Cybersecurity & AI Governance Executive

Helping organizations govern risk, data, and AI responsibly.

Few executives sit at the intersection of cybersecurity, AI governance, and privacy law with equal fluency in all three. I bring 20+ years of cross-sector leadership across financial services, aviation, healthcare, government, and enterprise manufacturing. Fluently bilingual (EN/FR). Board-ready. Available for senior-level roles including Head of Security, CISO, and GRC leadership.

Carl-John Pyne

I work at the intersection of cybersecurity strategy, governance, risk and compliance (GRC), AI governance, and data protection and privacy law, helping organizations build programs that are defensible, practical, and aligned with how the business actually operates. Fluent across mainstream and emerging frameworks including NIST CSF, ISO 27001, CMMC, SOC 2, GDPR, EU AI Act, and Canada's evolving AI governance landscape.

ISMS Oversight

Enterprise Information Security Management Systems (ISMS) frameworks aligned to ISO 27001 and NIST CSF across multinational, regulated, and public sector environments.

Enterprise GRC Program Builder

Governance, risk, and compliance programs built from the ground up, including third-party risk management, policy frameworks, and board-level reporting.

Multi-jurisdictional Privacy Compliance

Privacy compliance framework spanning GDPR, PIPEDA, and Quebec Law 25. Authored first enterprise AI Security Policy in 2024.

Security Awareness & AI Literacy

Security awareness and AI literacy programs building organizational capacity to recognize risk and adopt AI responsibly.

Team Mentor, Coach & Capability Builder

Recruited, developed, and elevated security and GRC teams with cultures of accountability, professional growth, and organizational trust.

AI Governance
AIGP
Security Leadership
CISM CCISO CGEIT
Privacy & Data Protection
CIPM CIPP/E CIPT CDPSE

Open to the right conversation.

Executive roles & advisory engagements  ·  Canada-based  ·  Remote-first or hybrid  ·  North America