David Lingenfelter

Security professional with over 25 years of experience in risk management, information security, compliance, and policy development. Performed risk and vulnerability assessments along with recommendations on network and system design improvements. Security Policy development with a focus on "real world" security implementation of effective controls and measures balancing industry best practice with business need and exposure. Presentations to executives and board members on current state of security and compliance as well as future roadmap objectives. At Penn National Gaming, responsible for 40 casinos through out the United States, which also includes over 20 hotels, and nearly 100 restaurants and and other retail outlets. Working with gaming industry vendors to help bring more focus to the need of security and risk management. Working with the executive team and the board of directors to help keep the company on the cutting edge of technology as the gaming industry changes and adopts online personas. At Fiberlink Communications, which was acquired by IBM, help design, built and secured a global cloud environment to manage customers including the Federal Government, Fortune 500, foreign companies and down to SMB. Responsible for oversight of all security and compliance aspects of the company including physical, application, network and data security. Developed a comprehensive security policy based off the ISO27002 standard and meeting regulatory requirements including FedRAMP, PCI and GDPR. Member and Fellow in the Cloud Security Alliance helping add and review components to the CSA Security Guidance and the Cloud Control Matrix. Active member of NIST cloud working groups. Specialties: Security Awareness Risk Management Vulnerability and Threat Management Policy and Standards Development Budget Planning and Management IT and Information Security Operations Cloud Computing Regulatory Compliance (e.g. PCI, SOX, HIPAA, GDPR, FedRAMP ) IR/DR/BC planning