Professional Spotlight

Name: Shawn Thompson

Navigating the Cyber Seas: A Journey with a Cybersecurity Trailblazer
In the fast-paced world of cybersecurity, every journey begins with a spark of inspiration and a quest for knowledge. This month in our member spotlight, we feature Joseph Shawn Thompson who for 25 years ran his own business, Thomtech Computer Service, providing IT/Cybersecurity services that covered all aspects of cybersecurity relevant to each organization from design to hardware/software solutions to security awareness, policy development, consulting and guidance. Thompson is now a sessional Instructor in the Information Systems Security Management graduate program at Concordia University of Edmonton.

Q) How did you initially become interested in the field of cybersecurity, and what motivated you to pursue it as a career?
Growing up surrounded by a lineage of tech-savvy individuals, my journey into the realm of cybersecurity was inevitable, with my father being a former Communicator (S)upplementary in the Royal Canadian Navy, an avionics expert in the Royal Canadian Armed Forces, and a partner in Tundra Technical Industries and Avionics. After earning a diploma in Computer Maintenance Technology in 1994-95, I embarked on my own entrepreneurial venture, Thomtech Computer Service. Cybersecurity, then known as information security, quickly emerged as a critical focus area as I provided IT solutions to small and medium-sized organizations in Edmonton."

Q) What role do you currently hold?
I am a sessional instructor in the Information Systems Security Management and Faculty of Management programs, as well as the program liaison. In 2022, I was awarded Sessional Instructor of the Year at Concordia University of Edmonton.

Q) What notable contributions have you made to the cybersecurity community?
I would say my most notable contributions to the cybersecurity community have come over the past five years through program development and teaching the next generation of cybersecurity professionals at Concordia University of Edmonton (CUE). I helped develop an online introductory cybersecurity course and organized monthly InfoSec Seminars with Dr. Eslam Abdallah, featuring various speakers and topics. The seminars are free, open to the public, and accessible online. I also worked with Dr. Sergey Butakov to create a cybersecurity emphasis in the Bachelor of Management program at CUE. Now, I am leading an initiative to expand this emphasis into a full major. In recent years, I have worked to build closer ties between CUE and ISC2 Alberta. Together with Hyma Pandyaram, and CUE students we began hosting joint cybersecurity events and encouraged students in creating a campus wide CUE ISC2 Alberta Student club.

Q) In your opinion, what are the most pressing cybersecurity challenges that organizations and individuals currently face?
I believe the most pressing cybersecurity challenge has always been perception. Cybersecurity challenges are still often treated as IT security issues rather than as business problems and opportunities. While headway has been made many people and organizations still cling to that perception which in my opinion makes them vulnerable regardless of the evolution and advances in the technologies we use and embrace. People remain the greatest vulnerability in cybersecurity and can also be one of our greatest strengths when properly educated and motivated.

Q) How do you believe these challenges can be mitigated or addressed effectively?
No challenge can be completely mitigated; however, I believe that as cybersecurity awareness, training, and education continue to grow the risk presented by the challenges will be minimized. A key factor is the awareness, knowledge and necessary skills needed to spread beyond cybersecurity experts. Business leaders, managers, and users need to have the knowledge, education, and skills to be part of the cybersecurity solution. This means breaking down barriers between cybersecurity and other organizations, professions, and trades to better enable a holistic and collaborative approach to cybersecurity.

Q) Can you share any long-term goals or aspirations you have as a cybersecurity expert?
My long-term goals are to continue teaching and sharing my knowledge and experience with current and future cybersecurity professionals and students. I am committed to seeing CUE's cybersecurity programs become as successful as can be. CUE has been educating graduates in cybersecurity for 20+ years and is still what I consider to be the best-kept secret in Canada. It is my goal to see that change by more Canadian students and professionals becoming educated in cybersecurity.

In the ever-evolving world of cybersecurity, this trailblazer's journey serves as a reminder of the power of passion, education, and collaboration. As Shawn continues to shape the future of cybersecurity, may his efforts inspire us all to strive for a more secure digital world.

If you want to continue to conversation with Shawn, find him on LinkedIn.

Name: Srinivasa Rao

Srinivasa Rao a new wave of cybersecurity professionals with fresh perspectives!
Meet Srinivasa Rao, an emerging professional in the field of cybersecurity. Recently completed his Certified in Cybersecurity by ISC2, Srinivasa is poised to transition his career towards this dynamic and critical field.

