Responsible for ensuring data security and contract compliance for the Capgemini Loblaw-SIAM project.

IT security consulting for the Canadian enterprise and large public sector space.

Acted as the senior authority within Allstream on IT security matters (was accountable to the joint Allstream-MTS Security Operations Committee, and to senior management, but functioned on a day to day basis as the decision-making authority for security approval of projects, etc.).This role involved a very wide range of supervisory and Subject Matter Authority tasks, from review / gap analysis of RFP responses to in-depth review of proposed network and telecommunications service architectures to ensure security policy and “best practices” compliance.Consulted with senior management (VPs and Project Managers) to provide advice on current issues in enterprise / telco IT security, threats, risks and possible prevention / mitigation strategies. In particular, stage-managed the introduction of a number of remedial technologies, standards and processes, from vulnerability management / remediation systems, to log reviews, to system hardening, to configuration management, to firewall reviews and much more.

Responsible for all aspects of product and consulting management for VeriSign's affiliate in Canada, particularly the MPKI managed X.509 PKI service and SSL server certificates but also a wide variety of third party security products such as Protego MARS, Juniper / Netscreen IDP and SSL RAS systems, ActivCard and VeriSign Unified Authentication multi-factor authentication, Caymas Identity-based gateways and many more.Responsible for project management (including disaster recovery and business continuity planning, communications, hardware and software provisioning planning for data centre, continuous availability monitoring, cryptographic controls, remote administrator access, strongly authenticated third-party access control, customer-facing HTML interface design / review, change management, business case and competitive analysis) for managed, outsourced security services, including but not limited to VeriSign's MPKI (Managed PKI), a “365x7x24” paradigm Public-Key Infrastructure and Certificate Authority Service.