Skills
IT Security, IT Risk Management, Business Resilience, Compliance, SOC 2, ISO 27001, OSFI, Artificial Intelligence
About
As a senior-level information security professional, I bring many years of hands-on experience, including more than 10 years in managerial roles, providing strategic leadership and technical expertise in information security, cybersecurity threat management, risk reduction, business continuity, and regulatory compliance. I have successfully designed and maintained enterprise-wide security architectures in close collaboration with IT infrastructure and application teams, delivering effective risk mitigation solutions, conducting security controls testing, and leading vulnerability assessments and penetration testing initiatives.
My industry experience spans the financial sector and leading consulting firms such as PricewaterhouseCoopers and Deloitte, where I have directed comprehensive security programs and ensured alignment with evolving business objectives. I hold the CISM certification and have deep expertise in legal and regulatory compliance such as SOC 1/2/3, GDPR and DORA, as well as industry frameworks including ISO/IEC 27001, ITIL, COBIT, and NIST.