Q) How did you initially become interested in the field of cybersecurity, and what motivated you to pursue it as a career?
"My journey into cybersecurity was fueled by a keen interest in understanding the ever-evolving digital threats and the challenge of defending against them. With my Certified in Cybersecurity certification in hand, I’m eager to delve deeper into cybersecurity, drawn by its rapidly changing landscape and the opportunity to make a significant impact."

Q) What notable contributions have you made to the cybersecurity community?
"While still in the early stages of my cybersecurity career, I haven’t yet had the opportunity to publish research or develop tools. However, I’m actively involved in identifying and addressing threats and vulnerabilities within my organization. This hands-on experience is laying the groundwork for future contributions to the field."

Q) Which ISC2 certifications do you currently hold?
"I hold the Certified in Cybersecurity by ISC2, an important stepping stone in my cybersecurity career. This certification is a testament to my foundational knowledge and my commitment to growing in this field."

Q) In your opinion, what are the most pressing cybersecurity challenges that organizations and individuals currently face?
"I emphasize that the most pressing challenge in cybersecurity is keeping pace with its rapid advancement and change. Every day new threats, vulnerabilities and impacts to society are revealed with varying degrees of impacts to organizations and individuals alike. The traditional thought that Cyber Security was a fun sport of some script kiddies with a hoodie in a basement playing with computers to being a full fledged field where Nation State Actors are constantly probing and looking for ways to harm their enemies and cause damage to human safety. The challenge lies in staying ahead of these threats and safeguarding not just data, but human safety."

Srinivasa Rao represents the new wave of cybersecurity professionals – individuals who are entering the field with fresh perspectives and a determination to tackle its challenges. As he continues his journey, gaining more expertise and ISC2 certifications, Srinivasa is poised to make significant contributions to the cybersecurity community, helping to shape a safer digital world.

Thank you for your thoughts and insight Srinivasa. If you want to continue to conversation with Srinivasa, find him on LinkedIn.

Name: Stephanie Remniak

From Dual Roles to Cybersecurity Crusader: A Conversation with a Cybersecurity Educator
In the ever-evolving landscape of cybersecurity, individuals with unique backgrounds and perspectives often bring fresh insights to the table. This month in our member spotlight, we feature Stephanie Remniak, one such individual, she started her career in IT, held a side gig as a paramedic, and is now the Academic Chair of the Computer Network Administrator program at NAIT. Let's dive into her journey, contributions, and thoughts on the pressing challenges of the cybersecurity world.

Q) How did you initially become interested in the field of cybersecurity, and what motivated you to pursue it as a career?
"I initially started my career in IT and from there did a side evening gig as a paramedic. While working both jobs, I observed how data mishandling was quite common and was often met with a dismissive attitude of 'Oh well...'. It became evident that people lacked awareness of the severity of this issue. This frustration fueled my desire to educate both businesses and individuals about the critical importance of proper data handling."

Q) What role do you current hold?
"I am the Academic Chair of the Computer Network Administrator program at NAIT."

Q) What notable contributions have you made to the cybersecurity community?
"Over the past few years, I've actively participated in the BSides event in Edmonton. It's been a fantastic platform to exchange ideas, share insights, and learn from fellow cybersecurity enthusiasts."

Q) In your opinion, what are the most pressing cybersecurity challenges that organizations and individuals currently face?
"The ever-accelerating pace of technological change presents a formidable challenge. New innovations emerge almost daily, and pinpointing vulnerabilities in this constantly evolving tech landscape can be daunting.
Another concerning issue is the lack of understanding of Canadian and Provincial data breach laws among some in the IT community. Some self-proclaimed "experts" fail to comprehend their legal obligations when a breach occurs, sometimes choosing to hide the incident rather than reporting it. This is a significant concern."

Q) How do you believe these challenges can be mitigated or addressed effectively?
"Staying on top of rapidly changing technology can be a Herculean task, but remaining vigilant and sharing experiences within the cybersecurity community is crucial. As for the issue of legal compliance, organizations handling personal, or health information must ensure they are well-versed in Canadian and Provincial laws. Education and awareness are key to mitigating this challenge."

Q) Can you share any long-term goals or aspirations you have as a cybersecurity expert?
"My primary goal is to continue educating students and individuals about cybersecurity issues and equipping them with the knowledge to protect themselves and their organizations. The ever-evolving world of cybersecurity offers a vast field for exploration, and I want to be at the forefront of knowledge dissemination."

Thank you for your thoughts and insight Stephanie.

