Bryan Zarnett Email & Phone Number

Canada

Ontario, Canada

Development of Secure SDLC for risk-management solution including measures related to AI/ML, Cloud-based Solutioning, and CI/CD within a Scrum/Extreme Programming methodology.Prioritized IAM strategy for migrating on-premises systems to an Azure-based IAM solution, leveraging Active Directory and Entra to enhance security and streamline access management.Developed AWS architecture related to managed Microsoft AD, including VPC configurations, to improve network security and… Show more Development of Secure SDLC for risk-management solution including measures related to AI/ML, Cloud-based Solutioning, and CI/CD within a Scrum/Extreme Programming methodology.Prioritized IAM strategy for migrating on-premises systems to an Azure-based IAM solution, leveraging Active Directory and Entra to enhance security and streamline access management.Developed AWS architecture related to managed Microsoft AD, including VPC configurations, to improve network security and operational efficiency.Provided directional leadership and development of practices following NIST and CIS standards as a virtual CISO for clients in the financial and retail industries.Collaborated closely with engineering teams to implement secure development practices, including threat modeling and integrating security tools within CI/CD pipelines for cloud-native applications.Leveraged Splunk for comprehensive security monitoring, incident response, and threat analysis, to identify and mitigate potential security threats, ensuring compliance with industry standards.Led cloud infrastructure security initiatives on AWS, with a focus on managed services and container security, ensuring compliance with security best practices and governance.Development of threat model associated to LLM and Federated AI to provide input to security architecture in an AWS environment utilizing related technologies/solutions. Show less

Markham, Ontario, Canada

I elevated organizational security maturity and met corporate expectations by executing comprehensive security audits, risk assessments, vulnerability assessments, and penetration tests. This approach ensured a robust and adaptive security framework by developing, reviewing, and refining information security policies, standards, and procedures. These efforts were aligned with our security strategy, regulatory requirements, CIS safeguards, and NIST best practices.By engineering security… Show more I elevated organizational security maturity and met corporate expectations by executing comprehensive security audits, risk assessments, vulnerability assessments, and penetration tests. This approach ensured a robust and adaptive security framework by developing, reviewing, and refining information security policies, standards, and procedures. These efforts were aligned with our security strategy, regulatory requirements, CIS safeguards, and NIST best practices.By engineering security architecture and threat modeling for bespoke applications and cloud solutions using STRIDE and DREAD models, I provided comprehensive insights into implementation, controls, and potential vulnerabilities. I enhanced security practices in cloud environments (Amazon and Azure) by providing strategic direction and integrating security practices for seamless integration of EDR and SIEM solutions, supplemented by Azure and AWS-specific security elements.I devised risk mitigation strategies across the supply chain by establishing vendor risk management practices utilizing risk identification services. I improved operational efficiency and compliance readiness by streamlining SOC1, SOC2, and PCI audit timelines by two months. Conducted architectural reviews and providing expert guidance for a client-facing IAM solution integrated with an open banking platform, I facilitated secure and efficient customer transactions. I maintained compliance with industry standards and regulatory requirements, including Interac, MasterCard, OFSI, and PCI, through effective management of compliance and risk management efforts.To facilitate informed decision-making and demonstrate accountability, I delivered detailed reports on security risks and compliance status to executives and shareholders. Lastly, I instilled a positive security culture, mitigated corporate risk, and enhanced employee capabilities by innovating a multi-channel security awareness training program with role-based objectives. Show less

Toronto, Canada Area

I offered strategic advice and guidance to organizations within the financial, nuclear, and retail sectors. My role involved aligning their policies, procedures, and operational guides with industry standards such as NIST, COBIT, and CIS to ensure adherence to best practices in cybersecurity.I conducted architectural and design reviews of both infrastructure and application systems, with a particular focus on Cloud solutions. This included developing team and operational strategies for… Show more I offered strategic advice and guidance to organizations within the financial, nuclear, and retail sectors. My role involved aligning their policies, procedures, and operational guides with industry standards such as NIST, COBIT, and CIS to ensure adherence to best practices in cybersecurity.I conducted architectural and design reviews of both infrastructure and application systems, with a particular focus on Cloud solutions. This included developing team and operational strategies for security assessments and penetration testing to ensure robust protection measures.I led the strategic design and implementation of DevOps migrations for client organizations. This involved facilitating the seamless integration of security practices into development and operations processes.In support of pre-sales activities, I engaged in scoping and managing proactive security assessments. I led penetration testing and vulnerability assessment efforts, ensuring robust security measures and proactive risk mitigation strategies.Key Achievements:Implemented effective methodologies and procedures to streamline security assessment processes, maximizing efficiency and accuracy in identifying and addressing security vulnerabilities.Provided litigation support on IT security, intellectual property, and software development cases as an expert witness, contributing valuable insights and expertise to legal proceedings.Conducted comprehensive gap analysis using NIST and CIS practices and controls, enabling the identification and prioritization of security vulnerabilities for remediation.Offered insightful threat analytics related to emerging software development, informing proactive security strategies and promoting secure coding practices.Mentored team members and client-specific teams on group dynamics, secure Software Development Life Cycle (SDLC), and security practices.Oversaw business development activities through pre-sales support, scoping, and content development. Show less

