B Vignola

Cybersecurity compliance and requirements specialist, with more than 15 years of experience supporting large organizations and recognized expertise in NERC Critical Infrastructure Protection (CIP) requirements, security governance and risk management in critical environments requiring rigour, technical discipline and organizational judgment. I integrate cybersecurity requirements into IT/OT architectures, operations and projects, leveraging leading frameworks (ISO, NIST, COBIT), and favour a structured, pragmatic approach supported by continuous technology watch. This includes the controlled integration of artificial intelligence when relevant and aligned with the organizational context.

Senior Cybersecurity Consultant - CGI

(2021-04 - 2025-07)

Mandate: Senior Cybersecurity Advisor - Hydro-Québec Cybersecurity Squad (August 2022 - July 2025)

• Assess security needs with system administrators, project managers and solution architects.
• Act as NERC subject-matter expert for quality assurance of CIP-002, CIP-004, CIP-007, CIP-009, CIP-010 and CIP-011 evidence, supporting compliance for internal NERC certification and solution go-live.
• Support stakeholders in integrating cybersecurity requirements.
• Validate compliance with organizational IT Definition of Done (DoD) and regulatory requirements (NERC), including documentation management, access management, vulnerability management (scanning and action plans), hardening measures (OS, databases, applications), monitoring, backups, service continuity, change management, inventory (CMDB) and physical security.
• Approve DoD completeness and compliance prior to information asset go-live.
• Complete risk assessments for IT solutions and vendors (assessment grid, SOC 2 Type 2 reports).
• Contribute to information asset classification using Confidentiality, Integrity and Availability (CIA) ratings.
• Propose improvements and automation solutions for NERC compliance evidence.

On-demand professional services - CGI

(2021-04 - 2022-08)

Mandate: On-demand professional services in information security and methodology, Ministère de l'Éducation du Québec

• Identify and catalogue 30+ foundational information security documents from government bodies (Secrétariat du Conseil du trésor, Ministère de la Cybersécurité and Centre opérationnel de cyberdéfense).
• Compile and harmonize strategic and technical elements from various ministerial bodies to ensure consistency and compliance with standards.
• Validate and deepen the technical understanding of documentation, context and organizational structure through specialized weekly workshops.

On-demand contract - Société de l'assurance automobile du Québec

(2021-04 - 2022-08)

Mandate: On-demand contract for the design, operation and evolution of technology infrastructures

• Support senior management in strategic reflection on mission, vision and issues during executive committee meetings.
• Analyze management requests, assess situations and propose short-, medium- and long-term strategies and recommendations.
• Identify and report issues related to MTI program technologies and architectures; collaborate with management and teams to define solutions.
• Communicate the impact of MTI issues or opportunities to other business areas to support integrated and realistic business solutions.
• Maintain collaboration with stakeholders, raise awareness of cybersecurity issues and support the assessment and mitigation of risks related to IT solutions.

Cybersecurity and Project Management Consultant, Various Clients - DSI

(2020-05 - 2021-04)

• Identify stakeholders, assess needs and expectations, and define communication strategies at project initiation.
• Develop project charters, intervention plans, WBS and preliminary plans for assigned initiatives.
• Conduct audits through observations, interviews and document review to assess organizational practices.
• Produce audit reports including findings, recommendations, dashboards and strategies, and develop governance frameworks (security policy, RACI, etc.).

Cybersecurity Consultant - Sollio Groupe Coopératif - PM SCADA Cyber Défense

(2019-04 - 2020-04)

• Standardize physical security practices across the division and develop an action plan with a budget request to strengthen head office infrastructure.
• Coordinate implementation of access controls and physical security action plans across 15 sites, including protection of information assets.
• Strengthen network and infrastructure security and improve the organization's information security agility and expertise.
• Achieve a 100% vulnerability remediation rate for certain divisions and over 90% (150 vulnerabilities) for Sollio and head office.

Strategic Cybersecurity Advisor - PM SCADA Cyber Défense

(2015-11 - 2019-04)

• Support senior management in the weekly selection of relevant RFPs (SEAO), compilation of compliance requirements and formulation of strategic go/no-go recommendations.
• Oversee the compliance of RFP responses and coordinate submissions for mandates won with major organizations, including Hydro-Québec and STM.
• Prepare certification and qualification files with the AMF, SPICT, ProServices and Government of Canada procurement security levels (personnel and company).
• Coordinate implementation of the cybersecurity governance framework, including policy, directives and ISO 27001 certification readiness.
• Develop technical tools and deliverables: vulnerability assessments (CVSS 3.0), penetration test templates, deliverable quality control and IEC 62351 training.

Senior Data base and Information Systems Advisor - National Bank

(2004-04 - 2011-12)

• Ensure the availability and integrity of SQL databases and information systems that support the organization's financial and regulatory reporting, particularly following system updates.
• Provide technical support and training and assess the needs and requests of users and business units.
• Maintain and update databases and systems, and improve control, validation, and change management tools.

Master's Degree - IT Governance, Audit and Security - Université de Sherbrooke (2014)

Certificate - Finance - Université du Québec à Montréal (UQAM) (2009)

Bachelor of Business Administration - Hautes Études Commerciales (HEC) (1991)