Adam Lomas Email & Phone Number

Ottawa, On, Ca

Fishers, In, Us

In 90 days developed a strategy and roadmap to deliver SOC 2, PCI, HIPAA, and GDPR compliance; led cross-functional collaboration, and offboarded incumbent vCISO ahead of schedule.In 12 months, developed and maintained Information Security governance structure, policies improved key control coverage to 97% to obtain the company's first SOC 2 Type 2 report.Served 1500 Trust Center document engagements across 168 active accounts, establishing trust, increasing security posture transparency and reducing deal friction and seller effort.Supported Executive stakeholders to effectively respond to security events.Rapidly expanded PCI-DSS program to cover payment processing capabilities in Formstack for Salesforce, protecting significant renewal revenue and unlocking a key growth driver.Worked to transition Formstack Forms PCI program to PCI-DSS Version 4.0 while capturing opportunities to drastically reduce evidence gathering effort.Provided client-facing support (including contract reviews, redlines and negotiations) to speed deals for key accounts in transportation, hospitality, healthcare and government.Supported hiring for Director of IT, Privacy Counsel, Product Operations and led recruitment of Trust & Compliance Analyst.Established Threat & Vulnerability Management program including SAST, DAST, Penetration Testing and ASV Scanning.Supported due diligence and integration of Formsite acquisition.Partnered with Engineering Managers, DevOps, and Cybersecurity Specialists to evangelize DevSecOps mindset and implement Secure SDLC focused on Developer Experience, OWASP Top 10 and the Cloud Security Alliance Top Threats to Cloud Computing.Supported control owners to implement User Access Reviews and Vendor Security Reviews and iterated toward supporting GTM teams with AI-powered Security Questionnaire automation.Managed relationships with security and third party assurance partners, regularly securing favorable terms including discounts from 15-50%.

Toronto, On, Ca

Developed, implemented, and maintained ISO 27001/27002 aligned ISMS, including overseeing threat risk assessment, security awareness training, penetration testing, vendor risk management, and vulnerability management activities.Partnered with product and engineering executives and teams to guide and advise on information security, application security, and privacy practices including development of private bug bounty program.Delivered SOC 2 Type II certification against Trust Services Criteria for the 12-month period beginning 90 days after taking responsibility for establishing the SOC 2 program and successfully maintained unqualified audit opinions in all years.Developed standard Data Protection Agreement aligned to PIPEDA, GDPR and CCPA and began development of privacy program against ISO 27701 framework.Managed customer security assessments, questionnaires, and contract terms and implemented self-service trust portal to significantly reduce response time and effort.Chaired Executive Trust Committee handling Governance, Risk & Audit Management activities reporting to Executive Leadership and the BoardCoordinated and maintained Risk Assessment and Vulnerability Management programs and led security incident response.Led IT Operations function through Remote First transformation while capturing security improvements through implementation of Mobile Device Management (MDM), Zero Trust Network Access (ZTNA) and centralized Identity & Access Management (IAM).

Toronto, On, Ca

Nulogy’s software is embedded in FMCG supply chains worldwide. We create solutions for contract packagers and brands to collaborate and drive down supply chain waste. We’ve been recognized in the Deloitte Technology Fast 50 which identifies the fifty fastest growing tech companies in Canada and as one of AON Hewitt’s Best Employers in Canada.As Quality Lead and a member of our Product Development Leadership team I was primarily charged with developing our testing program while Nulogy more than doubled its number of employees and services. Over ~20 months I scaled up our testing team from 2 to 7 embedded Agile Testers and finally recruited an experienced testing leader to take over the team. I developed a career progression and performance review framework for Agile Testers and supported their growth through regular 1:1s and Radical Candor.During this time I also championed our 21 CFR Part 11 and Eudralex Volume 4 Annex 11 compliance strategy and managed quality audits from customers in the life sciences, pharmaceutical, healthcare, personal care and food sectors. This included establishing an initiative to enhance our development practices using Behaviour Driven Development (BDD) and Specification by Example (SbE).I was also trusted to lead challenging consulting engagements with key customers in the EU and US.After establishing our testing program I shifted my focus to Information Security and Data Protection and am currently leading GDPR and SOC2 compliance efforts.In this role I’ve developed knowledge and skills in BDD, Example Mapping, Cucumber, Amazon Web Services, Event Storming, A Method Hiring, OKRs, 1:1's and Coaching Conversations, Performance Management, Radical Candor, Self Awareness, Good Manufacturing Practices (GMPs), Part 11/Annex 11, Computer System Validation (CSV), ISO Management Systems auditing, Quality Management Systems (ISO 9001:2015), 2017 Trust Services Criteria, Information Security, Privacy, Data Protection, and DevSecOps.

