Paul Gotter, CISSP

Senior Cybersecurity & Technology Risk Leader

About

Seasoned CISSP-certified cybersecurity and technology risk leader with deep experience helping organizations understand and manage security risk, strengthen controls, and make better technology decisions across enterprise, consulting, and managed services environments.Posessing a broad background spanning major Canadian financial institutions, Big Four consulting, technology providers, and regulated public/private sector organizations. Combining strong technical grounding across cloud, infrastructure, endpoint, legacy systems, vulnerability management, identity & access control, and secure configuration with the ability to translate complex technical and security issues into clear business priorities and actionable decisions for executives, technology teams, audit stakeholders, and clients. Known for delivering practical outcomes in security governance, technical advisory, client strategy, MSP support, audit readiness, third-party risk, incident response planning, and AI risk management (including generative AI and shadow AI). Focusing on cybersecurity program leadership, IT GRC development and oversight, cloud & infrastructure risk assessment, technical account management, solution advisory, and security program maturity enhancement.

Country

Canada

City

Greater Toronto Area

Industry

Information Technology & Services

Skill

Endpoint Security, Cyber Threat Intelligence (CTI), Vulnerability Management, Data Governance, Compliance Regulations, Leadership, Cloud Infrastructure, Common Criteria, Information Security Management System (ISMS), Security Controls, People Management, Strategic Planning, Information Security Management, Operational Efficiency, Oral Communication, Communication, Relationship Development, Technology Services, Stakeholder Engagement, Organizational Leadership

Experience

Senior Cybersecurity & Technology Risk Leader

Information Security, Governance & Risk Advisory

2000-5 - Present · 26 yrs 5 mos

Greater Toronto Area, Canada

Senior cybersecurity and technology risk professional with extensive hands-on experience across major Canadian financial institutions (Scotiabank, TD Bank, BMO), Big Four consulting (KPMG), and technology/managed services providers (WIS International, Blair Technology Solutions, IBM, HP, CGI, OnX, Rogers and Sony). Leading security governance, risk management, and technical security solutions in financial services, energy, retail, legal, and public sector environments. Holding a strong technical grounding in cloud, infrastructure, endpoint, vulnerability management, identity & access control, secure configuration, legacy systems, and remediation combined with the ability to translate technical risks into clear business impact and actionable priorities for executives and stakeholders. Core Areas of Expertise: . Cybersecurity & Technology Risk: Cloud security, infrastructure security, endpoint protection, vulnerability management, secure configuration, identity & access management (PAM/IAM), and control remediation across hybrid, Windows, Unix, Linux, and legacy environments. . Security Governance & Compliance: SOC 1 / SOC 2, PCI DSS, ISO 27001, NIST CSF, OSFI, and ITGC programs, including control design, evidence quality, audit support, and remediation. . Technical Delivery & Stakeholder Management: Collaboration with technology teams, business leaders, and clients to resolve security gaps, support implementation, and deliver practical improvements. . Managed Services & Technical Account Management: Solution architecture, SOW development, client relationship management, and ongoing service delivery. . AI Risk, Third-Party Risk & Incident Response: AI governance (including generative AI and shadow AI), third-party risk assessments, incident response planning, and operational risk reduction.