Principal Consultant of Carmel Info-Risk, Edward is a veteran of over 17 years in information risk, security, governance, compliance and privacy, and an additional 15+ years in auditing, retail systems and financial systems, and e-commerce development.

As Security Director at two public companies, Edward founded a cybersecurity function at each, and also led one to its first Level II PCI compliance certification.

As a trusted advisor, Edward has applied his information risk expertise in numerous industry sectors including retail, tourism, technology, transportation, education, health, government, mining, financial services, and e-commerce. Edward is conversant with various regulations, including PCI, and SOC 2.

Edward is a Past President and Board volunteer of ISACA Vancouver for the past 10 years, was co-founder of the award-winning BC AWARE CAMPAIGN, and founding member of the Government of British Columbia’s Provincial Security Advisory Council (BC-PSAC). Edward is also an advisor to the Vancouver International Privacy & Security Summit, and a member of the Cyber Security Collaborative Forum. Edward was also recently awarded the 2022 Distinguished Service Award by the CPA Association of British Columbia.

Ashief is a steadfast and experienced cyber security professional with a demonstrated fourteen years history of working in various industries such as Government, Utilities, Energy, BPO, Telco, and Retail sectors.

He is working as a IT Security Architect at the Provincial Health Services Authority, BC and the duties are including but are not limited to all aspects of security, governance, risk, and compliance. Ashief received his Master of Information Technology and MBA (major in Management Information Systems) from the University of Dhaka and holds 35 IT and Security related certifications CISA, CISM, CDPSE, CCSK, and other designations. He also holds a bachelor’s degree in Computer science and Engineering. He is currently working as a Cybersecurity faculty at the Canadian College of technology and business and Vancouver Community College. Here is a snapshot of his academic and professional career.

• Arranged and attended as a guest speaker in 20+ security and cloud-related conferences
  around the world.
• Trained more than 900 people in different IT domains until date.
• Conducted international training like CISA, CISM, CRISC, ISO 27001 LA, ISO 27001 LI, PCI-DSS, SOC 2, Prince 2, ITIL, CCSK, and CCSP in different countries like India, Saudi Arab,UAE, Sudan, Germany, etc.
• 14+ years of experience in IT infrastructure, cloud, and cybersecurity domain, managed more than 100 projects in developing a cybersecurity environment, risk management, cloud infrastructure, and security deployment, network, application, and infrastructure security deployment.
• Achieved one of the highest number of certifications (35 to date) in IT, Security, and Cloud domains and planning for another 14 by end of 2023.
• Worked as a CISO in a Fortune 500 company with 2000+ human resources and 64 members’ team.
• Worked with 70+ USA, Asian and European companies (Like Expedia, Bloomberg, AOL, Triad, BBC, GAP, M&S, and Tetra Pak) to build their overall infrastructure in IT and Security domains.
• Experienced in deploying Business continuity planning, disaster recovery planning, IDS, IPS, SIEM, SICM, Nexgen firewalls, routers, CSOC, switches, and clouds migration in Amazon, Google, and Azure platforms.
• Implemented frameworks like ISO 27001, ISO 9001, ISO 14001, CMMI, CMMC, PCI-DSS, SOC 1, HIPAA, FIPPA, and SOC 2 in 22 organizations. Conducted internal and external audits for 11 organizations.
• Worked as an ISACA mentorship program co-director at the ISACA Vancouver Chapter and recently nominated as a co-director of the GRC program.
• Implemented cloud security and deployment solutions along with hackathons, and VAPT programs in numerous organizations.
• Worked as a risk advisory and audit board member in multiple educational institutions.

Ashief is a steadfast and experienced cyber security professional with a demonstrated fourteen years history of working in various industries such as Government, Utilities, Energy, BPO, Telco, and Retail sectors.

He is working as a IT Security Architect at the Provincial Health Services Authority, BC and the duties are including but are not limited to all aspects of security, governance, risk, and compliance. Ashief received his Master of Information Technology and MBA (major in Management Information Systems) from the University of Dhaka and holds 35 IT and Security related certifications CISA, CISM, CDPSE, CCSK, and other designations. He also holds a bachelor’s degree in Computer science and Engineering. He is currently working as a Cybersecurity faculty at the Canadian College of technology and business and Vancouver Community College. Here is a snapshot of his academic and professional career.

