Sanjay Sharma

As Chief Information Security Officer at Zafin Inc, I lead enterprise-wide cyber and AI security strategy and technology risk governance for a global fintech innovator at the forefront of modern banking transformation. I serve as a strategic advisor to the executive team and Board, translating dynamic cyber risk into actionable, business-aligned security outcomes that reinforce client trust and accelerate secure growth. My remit includes building and scaling comprehensive security programs across cloud-native platforms, AI-augmented environments, and regulated financial ecosystems. I oversee initiatives spanning threat intelligence, incident response, vulnerability management, cloud and data security, and third-party risk — all while ensuring alignment with evolving global regulatory frameworks. In an era defined by AI disruption, digital finance, and heightened regulatory scrutiny, I champion security as a core business enabler. By embedding resilience into innovation, driving cross-functional accountability, and fostering a proactive security culture, I help Zafin deliver secure-by-design solutions that meet the complex demands of modern financial institutions.

InCyber 2023 OASIS PMI- PD Day InCyber 2024 Gartner C Communities SecureWorld Toronto 2025 SiberX 2025 InCyber Forum 2025 York University TechEquity 2026

As the Senior Vice President and Chief Information Security Officer, my main responsibility is to shape our technical strategy and ensure operational excellence in an ever-changing organizational landscape. This involves creating and implementing strategic technology risk management practices to strengthen our security resilience, ensuring compliance with regulations, and promoting a culture of awareness and compliance. I work closely with the IT and engineering teams to integrate security measures into infrastructure and application designs, conduct regular penetration testing and vulnerability assessments, and administer ongoing security training programs. During my time here, I led the expansion of our cybersecurity services, resulting in a significant revenue increase. I also pioneered our organization's first-ever threat intelligence program and oversaw the development of a robust Security Operations Center (SOC) from scratch. My approach to policy development and enforcement aligns us with industry standards and regulatory requirements, making us a leader in compliance.

As Head of IT Risk & Cybersecurity, I was handpicked to direct the enterprise risk and cybersecurity unit, providing critical support and risk insights to the Board of Directors. My tenure was marked by advancements in reporting capabilities, deepened business insight reporting, and optimization of IT risk activities. I led a diverse team in executing complex IT projects, including cyber and cloud migration strategies, and Zero Trust Architecture and Threat Hunting initiatives. Noteworthy accomplishments include partnering with vendors to develop comprehensive Master Services Agreements, enhancing monitoring capabilities, refining incident response strategies, and introducing data-driven approaches leveraging advanced analytics. I crystallized the focus on threat response by designing and implementing a 3-year cybersecurity program and introducing Quarterly Incident Response (IR) tabletop exercises, thereby elevating our organization's cyber defenses.

During my tenure as the Cybersecurity Strategy & Transformation Lead at PwC Canada, I provided strategic leadership and managed key cybersecurity projects to drive organizational change. I masterminded cybersecurity strategy, risk management frameworks, and security architecture for large-scale transformations, aligning them with NIST standards and industry best practices. Notably, I delivered target state security architecture and risk monitoring frameworks for the financial services industry, ensuring compliance with regulations such as PCI-DSS and PIPEDA. Additionally, I enhanced clients' ability to manage third-party cyber risks effectively by designing a third-party risk management framework leveraging system and organization controls (SOC). My role also involved coordinating responses to RFPs for cybersecurity transformations and overseeing projects encompassing asset management, IAM, network security, and third-party cyber risk management. I drafted and presented C-level cybersecurity playbooks, providing strategic guidance and insight to senior leadership in the utility industry. Accomplishments: • Delivered target state security architecture and risk monitoring frameworks for the financial services industry, ensuring compliance with regulations. • Enhanced clients' ability to manage third-party cyber risks effectively by designing a third-party risk management framework leveraging system and organization controls.

At Deloitte LLP Canada, I assumed the role of Managed Security Services Senior Advisor, where I provided leadership within security operations. I directed teams responsible for incident and service management with a focus on cloud-based security services. Employing a risk-based approach, I formulated strategies for secure cloud enablement, endpoint protection, and architecture for secure zones. One of my notable achievements was assessing security vulnerabilities for a large Australian bank and implementing a robust DDoS protection strategy. Additionally, I managed multiple vendors and partnerships, contributing thought leadership in DDoS mitigation and cloud access security. Accomplishments: • Implemented a robust DDoS protection strategy for a large Australian bank. • Contributed thought leadership in DDoS mitigation and cloud access security.

Recipient of Tannah H. Schulich MBA Scholarship , and Dean's Entrance Award Led the Strategy Study Group of six MBA students to define growth strategy of a logistics firm

— Improved work efficiency of 21 military units by implementing IT projects valued up to $3.5M, including secure ID access management system implementation in <4 months.