Global

I am frequently doing a variety of projects for friends, family and organizations of various sizes in a variety of fields I have experience in including Publishing, Book Design, Software Development, Webpage Design and more. Some of the more recent projects include:Professional Publications. Development of eBooks related to the Martial Arts including global publication of content through Lulu, Amazon, and other book services. Books included those on Jeet Kune Do (5 volumes), "Mastering… Show more I am frequently doing a variety of projects for friends, family and organizations of various sizes in a variety of fields I have experience in including Publishing, Book Design, Software Development, Webpage Design and more. Some of the more recent projects include:Professional Publications. Development of eBooks related to the Martial Arts including global publication of content through Lulu, Amazon, and other book services. Books included those on Jeet Kune Do (5 volumes), "Mastering Kenpo: The Path to Excellence", and "Aware" by Skip HancockExercise Cards. Creation of exercise cards for problem solving in the martial arts known as "Cycle Stories".International Presentations. Presentations on Software Best Practices, Agile Methodologies, and Java development at computer science conferences in the United States, Europe, and Hong Kong including the "Colorado Software Summit", "Agile Hong Kong Conference", "Scrum MasterMind Gathering", and user groups including the "XP/Agile Toronto" and "Toronto JUG." Show less

Toronto, Canada Area

I spearheaded security engagements, taking charge of penetration testing and vulnerability assessments to conduct thorough evaluations of systems. This ensured the identification and mitigation of vulnerabilities, thus safeguarding client assets with the highest level of security.To optimize business execution and development strategy, I developed and refined team methodologies. This enhancement improved efficiency in service delivery and overall operational… Show more I spearheaded security engagements, taking charge of penetration testing and vulnerability assessments to conduct thorough evaluations of systems. This ensured the identification and mitigation of vulnerabilities, thus safeguarding client assets with the highest level of security.To optimize business execution and development strategy, I developed and refined team methodologies. This enhancement improved efficiency in service delivery and overall operational effectiveness.Comprehensive training programs were implemented to equip team members with the necessary skills and proficiency to execute strategies and deliver exceptional services. Concurrently, I provided mentorship and coaching in consulting practices and security engagement activities, nurturing professional growth and ensuring consistent high-quality service delivery to clients.In a role that demanded visionary leadership, I directed a threat/vulnerability team to surpass technical and sales targets, achieving exceptional results and ensuring client satisfaction.Additionally, I led the architecture, design, and development of distributed applications, prioritizing secure solutions fortified against potential threats.Key Achievements:Conducted ethical hacking activities on software and web applications, identifying vulnerabilities and strengthening security measures to mitigate potential risks.Evaluated and refined services to align closely with customer needs, thereby enhancing customer satisfaction and driving increased demand for services, leading to enhanced revenue and market share.Oversaw and conducted digital forensic investigations related to software solutions and malware incidents, providing critical insights and evidence crucial for incident resolution and prevention. Show less

Toronto, Ontario, Canada

I oversaw the orchestration of infrastructure architecture and software design to ensure the development of secure solutions, resulting in robust and resilient systems. This involved hands-on testing and validation of software solutions, meticulously verifying security mechanisms to effectively mitigate risks and vulnerabilities.In addition to technical oversight, I supervised pre-sales activities, consultations, and scoping exercises with clients. Throughout the sales process, I… Show more I oversaw the orchestration of infrastructure architecture and software design to ensure the development of secure solutions, resulting in robust and resilient systems. This involved hands-on testing and validation of software solutions, meticulously verifying security mechanisms to effectively mitigate risks and vulnerabilities.In addition to technical oversight, I supervised pre-sales activities, consultations, and scoping exercises with clients. Throughout the sales process, I ensured clear and effective communication to facilitate successful project acquisitions.Key Responsibilities:Strategically managed and recruited top-tier talent for Digital Wyzdom's application security and software development teams, enhancing team capabilities and performance.Directed the application security professionals' team at Digital Wyzdom, leveraging subject matter expertise to drive excellence and ensure comprehensive security across applications. Show less

Toronto, Ontario, Canada

Leadership and Implementation of Software Development Methodologies for small business and Enterprise organizations with a focus on the use of Rational Unified Process (RUP), Extreme Programming, and ScrumTeam leadership, enterprise architecture, and software development for Enterprise organizations including Bank of Montreal (BMO), CIBC, Royal Bank of Canada (RBC), Toyota, and Public-sector clusters/ministries.Development of on-line banking solutions using Java and J2EE… Show more Leadership and Implementation of Software Development Methodologies for small business and Enterprise organizations with a focus on the use of Rational Unified Process (RUP), Extreme Programming, and ScrumTeam leadership, enterprise architecture, and software development for Enterprise organizations including Bank of Montreal (BMO), CIBC, Royal Bank of Canada (RBC), Toyota, and Public-sector clusters/ministries.Development of on-line banking solutions using Java and J2EE frameworks, supporting critical operations such as payments, lending, real-time financial reporting and analytics, and treasury management.Leadership in software development and architectural best practices for Enterprise solutions related to data management, secure code solutions, financial systems, and distributed systems. Show less