• Arranged and attended as a guest speaker in 20+ security and cloud-related conferences
  around the world.
• Trained more than 900 people in different IT domains until date.
• Conducted international training like CISA, CISM, CRISC, ISO 27001 LA, ISO 27001 LI, PCI-DSS, SOC 2, Prince 2, ITIL, CCSK, and CCSP in different countries like India, Saudi Arab,UAE, Sudan, Germany, etc.
• 14+ years of experience in IT infrastructure, cloud, and cybersecurity domain, managed more than 100 projects in developing a cybersecurity environment, risk management, cloud infrastructure, and security deployment, network, application, and infrastructure security deployment.
• Achieved one of the highest number of certifications (35 to date) in IT, Security, and Cloud domains and planning for another 14 by end of 2023.
• Worked as a CISO in a Fortune 500 company with 2000+ human resources and 64 members’ team.
• Worked with 70+ USA, Asian and European companies (Like Expedia, Bloomberg, AOL, Triad, BBC, GAP, M&S, and Tetra Pak) to build their overall infrastructure in IT and Security domains.
• Experienced in deploying Business continuity planning, disaster recovery planning, IDS, IPS, SIEM, SICM, Nexgen firewalls, routers, CSOC, switches, and clouds migration in Amazon, Google, and Azure platforms.
• Implemented frameworks like ISO 27001, ISO 9001, ISO 14001, CMMI, CMMC, PCI-DSS, SOC 1, HIPAA, FIPPA, and SOC 2 in 22 organizations. Conducted internal and external audits for 11 organizations.
• Worked as an ISACA mentorship program co-director at the ISACA Vancouver Chapter and recently nominated as a co-director of the GRC program.
• Implemented cloud security and deployment solutions along with hackathons, and VAPT programs in numerous organizations.
• Worked as a risk advisory and audit board member in multiple educational institutions.

Mary Carmichael is an operational risk and security metrics consultant with a passion for solving problems with data. She brings her expertise in strategic planning, service delivery, risk management, and cybersecurity to help organizations visualize what risk-based decision-making really looks like in practice. Her superpower is making the vision of integrated risk management a reality with an innovative and procedural approach that fits the culture of the organization.

Mary has over 15 years of experience in various sectors including financial services, utilities, higher education and government and is currently working with ISACA International on its Agile Risk Management framework and sits on its Global Risk Advisory Committee. She has the following designations – CPA, MBA, CISA, CRISC, PMP, COSO, ITIL, and CSM.

Rossilyne Tan is an avid cybersecurity practitioner who focuses on bridging the gap between technology and its users. Her expertise lies in security awareness and endpoint protection. She often conducts speaking engagements to educate corporations on the current threat landscape and how to prevent users from falling trap on the latest phishing tactics.

Her experience working in both the public and private sectors has shaped her approach in ensuring that her clients receive accurate and actionable security strategies.

In her spare time, she volunteers for ISACA Vancouver Chapter as the Vice President. Prior to that, she was the director of SheLeadsTech and the associate director of the Programs Committee. Her goal is to give back to the community that has inspired and empowered her to advocate for diversity, equity, and inclusion in the technology sector.

Todd is the Cybersecurity Program Coordinator and Instructor for the Abbotsford School District Careers Department. He also serves as the Chair of the High School Partnership Program on the ISACA Vancouver Board. With the ongoing labour shortage in the cybersecurity industry in British Columbia and globally, Palo Alto Networks partnered with a number of school districts in BC to promote cybersecurity among high school students, and to certify them with entry level certification, skills and knowledge. Todd has brought this program to fruition in Abbotsford and promotes high school cybersecurity across the province through his role with ISACA. He believes that we shouldn’t wait until students graduate high school, let alone post-secondary before we prepare them for a career in cybersecurity. Let’s work together to bring this about today.

Anthony Green is currently the Manager of Security Operations and Compliance Manager (MSOC) at Chartered Professional Accountants of British Columbia. the MSOC`s key responsibility is leading the team in charge of creating the security program. This includes a mixture of managing security staff and security vendors.

Anthony is also currently working with UBC as their Lead for Cybersecurity Academic Programs and is working on creating a professional certificate in cyber security program management. In the evenings Anthony teaches the Cyber Security Micro-Credential at UBC.

Anthony is very enthusiastic about giving back to the local Information Security community through mentoring young graduates and teaching local small businesses the fundamentals of cybersecurity that they would otherwise not have been exposed to.