldwide.

Experience

1. Director - Governance, Risk and Compliance

   Hitachi Vantara

   Mar 2024 — Present · Santa Clara, CA, US

   Support the Chief Information Security Officer in enterprise-wide risk and compliance strategies. • Lead comprehensive IT risk assessments, collaborating with stakeholders to enhance security posture. • Manage a global team of GRC professionals, ensuring compliance with regulations like GDPR and ISO 27001. • Coordinate with internal and external auditors to maintain high standards of governance and risk management.

Education

• Community College of Rhode Island

  Associate's degree, Business Administration and Management, General

• Bryant University

  MBA, Computer Information Systems

• Bryant University

  Bachelor of Arts (BA), Marketing

Skills

• Information Security Management
• Crisc
• Vulnerability Assessment
• Fraud
• Cism
• Computer Forensics
• Data Privacy
• IT Management
• Pci Dss
• Computer Security
• Incident Management
• Firewalls
• Risk Analysis
• Penetration Testing
• Blueberry Pancakes
• Governance
• Vulnerability Management
• Cgeit
• Security Audits
• Active Directory
• Information Security
• Data Security
• Risk Assessment
• Sarbanes-Oxley Act
• Cisa
• Risk Management
• Financial Risk
• Network Security
• Enterprise Risk Management
• Security
• Enterprise Architecture
• Business Continuity Planning
• Iso 27001
• Glba
• Business Process
• Application Security
• Program Management
• Disaster Recovery
• Cissp
• IT Strategy