Goni S.

About

Independent information security and privacy consultant since 1999, with 25+ years advising private and public sector organizations on enterprise security architecture, fractional CISO leadership, and privacy/risk programs. Built sustained, repeat relationships with enterprise clients, reflecting consistent client trust and re-engagement over time. Combines SABSA-based architecture methodology with Privacy-by-Design principles, NIST CSF, ISO 27001/27002, and PCI-DSS implementation experience, applied across financial services, insurance, public transit, and government sectors. Deep Ontario public sector background spans multiple ministries and agencies, including hands-on privacy impact assessment, data flow analysis, and compliance advisory work.

Specialties

• CISO / Security Leadership
• Cybersecurity Consulting
• Governance & Compliance
• Privacy & Data Protection
• Security Architecture

Skills

• Fractional / Virtual CISO Advisory
• SABSA Enterprise Security Architecture
• NIST CSF
• ISO 27001 / 27002
• PCI-DSS Compliance & Audit Readiness
• SOC 2 Audit Readiness
• IAM Strategy (RBAC / ABAC)
• Cloud Security (AWS, Azure)
• Third-Party & Vendor Risk Management
• Threat & Risk Assessment (TRA)

28 skills in total

Licenses & Certifications

• Certified Information Privacy Manager

  International Association of Privacy Professionals

  Issued Jun 2025 · Expires May 2027

• SABSA Chartered Security Architect – Foundation

  SABSA

  Issued Jan 2012

• Certified Information Privacy Technologist

  International Association of Privacy Professionals

  Issued Jan 2011

4 certifications in total

Experience

• Principal Consultant, Independent Information Security & Privacy Advisor

  Goni S. CONSULTING INC.

  Jul 1999 — Present

  Toronto, Ontario, Canada

• Security Architect (Permanent, Full-Time)

  METROLINX – PRESTO

  Apr 2012 — Jul 2015

  Toronto, Ontario, Canada

• Internet Analyst

  Sun Life Financial

  Nov 2005 — Nov 2006

  Toronto, ON

5 experiences in total

Education

• Factor Analysis of Information Risk

  FAIR Analysis Fundamentals

  Jan 2021

• International Association of Privacy Professionals

  Certified Information Privacy Manager

  Jan 2018

9 education entries in total

Recent posts