• Developed a value driven security architecture practice that has resulted in wide adoption of architecture principles and practices across the Cyber Technology Office. This has resulted in deployment of technologies and capabilities that are fit for purpose, extensible, scalable and reliable.• Developed a 5-year strategy and roadmap of security technologies and capabilities for the Cyber Technology Office that capitalize on platform synergies to enhance protection for the Bank in alignment with the Global Cybersecurity Services strategy and the evolving threat landscape.• Partnered with stakeholders to design and follow a rigorous and consistent process for seeking and evaluating technologies to achieve a high degree of confidence that a selected product is fit for purpose.• Owned the transformation portfolio that delivered next generation cyber technologies in partnership with engineering and operations teams that enhance protection for the Bank to keep pace with the evolving threat landscape, while optimizing cost structures. • Led remediation of regulatory findings from US and Canadian bodies including the OCC, FRB and OSFI. • Partnered with Investment Banking teams on strategic partnerships with emerging vendors to help shape capabilities and product development that are fit for the Bank. • Provide cybersecurity insights to Investment Banking and Private Equity teams

• Transcending conventional data security controls by combining data protection technologies with data science models to gather, predict and prevent data exfiltration behaviors. • Enhancing business capabilities while increasing control posture by strategizing and enabling the shift from "on or off" to granular controls through the use of a Cloud Access Security Broker (CASB).• Services under my leadership: Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), Database Encryption, Database Activity Threat Monitoring.

• Led the strategy and execution of the GTI Operational Risk Management program, including enterprise and unit risk control assessments, controls testing and monitoring of control effectiveness.• Managed and provided oversight to GTI’s risk program, which includes operationalization of the risk control framework, inventory and assurance over key controls as well as compliance against policies and standards.

• Program advisory council member for Cloud Architecture and Administration

• Led a team of advisers that successfully partnered with business and technology teams through the assessment, design and implementation of controls that are commensurate with business risk. Services led under my direction include: Threat Risk Assessments (TRA), third party and outsourcing vendor assessments as well as controls consulting for technology implementations. • Transformed the team’s operating model to utilize a business-centric approach to recommending pragmatic controls that resulted in significant uplift to customer satisfaction and voluntary business line engagement.

• Led the analysis of the Bank’s “lines of defense” posture against cyber risks, including the adequacy of independent assessment over operational areas and maturity of “challenge-response” mechanisms.• Advised and collaborated with the first and second lines of defense on a controls inventory and oversight strategy that strengthened the Bank’s posture and resiliency against a multitude of threat vectors.

• Advised senior management, business lines and project teams on the implementation of cost-effective and business-aligned security solutions that span infrastructure, applications and third-party outsourcing.• Led threat risk assessments over Scotiabank’s subsidiaries, business partners and outsourcers to ensure protection of Bank assets across an array of functions including brokerage, credit/cheque processing, online banking and mobile solutions.

• Consulted for Big 5 Canadian financial institutions in the areas of privileged access management, ISO certification, data protection and security strategy.