Open to opportunities

Charlotte Johnston

@charlottejohnston

Message

Experienced Senior Cybersecurity Manager with a passion for security architecture.

Canada

Message

What I'm looking for

I am looking for a role that fosters innovation, values collaboration, and offers opportunities for professional growth in cybersecurity.

I am an experienced Senior Cybersecurity Manager with over 6 years of expertise in cybersecurity architecture and internal controls across hybrid environments. I thrive in building cybersecurity programs that mature overall security profiles aligned with business objectives. My certifications in cloud security and cybersecurity reflect my deep passion for emerging technologies and continuous improvement.

In my current role at Ontario Lottery and Gaming, I lead the Threat Risk Management pillar of the Cybersecurity Maturity Program, developing solutions for Threat Modeling, Vulnerability Management, and Risk Management. I have successfully partnered with IT and Product Development teams to integrate security best practices throughout the lifecycle of new system acquisitions, enhancing security resilience and compliance with industry standards.

Previously, I served as a Principal Consultant at Slalom Consulting, where I provided strategic leadership for cloud migration projects and advised financial industry clients on regulatory compliance. My experience spans various roles, including Senior Information Security Consultant and Senior Manager in Data & Applied Analytics, where I led significant projects that improved data governance and security posture across organizations.

Experience

Work history, roles, and key accomplishments

Senior Cybersecurity Manager– Technology Risk

Ontario Lottery and Gaming

Feb 2025 - Present (3 months)

Led the Threat Risk Management pillar of the Cybersecurity Maturity Program, developing solutions and redesigning processes for Threat Modeling, Vulnerability Management, and Risk Management to enhance security resilience. Served as the ISMS Subject Matter Expert, leading the development and enforcement of information security policies and compliance strategies aligned with industry standards.

Threat Modeling Vulnerability Management Risk Management ISO 27001 NIST ISMS Third Party Risk Management Audit

Senior Information Security Consultant - Governance, Risk & Compliance

Bulletproof Solutions Inc

May 2024 - Present (1 year)

Provided direct service to Gaming Industry clients through in-depth threat risk assessments, audits, and internal controls testing. Managed cyber risk as a vCISO, assisting clients in establishing security programs aligned to strategic technology guidance and improving the security of mission-critical applications.

Threat Assessment Risk Management Audit Internal Controls NIST CSF ISO 27001 GDPR

Principal Consultant – Solution Architect

Slalom Consulting LLC

Jan 2022 - Present (3 years 4 months)

Led security workstreams as a Principal Architect, providing solutions for hybrid environments and advising stakeholders on security risks. Directed end-to-end technology solutions and deliverables, ensuring successful outcomes for cloud migration projects and advising financial industry clients on regulatory findings.

Security Architecture Hybrid Environment Security Regulatory Compliance NIST CSF ISO 27001 Mentorship

Senior Consultant – Cloud DevOps & Security Architect

Slalom Consulting LLC

Nov 2020 - Present (4 years 6 months)

Provided leadership and technical expertise in Cloud DevOps and Security, guiding the implementation of security automation solutions and modernizing CI/CD pipelines. Architected and implemented comprehensive cloud security solutions, securing CI/CD pipelines, applications, and network infrastructures.

Cloud DevOps Security Automation CI CD Pipelines Cloud Security Digital Transformation NIST Cybersecurity Framework AWS Project Management

Senior Manager Data & Applied Analytics

Royal Bank of Canada

Jul 2018 - Present (6 years 10 months)

Led the development of a Data Lake project on Amazon Web Services (AWS) for the Ventures Data and Analytics platform, enhancing data availability for Data Science and Analytics initiatives. Established and socialized Data Governance standards for handling sensitive customer data (PII) and card information (PCI), ensuring compliance with industry regulations.

Data Lake AWS Data Governance PCI Data Classification Encryption Azure Active Directory Single Sign On Penetration Testing

Senior Software Developer Risk IT

Royal Bank of Canada

Aug 2015 - Present (9 years 9 months)

Designed, developed, and implemented robust applications using Java and Python. Proficiently managed SQL databases, Windows, and Linux servers, ensuring optimal performance and security.

Java Python SQL Databases Windows Server Linux Software Development Agile Methodologies

Education

Degrees, certifications, and relevant coursework

Bellevue University

Bachelor of Science, Computer Science

Obtained a Bachelor of Science degree in Computer Science. Developed a strong foundation in computer science principles and practices.

University of Toronto

Master of Engineering, Mechanical and Industrial Engineering

Completed a Master of Engineering degree with a focus on Mechanical and Industrial Engineering. Gained advanced knowledge in engineering principles and their industrial applications.