About Our Founder

David Monahan — Founder & Managing Director

David Monahan is a cybersecurity executive with more than 30 years of experience serving as a trusted strategic advisor and security leader — across both internal enterprise programs and external consulting roles. He founded Data Defenders to bring that enterprise-grade expertise to organizations of every size, without the overhead of a full-time executive hire.

Throughout his career, David has earned a reputation for translating complex technical risk into business language that resonates with boards, executives, and operational teams alike. He approaches every engagement as a practitioner first — not just an advisor — with hands-on experience spanning GRC program design, data privacy, AI governance, incident response, BC/DR, and security operations at global scale.

A Career Built on Real-World Outcomes

David's career began in managed security services, where he spent nearly a decade building and leading a large global Security Operations Center protecting hundreds of enterprise clients across industries. That environment — high volume, high stakes, real threats arriving in real time — built the operational instincts and client service discipline that define his approach to this day.

From there he moved into technology manufacturing and storage, rebuilding security programs, implementing foundational compliance frameworks, and navigating the security complexities that come with rapid acquisition activity. He then took on one of the most security-sensitive environments in the private sector — a venture working with hardware-level encryption technology — where protecting intellectual property, managing a secure facility, and governing information sharing across hundreds of partner organizations required both precision and creativity.

Public sector work gave David a different kind of challenge: unifying a fragmented landscape of independently governed departments under a single security and privacy framework, standing up the organization's first IT resiliency program, and navigating compliance obligations across health, law enforcement, and public records environments. He brought the same structured approach to a financial technology company operating a high-transaction payments platform, where he owned compliance across multiple frameworks simultaneously and passed every audit on the first review.

A lengthy period as a security industry analyst and consultant gave David something most practitioners never get — a structured, analytical view across more than 400 organizations in virtually every sector, evaluating how they succeeded and struggled with security, GRC, and risk management. That experience sharpened his ability to quickly diagnose where programs break down and what actually moves the needle.

His most recent corporate roles took him into global financial services and pharmaceutical environments — two of the most heavily regulated industries on earth — where he operated at the intersection of enterprise risk management, international privacy law, AI governance, and complex audit obligations across multiple regulatory regimes at once. Those experiences, combined with the breadth of his earlier career, are what he brings to every Data Defenders engagement.

Industries & Environments

David's consulting and leadership work spans an unusually broad range of industries and organizational types. In the private sector, he has worked with global pharmaceutical and medical device companies, major financial institutions, payments platforms, telecommunications providers, and technology manufacturers. In the public sector, he has served county government and worked alongside federal compliance frameworks. As an industry analyst at EMA, he advised more than 400 organizations across virtually every vertical — from healthcare and retail to energy and professional services — giving him a rare depth of cross-industry perspective that informs every engagement.

He is equally at home in highly regulated environments — where audit readiness, privacy obligations, and framework compliance are non-negotiable — and in growth-stage companies that are building their security foundations for the first time. That range allows Data Defenders to meet clients exactly where they are.

What David Brings to Every Engagement

Over three decades, David has developed a distinctive blend of capabilities that are rarely found in a single practitioner. He combines the strategic thinking of a CISO with the hands-on execution skills of a practitioner who has personally built programs, managed audits, responded to incidents, and led teams through complex organizational change.

His technical fluency spans risk quantification, GRC program design, privacy compliance across global regulatory regimes, AI governance, security operations, and business continuity — but what clients consistently value most is his ability to communicate clearly across organizational levels. He is equally effective briefing a board on risk posture, coaching a technical team through a compliance remediation, or helping an operations leader understand why a security control matters to their business.

He has a particular strength in regulated industries where compliance frameworks like ISO 27001, SOC 2, FedRAMP, PCI DSS, HIPAA, GDPR, CCPA, and SOX intersect with real business operations — and where the gap between passing an audit and actually reducing risk can be significant. His approach bridges that gap.

Teaching the Next Generation

Since 2007, David has served as an adjunct professor at Capitol Technology University, developing and teaching graduate and undergraduate coursework in encryption, web security, risk management, compliance, and cybersecurity policy. His commitment to developing the next generation of security professionals reflects the same philosophy he brings to every client engagement — that great security outcomes start with knowledgeable, empowered people.

Philosophy

David believes that security and business success are not in tension — they are mutually reinforcing. The organizations he has worked with consistently discover that well-designed security programs reduce operational friction, accelerate compliance, and build the stakeholder trust that enables growth. That conviction is the foundation on which Data Defenders was built.