Scott Davidson

About Scott Davidson

ISC2 CISSPEC-COUNCIL C|CISOSANS GSEC SANS GCIHSANS GAWNCompTIA CySA+, A+, Network+, Project+, CIOSEC-Council C|EHSymantec SCSPSpecialties: cyber security, privacy compliance, regulatory compliance, regulatory requirements, security information and event management (SIEM), prioritize workload, security data visualization, security research, network intrusion detection, wireless security, secure coding practices, HIPAA, SOX, GLB, NAIC MAR, COBIT, PCI, security event analysis, incident response, incident handling, vpn, firewall, routing, switching, UNIX, Teradata, information security management, wireless security, penetration testing, process development, policy development

Experience

1. Principal Enterprise Architect, Security and Networking (Senior Director)

   Northwestern Mutual

   May 2022 — Present · Milwaukee, WI, US

   Currently serving as Principal Enterprise Security Architect at Northwestern Mutual, where I lead the strategy and design of comprehensive security architecture capabilities spanning zero trust, cloud, network, endpoint, application, data, and analytics platforms.Partner with application, infrastructure, and product teams to consult on embedding security into architecture and new initiatives like digital transformation, cloud migration, and CI/CD automation.Perform risk assessments of current environments and map controls to mitigate identified vulnerabilities following frameworks like NIST, CIS Controls, and OWASP.Architect next-generation security solutions around areas like microsegmentation, privileged access management, SIEM, endpoint detection and response, and API security gateways.Drive security modernization through initiatives like zero trust access, secure remote access, identity-centric perimeterization, and multi-cloud security consistency.Coordinate security design reviews, vendor evaluations, and solution integrations across complex infrastructure and development pipelines.Communicate security roadmaps, policies, and standards across senior leadership and stakeholders.Maintain constant awareness of threat landscape, regulatory obligations, and security innovations to continuously enhance architecture.I leverage my depth of hands-on experience securing diverse environments along with an intuitive understanding of threat modeling and data/business risk management to elevate enterprise security. Passionate about technology and protecting organizations.

Education

• Texas A&M University School of Law

  Graduate Certificate, Cybersecurity Law & Policy

• Texas A&M University

  Physics and Mathematics

  1987 — 1991

• Western Governors University

  Master of Science - Cyber Security and Information Assurance, Computer and Information Systems Security/Information Assurance

  2020

• Western Governors University

  Bachelor of Science - Cyber Security and Information Assurance, Computer and Information Systems Security/Information Assurance

  2019 — 2020

• Texas A&M University School of Law

  Master of Jurisprudence (M.Jur.), Cybersecurity Law & Management

  2021

Skills

• Firewalls
• Hipaa
• Incident Response
• Payment Industry
• Wireless Security
• Vpn
• Cobit
• Incident Handling
• Routing
• Sarbanes-Oxley Act
• Analysis
• Security Research
• Cissp
• Security
• Network Security
• Computer Security
• Switching
• Information Security
• Information Security Management
• Application Security
• Penetration Testing
• Vulnerability Assessment
• Security Audits
• Arcsight
• Vulnerability Management
• Disaster Recovery
• Security Awareness
• Intrusion Detection
• Networking
• Virtual Private Network (Vpn)
• Unix
• Data Center
• Cloud Computing
• Virtualization
• Professional Services
• Enterprise Architecture
• Vendor Management
• Enterprise Software
• Integration
• Checkpoint