Details
Skills
My core strength is building enterprise cybersecurity programs from the ground up and translating them into strategy that leadership and regulators can act on. I've contributed to cybersecurity strategy and roadmap development aligned to organizational goals, led governance, risk and compliance (GRC) initiatives, and managed enterprise risk across healthcare, banking, and technology environments. I bring hands-on depth in regulatory frameworks NIST SP 800-53, ISO/IEC 27001, and ADHICS and have served as technical lead through certification and surveillance audits, working directly with compliance, legal, and regulatory stakeholders.
I have direct experience engaging with executive and government bodies on security oversight, including partnering with a provincial Treasury Board and chairing Information Security Steering Committee meetings with executive management the kind of stakeholder and board-level communication a CCO role demands. I own enterprise vulnerability management and incident response programs end-to-end, and I've designed security architecture, disaster recovery plans, and organization-wide security roadmaps from scratch.
I also build the human side of security: awareness and training programs delivered to as many as 6,000 employees, and information asset governance frameworks that hold up under audit. On the commercial side, I set security requirements into vendor contracts and service agreements connecting risk management to procurement and legal, not just IT. I've led teams ranging from one to five people, and I bring a technical foundation from earlier years in application development, database design, and tools like Burp Suite Pro, Tenable, and Qualys.
About
About Me
I'm a senior information security executive with 21 years of IT experience, 16 of them dedicated to cybersecurity, risk management, governance, compliance, business continuity, and incident response. I've built and led enterprise security programs across healthcare, banking, and technology organizations in Canada, the UAE, and India, and I'm now seeking to bring that experience into a Chief Cybersecurity Officer role.
Skills
My core strength is building enterprise cybersecurity programs from the ground up and translating them into strategy that leadership and regulators can act on. I lead cybersecurity strategy and roadmap development, governance, risk and compliance (GRC), and enterprise risk management, with hands-on depth in frameworks including NIST SP 800-53, ISO/IEC 27001, and ADHICS. I own enterprise vulnerability management and incident response end-to-end, design security architecture and disaster recovery plans, and build organization-wide security awareness programs. I also bridge security with the business setting security requirements into vendor contracts, advising on data governance, and engaging directly with regulators, executive leadership, and steering committees. My technical foundation includes tools like Burp Suite Pro, Tenable, and Qualys, plus earlier experience in application development and database design (Oracle Forms, PL/SQL).
Achievements
My work has been recognized with the (ISC)² Senior Professional Award and the UAE Tahawultech CISO50 Award, both in 2021, alongside the NMC Service Excellence Award and Cognizant's Project of the Year award. I hold certifications including CDPSE (ISACA), ISO/IEC 27001:2013 Lead Auditor, Certified Business Continuity Specialist, and ISO 42001, and I volunteer as an ISACA CDPSE manual reviewer and with the Navy League.
Experience
I currently serve as Departmental Information Security Officer at Vitalite Health Network in Moncton, where I shape cybersecurity strategy, run NIST-based risk assessments, oversee enterprise vulnerability management, and partner with New Brunswick's Treasury Board and Service New Brunswick on security oversight. Previously, as Manager of Information Security at NMC Healthcare in Abu Dhabi, I led ADHICS compliance and ISO/IEC 27001 certification, built the organization's security architecture and disaster recovery plans, and delivered security awareness training to 6,000 employees while chairing executive steering committee meetings. Earlier, as Manager of Projects at Cognizant Technology Solutions in Pune, I directed security operations and business continuity for a 9,000-user offshore banking IT center, after starting my career in application development and database design.
Profile Photo
