David Feete

26 Years' experience as an Information Technology (IT) professional with strong expertise in IT management, IT security management, and IT enterprise architecture. Demonstrated expertise in writing, establishing and implementing large information security programs and IT security policies for large corporation. Performed evaluations and selections of IT security tools and successfully implemented IT security systems to protect the availability, integrity, and confidentiality of critical business information and information systems. Orchestrated SOC2 certification for large corporation since 2016. Worked closely with Legal department and Data Protection Officer to review contracts and answer hundreds of client IT questionnaires annually. Highly skilled, dedicated and enthusiastic team player with excellent leadership and communication skills.

Leadership

• Acting CISO for MazarsUSA. The authority on IT and data security for Mazars in the United States.
• Work closely with CTO and executive board.
• Created and maintained company-wide security policies for accounting firm's US affiliate.
• Acted as liaison between IT and other departments.

Strategy and Planning

• Wrote and established Acceptable Use policy, Retention Policy, Encryption Policy, Password Policy, Remote Access Policy, and several other security policies and standards to all users.
• Established policies and procedures for system administrators to perform operating system and application patching.

Team Collaboration

• Collaborated with CISOs at international Mazars affiliate countries to develop universal standards for IT policies, vulnerability management and spam filtering.
• Chairperson of IT Security & Compliance Steering Committee .
• Work with multiple departments, mainly Legal, to complete client IT security questionnaires and review contracts.
• Coordinated the activities of affiliate countries' Information Security Officers to define and establish unified program-wide approach to address IT security issues and mitigate IT security risks.
• Determined which corporate IT information our corporation could and could not provide to outside entities. Working as member of several Mazars Global IT committees, brought smaller countries up to the data security standards of the US.

Project Management

• Consult and work with outside auditors to ensure several levels of IT security to maintain SOC2 compliance throughout the SOC2 auditing process since 2016.
• Implemented software to disable USB storage on company workstations to prevent data leakage.
• Implemented and maintained multiple centrally-managed disk encryption solutions for all workstations in organization.
• Developed and conducted vendor management assessment program.
• Developed phishing and malware reporting process to rapidly alert users and encourage web hosts to take down phishing pages.
• Wrote and presented IT security & HIPAA training sessions for healthcare consultants.