IT or IS risk management
Send a job offer directly to this candidate
With over 25 years of pioneering leadership in Information Security, IT, and business systems integration, I excel in developing robust security solutions that blend compliance with creativity. My expertise lies in managing full-lifecycle application development projects, steering technical teams across multinational sectors, and delivering high-impact solutions in financial crime prevention and PCI compliance.
Technical Maestro: As a Senior Manager at MNP Digital, I led comprehensive IT risk assessments and PCI-DSS compliance projects. I translated complex security findings into actionable insights, making security accessible to all client stakeholders.
Compliance Champion: At Rogers Communications, I orchestrated a company-wide PCI compliance strategy, ensuring adherence to the latest PCI-DSS standards. I initiated mock breach exercises and vendor compliance checks, solidifying the company's defense mechanisms.
Consulting Virtuoso: Delivered tailored security consulting services at Trustwave and NCI, including threat and risk assessments, penetration testing, and security architecture reviews. My client-centric approach ensured deliverables were insightful, clear, and practical.
Leadership Excellence: Directed technical teams at the Bank of Montreal, driving projects that navigated the complexities of Sarbanes-Oxley compliance. Developed innovative training programs to elevate security awareness and capabilities across the organization.
Continuous Improver: Committed to ongoing professional development, with certifications in CISSP, CISA, and QSA, alongside advanced skills in cloud technologies (AWS, GCP, Azure) and virtualization (VMWare, HyperV).
Risk Mitigation Strategies: At the Bank of Montreal, implemented an enterprise-wide risk assessment framework, integrating GLBA, SOX, and PCI standards to fortify the bank's security posture during acquisitions and vendor engagements.
Cutting-edge Cloud Security: At MNP Digital, conducted advanced IT security audits and developed robust security architectures, leveraging the latest in cloud computing and containerization technologies to optimize client environments.
