Jarett is CEO and Lead of C3SA Cyber Security Audit Corp. as well as Board Chair and Lead of Security BSides Ottawa – Canada's largest grassroots cybersecurity unconference. He brings more than 20 years of experience leading teams that deliver data privacy, cyber security and resilience solutions within government, military, law enforcement, aerospace, transportation, healthcare, energy, finance, education, research, software development and telecommunications environments. His scope of specialized knowledge and expertise include, but are not limited to: * Cyber Security Program Modernization * Cyber Threat Hunting and Intrusion Analysis * Vulnerability Assessment (VA) and Penetration Testing (Pentest) * Cyber Forensics and Incident Response * Cyber Maturity Assessment and Compliance Audit * Threat and Risk Assessment (TRA) and Certification and Accreditation (C&A) * vCISO and Incident Response Planning and Tabletop ExerciseTop Secret clearance and Controlled Goods Program certificate.Certified CISO, CISSP, CGRC, CISA, CRISC, GMON, GSNA, OPST, ISO 27001 LA, CMMC RPO and RP in good standing with (ISC)2, ISACA, SANS, ISECOM, PECB, and Cyber AB respectively.Specialties: Extensive cyber security risk management and compliance audit experience including ISO 27001, 27017, 27018, 27034, 22301, CESG CAS(T), FedRAMP, NIST CSF and SP800-53, CMMC, 171 and 172, ITSG-33 and CCCS CSP ITS Assessment, OSFI, and PCI DSS.Versatile architect, designer, implementer, assessor and auditor of world-class Data Centres (DC) and Information Protection Centres (IPC) complete with integrated NOC, SOC and SIRT capabilities for governments and critical infrastructures spanning Canada, US and UK.Highly proficient in passive recon, vulnerability assessment, pentesting, and configuration audit of network infrastructure, system, web & mobile application, database, cloud, remote and wireless security.Avid threat hunter with a knack for developing use cases that detect threats and anomalous behaviours outside of typical signatures, rules and heuristics based security investments. Sound digital forensics and incident management expertise in response to targeted, complex and widespread cyber intrusions, ransomware, malware, fraud and collusion, and unacceptable use of technology.