Toronto, On, Ca

Nulogy provides software and services that leverage cloud technology and network federation that allow brands and their suppliers to bring personalized products to consumers more quickly, safely, and intelligently.As a member of the QA team embedded in a cross-functional agile development team I used exploratory and session based testing techniques on all stories and defects and helped guide the direction of QA at Nulogy while working to make testing more effective.The major capability our team delivered was a method, system and apparatus for multi-site production scheduling, for which I am named an inventor on patent applications. As a new team, we came together to deliver an MVP to market in about 4 months and continued to iterate to deliver the most valuable functionality for our target users. I collaborated with a product manager, designer and 5 developers to understand the domain, design wireframes and demo flows, drive features through Test Driven Development and conduct exploratory testing sessions to critique the product and provide feedback on potential issues that we then prioritized or accepted. At our peak we demonstrated characteristics of a high performing, self organizing team like high vulnerability, productive conflict resolution and predictable results. We made a lot of mistakes along the way which we were able to reflect on and improve through regular retrospectives.I also triaged and hunted bugs, helped customer support agents with troubleshooting, and contributed code to our homegrown, cloud distributed continuous integration framework.During this time I developed knowledge and skills in many areas including: Ruby on Rails, rspec, SQL, git, bash scripting, Scrum & XP practices, TDD, continuous integration (CI) with Jenkins, Agile Testing, exploratory testing, small and medium group facilitation, and self awareness.

Worked to understand the needs of clients and ensured product continuously improved to meet them in a high growth startup environment. Individually and as a member of management, sales and development teams guided product development and provided technical sales support while ensuring clients understood and adopted product features. Co-ordinated incident management and response to critical incidents internally and with external partners and conducted root cause analysis for major events. Recommended and implemented mitigation steps to reduce occurrence/impact of similar events. Reporting to CEO, managed team of 5 software developers using Agile project management principles. Responsible for gathering requirements, analyzing and re-engineering client processes and workflows, scoping new features, writing user stories, facilitating estimation, managing the product backlog, leading daily Scrum meetings, removing obstacles, manual testing/QA, conducting sprint reviews, leading demos, communicating progress to and training clients and managing scope creep. Mentored and motivated team members to deliver best-of-breed software under aggressive time constraints. Travelled internationally to implement solutions and train users as well as present panels at industry conferences becoming a leading expert in RFID Access Control for Music Festivals. Implemented Desk.com to improve efficiency of technical support and hired, trained and managed a Tier 1 support agent while investigating and resolving escalated issues. Participated in overall strategic planning with CEO and assisted in posting exceptional annual revenue growth rates and high user satisfaction and retention.

Worked directly with the management teams of major music festivals and music artists providing troubleshooting and technical support for our web based live performance management software via email, phone and proprietary online support forum. Developed company's Customer Support Policy and wrote prepared responses to Frequently Asked Questions. Managed custom development projects when client needs exceeded existing feature set by documenting business needs and use cases, developing specifications, facilitating estimation, conducting manual testing and liaising with client including leading demos. On-boarded new accounts and identified opportunities to increase depth of adoption to ensure high retention rates. Identified patterns in support cases indicating need for improved UX/UI, bug fixes or new features and worked directly with development team to address.

Artist Manager and Digital Consultant for the Music Industry... web development, digital music marketing, social media, tour management, strategy development.Worked with Canadian music artists and record labels to create digital tools (websites, email lists, social media management, e-commerce platforms) to enable direct-to-fan marketing campaigns for engaging and growing their fanbases and strengthening digital revenue streams. Identified business needs, wrote specifications and developed project plans. Sourced and managed developers as necessary to build highly integrated websites and e-commerce platforms using Wordpress, Topspin, Paypal, MailChimp, Fanbridge, Marcato Musician, Google Analytics, and other technologies. Wrote comprehensive user guides for each project and trained clients to empower them to manage their own properties. Guided artists in business development, grant writing, tour booking and managed recording, marketing and touring projects. Clients have been recognized for excellence both regionally and internationally.

Defined and implemented strategy to increase both new and repeat business. Created and coordinated quarterly advertising campaigns and public service announcements (radio, print & online) to increase awareness of safety concerns related to wood heat and masonry and demonstrate need for service. Built and maintained website and online booking system to streamline customer requests for service and improve overall customer relations. Explored and reported on opportunities for market expansion. Launched Residential Air Duct Cleaning service into existing market and contributed to steady overall sales growth year over year.

Responsible for myriad communication initiatives (internal and external) including regular mailouts to constituents and stakeholders and website content. Met with stakeholders on behalf of the Minister to hear their concerns. Researched and wrote Member’s correspondence related to Parliamentary and legislative issues. Wrote speeches to be delivered in the House of Commons and at external events. Researched and wrote questions for daily Question Period. Wrote press releases for national, regional and local media. Staffed the Minister/Member as well as the Prime Minister and Leader of the Opposition at various meetings, interviews and events.

Provided research and communication support to the Leader and caucus critics on issues related to P-12 and post-secondary education issues (i.e. 2004-2005 Province/University Memorandum of Understanding) as well as the film industry. Met with stakeholders on behalf of Caucus and formulated policy proposals for presentation to Caucus. Wrote press releases, correspondence and Question Period questions related to core areas of responsibility as well as other duties as required.

Business & Information Systems

Biology/Biological Sciences, General