Dan has been with Protiviti since its founding in 2002. Based in the San Francisco Bay Area, he specializes in Security & Privacy, advising organizations on technology risk, compliance, and resilience.
His experience includes IT Internal Audit, security assessments across frameworks such as ISO 27001, NIST CSF, SOC 2, and PCI DSS, and supporting organizations in streamlining compliance through unified control frameworks. He has also worked extensively in privacy, helping organizations address requirements under GDPR and CCPA/CPRA.
Dan has developed and implemented Business Continuity Management programs, including disaster recovery and crisis management, and has supported technology companies in meeting regulatory expectations related to privacy and security.
He is a frequent speaker on security, privacy, and compliance topics and holds CISA and CBCP certifications.