David Tyus is an accomplished Senior Information Security Professional with extensive
experience across healthcare, higher education, and technology. At Included Health, he delivers governance, risk, and compliance guidance grounded in leading frameworks such as NIST, SOC 2, HITRUST, ITIL, and COBIT while managing audits, vendor assessments, phishing programs, and identity and access management improvements. His background includes roles as a Security Business Analyst and Project Manager, where he conducted IT risk assessments, aligned policies to ISO 27001 and ISF standards, and closed compliance gaps through close collaboration with business stakeholders. He also held leadership positions at the University of Illinois and AMITA Health, directing IT teams and driving major security and resilience initiatives. Holding an M.S. in Computer Information Systems Security from DePaul University and certifications including CISM, CIAM, and Scrum Master, David is known for integrating technical depth with strategic business insight. He also finds purpose in mentoring youth and emerging professionals, sharing the knowledge he’s cultivated over his career.