David Carter is a director in RSM US LLP’s security and privacy risk consulting practice, where he assists leading companies in assessing, building and implementing cybersecurity programs for IT and operational technology (OT) environments.

In May 2023, David was selected as a senior analyst in RSM’s cutting-edge Industry Eminence Program, which positions its analysts to understand, forecast and communicate economic, business and technology trends shaping the industries the firm serves. Based in Houston, his focus is on the industrials space.

David has more than 15 years of experience in IT operations and IT and OT security. He serves as a lead subject matter professional nationally for conferences and trade shows on the topics of security governance, compliance and strategy. He has assisted leading companies of all sizes in critical infrastructure industries including energy, utilities and manufacturing.

In his work with RSM clients, David has seen field operations firsthand at a range of global industrial facilities, led current-state assessments using various industry security frameworks and regulations, developed tactical and strategic recommendations and road maps, and implemented various aspects of IT and OT security programs.

He enjoys helping middle market leaders with maturing and right-sizing their cybersecurity programs based on enterprise risk, as well as shifting the view on cybersecurity to that of a competitive differentiator and business enabler. Through his role as a senior analyst in the Industry Eminence Program, he also goes beyond his cybersecurity experience to bring insights on industry economics and trends affecting the middle market.

• Certified information systems security professional
• Certified information systems auditor
• Cybersecurity maturity model certification registered practitioner
• PCI Data Security Standard qualified security assessor

• Bachelor of Business Administration, management information systems, University of Texas at Austin