Jarett is CEO of C3SA Cyber Security Audit Corp. as well as Board Chair and Lead of Security BSides Ottawa – Canada's largest grassroots cybersecurity unconference. He brings more than 20 years of experience leading teams that deliver data privacy, cyber security and resilience solutions within government, defence, law enforcement, aerospace, maritime, transportation, healthcare, energy, finance, education, research, software development and telecommunications environments. His scope of specialized knowledge and expertise include, but are not limited to:

* Cyber Security Program Modernization
* Cyber Threat Hunting and Intrusion Analysis
* Vulnerability Assessment (VA) and Penetration Testing (Pentest)
* Cyber Forensics and Incident Response
* Cyber Maturity Assessment and Compliance Audit
* Threat and Risk Assessment (TRA) and Certification and Accreditation (C&A)
* vCISO, Incident Response Planning, and Tabletop Exercises

Top Secret clearance and Controlled Goods Program certificate.

Certified CISO, CISSP, CGRC, CISA, CRISC, GMON, GSNA, OPST, ISO 27001 SLA, CMMC RPO and RP in good standing with (ISC)2, ISACA, SANS, ISECOM, PECB, and Cyber AB respectively.

Specialties:

Extensive experience in cybersecurity risk management and compliance auditing, including ISO 27001, 27017, 27018, 27034, 22301; CESG CAS(T); FedRAMP; NIST CSF and SP 800-53; CMMC 2.0 Levels 1–3; IEC 62443; ITSG-33; CPCSC; CCCS CSP ITS Assessment; NIS2 and DORA; OSFI; and PCI DSS.

Versatile architect, engineer, trainer, assessor, and auditor of world-class Data Centres (DC) and Information Protection Centres (IPC), complete with integrated NOC, SOC, and SIRT capabilities for governments and critical infrastructure across Canada, the U.S., the U.K., and the EU.

Highly proficient in passive recon, vulnerability assessment, pentesting, and configuration audit of network infrastructure, system, web & mobile application, database, cloud, remote and wireless security.

Avid cyber defender and threat hunter with a talent for developing use cases that detect threats and anomalous behaviours outside of typical signatures-, rules-, and heuristics-based security investments.

Sound digital forensics and incident management expertise in response to targeted, complex and widespread cyber intrusions, ransomware, malware, fraud and collusion, and unacceptable use of technology.