Name: Omokolade Ogunleye

A Journey into Cybersecurity: Passion, Contribution, and Challenges
In this month’s feature, we had the pleasure of conversing with Omokolade Ogunleye who is making his mark in the fast-paced world of cybersecurity with a unique blend of passion, curiosity, and dedication. Omokolade is no stranger to the ISC2 Alberta Community; we credit him for helping us maintain the seamless operation of our website. Keep reading for insights into his journey from his love of technology to what he feels are the pressing challenges of the field.

Q) How did you initially become interested in the field of cybersecurity, and what motivated you to pursue it as a career?
"My journey into the realm of cybersecurity was ignited by an immeasurable love for technology and a naturally curious personality. Then, I was accustomed to building and misusing stuff and having fun doing them, which led me to make defending and protecting the digital jewels that we value so dearly today a career. My career in cybersecurity is driven by a combination of passion, curiosity, hard work, and unwavering commitment. As time went on, I also recognized how lucrative working in this field could be."

Q) What roles or positions have you held in the cybersecurity industry?

• · Security Engineer
• · Information Security Officer
• · Technology Risk Consultant

Q) What notable contributions have you made to the cybersecurity community?
"My proudest contribution to the community is the folks I have helped to get started in cybersecurity. Mentoring and supporting newcomers have been a rewarding endeavor. Other contributions, including research, tools development, and blogging at https://infosecbyomokolade.com, are all ongoing, while others are in the pipeline."

Q) In your opinion, what are the most pressing cybersecurity challenges that organizations and individuals currently face?
"Among the myriad challenges in cybersecurity, one often overlooked issue is the prevalence of incompetence and ill-preparedness that impairs resilience. These challenges are significant and warrant more attention."

Q) How do you believe these challenges can be mitigated or addressed effectively?
"While comprehensive solutions can't be condensed into a few sentences, the key lies in doing the right thing. Rethinking how we recruit and prepare our cybersecurity workforce is vital. Cyber adversaries don't tolerate mediocrity, and they only need one victory to inflict substantial damage. On the defensive side, an incompetent team will struggle to prevail. We must always be vigilant, proactive, at the top of our game, and ready to win on all fronts."

Q) Can you share any long-term goals or aspirations you have as a cybersecurity expert?
"My personal vision and mission statements, as they apply to every aspect of my life, are no exception to my career as a cybersecurity professional:
Vision statement: A place where efficiency, resiliency, sustainability, and getting the best are the norm. Mission statement: Solving problems through sustainable innovations and automation with optimum reliability.
I do not consider myself an expert in the field. I am far from it. I see information security as a journey. That said, my long-term goal in this journey is to make my mark by tackling the industry's most challenging problems sustainably through research, innovations, and automation in such a way that makes us think about cybersecurity differently—ways that make our adversaries want to quit."

If you loved learning hearing Omokolade’s thoughts as much as we did, then check out his blog at https://infosecbyomokolade.com

Name: Prashant Prashant

Cracking the Code: A Candid Conversation with a Cybersecurity Guru
This month in our member spotlight, we feature Prashant, we were able to have a casual yet enlightening discussion with this cybersecurity aficionado who's been navigating the digital trenches for years. From quirky origins to the heart of industry challenges, keep reading for a glimpse into his journey, contributions, and hopes for the future.

Q) How did you initially become interested in the field of cybersecurity, and what motivated you to pursue it as a career?
"Cyber Security has always been a passion for me, my fascination with it was ignited during my research days, particularly in Quantum Cryptography. The constant cat-and-mouse game between attackers and defenders intrigued me. The mystery of what adversaries could uncover and how defenders would respond hooked me into making it my career. It's like a never-ending puzzle and it motivates me to keep up with this field every day and every moment of my career."

Q) What roles or positions have you held in the cybersecurity industry?

• · Linux Administrator
• · IT Administrator
• · Cyber Security Specialist
• · Cyber Security Manager
• · Cyber Security Advisor
• · IT Security Architect & Standards Lead

Q) What role do you currently hold?
"I'm currently a Senior Cyber Security Advisor, leading the charge in helping organizations stay a step ahead in the cybersecurity game."

Q) What notable contributions have you made to the cybersecurity community?
"I have been an avid researcher and public speaker expounding the tenets of cybersecurity to the upcoming generation of cybersecurity experts. I've shared my insights through research papers, shedding light on Quantum Computing's potential. You might spot me on stage at B-Sides Conferences, diving into various cybersecurity topics. I also do double duty as an educator, I've worn the hat of a part-time teacher at local institutions like Northern Alberta Institute of Technology (NAIT) and Concordia University of Edmonton (CUE), spreading knowledge and staying sharp in the process."

Q) In your opinion, what are the most pressing cybersecurity challenges that organizations and individuals currently face?
"The most pressing cybersecurity challenge that organizations and individuals are currently facing is the pace of advancement and change in the field. We're now in an era where cyber threats aren't just geeky pranks but serious concerns, with nation-state actors lurking in the shadows; constantly probing and looking for ways to harm their enemies and cause damage to human safety. Safeguarding against these threats while keeping up with the pace of change is a top priority."

Q) How do you believe these challenges can be mitigated or addressed effectively?
"While there is no silver bullet answer to this profound question, a solid strategy involves understanding risks and proactive management. Linking cybersecurity with an organization's goals is key. Fusing business insights with Information Risk Management helps in smartly handling risks. Cybersecurity experts should spend time understanding the business they support; staying curious, learning from mentors, and experimenting with innovative approaches to disrupt and reduce the impacts of threat adversaries."

Q) Can you share any long-term goals or aspirations you have as a cybersecurity expert?
"I am a firm believer in servant leadership, so my goal is simple yet profound - to be a catalyst for positive change. By nurturing budding talents and sharing knowledge, I aim to make a difference in the cybersecurity community. It's not about flashy titles, but about leaving a mark that enhances the industry and the world at large."

Would you like to connect with Prashant to learn more about his journey?
http://linkedin.com/in/prashantprofile

Name: Amit Suri

Q) Tell us about what inspires and motivates you to pursue a career in InfoSec / Cybersecurity?

"This is a highly in-demand career to pursue and needed in almost every facet of IT. It is a constantly evolving and essential skill, and I personally enjoy critical thinking and the ability to adapt in this dynamic field. A career in cybersecurity will always be highly in demand and can never be boring. In our digital age, cybersecurity plays a vital role in ensuring online safety, and to defend internet-connected devices from malicious attacks. With the increasing number of users and devices combined with an increased deluge of data, the need for online security is growing at a rapid pace. Today’s criminals are well educated, highly skilled and sophisticated, and the chance of cyber-attacks is at its peak. Cyber security skills are instrumental in preventing attacks that aim to disrupt our systems. Security is an essential ingredient in every information system and should be baked in, rather than bolted on when designing and building software or hardware both from a functional and technical perspective. These skills provide me with a well-rounded knowledge of all aspects of Architecture."

Q) Talk about your history in the IT / InfoSec / Cybersecurity world.

"I have over 22 years IT experience in the private and public sector across North America working with complex, highly integrated ERP systems for most of my career. Currently, I am a Lead Architect at the University of Calgary with their Finance & Supply Chain ERP application. My roles have required providing high level technical expertise and leadership in the development, architecture, and sustainment of very large and advanced critical business systems. I have also been engaged as an instructor with the University of Calgary’s Continuing Education to develop materials and teach new cyber security courses that will be launched in early 2023. I have held the Director Membership position at (ISC)² Alberta since June ’22."

Q) What brought you to join (ISC)² Alberta and do you currently hold any (ISC)² certifications?

"The (ISC)² Alberta Chapter has provided me with the wonderful opportunity to learn, share and engage with recognized leaders in the security community. (ISC)² is arguably the most globally recognized and respected security family of IT security professionals. I have the honor to serve as a board member with (ISC)² Alberta and help with engagement. I hold the CISSP, PMP and PSM professional certifications. I strongly recommend anyone interested in cyber security to join this Chapter. The opportunities to network, mentor and grow your skills are significant."

Q) What do you see as the toughest challenges facing society, business, and your community when it comes to InfoSec and Cybersecurity?

There is a huge workforce shortage and not enough people with cyber security skills to fill open jobs. The gap is increasing fast. Gaining skills and certifications can be expensive and time consuming, and more organizations should plan to train their staff. Organizations need to invest in existing personnel. Protecting systems can no longer be a reactive tactic. We need to understand that having InfoSec skills is needed in all aspects of IT today, and across all phases. While there is always a need to compete on the market for some positions, organizations should be open to cross training and providing more opportunities for growth internally. Organizations need to be more agile and evolve unconventional career paths, promote cross training and leverage untapped sources of cybersecurity talent.

Would you like to connect with Amit to learn more about his journey?
https://www.linkedin.com/in/amit-9/