Jeremy Canale

Project Hal is positioned as a born-in-AI growth platform designed for SMEs across the Gulf Cooperation Council. The platform will be conversational and agentic first, backed by a partner ecosystem intended to power cross-border trade and embedded services. Planned capabilities include customer behavior analytics, secure data sharing, and digital touchpoints that streamline onboarding, lending, and day-to-day commerce. https://www.startupresearcher.com/news/sc-ventures-and-microsoft-launch-ai-platform-for-uae-smes

Asset-backed securities company, part of Standard Chartered Bank https://scventures.io/nusavest-providing-first-of-its-kind-asset-backed-securities-investment-opportunities-in-southeast-asia/

As Founder & CEO of Rankiteo, I lead a cybersecurity startup that provides organizations with an intelligent, data-driven platform to assess, score, and prioritize their cyber risks, inspired by models like BitSight. Our mission is to help enterprises — particularly in regulated sectors like finance and insurance — identify vulnerabilities, benchmark their security posture, and take actionable steps toward remediation. I’ve built the company from concept to operational product, overseeing strategy, product development, go-to-market, and funding. Rankiteo is designed to support CISOs, risk officers, and compliance teams in making security decisions with measurable impact. Key Responsibilities & Achievements: • Designed the end-to-end vision and launched a cybersecurity scoring platform (SaaS) that allows companies to monitor and improve their cyber hygiene. • Built a technical and commercial team covering data engineering, scoring algorithms, infrastructure, and customer success. • Developed key features including: o Vulnerability risk scoring o Continuous security posture monitoring o API-driven integration with external risk signals • Integrated threat intelligence, asset discovery, and risk scoring into a single dashboard for underwriters, security teams, and decision-makers. • Positioned Rankiteo for strategic partnerships and early adoption across finance, insurance, and tech sectors. • Managed product strategy, roadmap, GTM strategy, and investor relations https://www.reinsurancene.ws/rankiteo-aims-to-revolutionise-cyber-insurance-with-data-driven-underwriting/ https://index.businessinsurance.com/businessinsurance/article/abnewswire-2025-2-27-rankiteo-becomes-the-leadingstandard-in-cybersecurity-scoring https://insurancenewsnet.com/press-releases/rankiteo-poised-for-growth-as-demand-for-data-driven-cyber-risk-assessmentsurges

I lead the ISO/IEC 27001 Group Certification Program and oversee the Information Security Management System (ISMS) across the entire organization. I support all Heads of Department—including Internal Audit, Finance, Human Resources, IT, Procurement, and Quality in matters related to information security governance, risk management, and regulatory compliance. I am responsible for developing High-Level Designs (HLDs) and conducting IT risk assessments for all applications, ensuring alignment with ISO/IEC 27001 requirements as well as regional regulatory frameworks such as the Kingdom of Saudi Arabia Personal Data Protection Law (KSA PDPL) and the United Arab Emirates Personal Data Protection Law (UAE PDPL). Additionally, I design and maintain the organization’s information security policies, procedures, and technical controls. I manage the risk register, define and update the Statement of Applicability (SoA), and ensure that controls are properly implemented, monitored, and continuously improved to provide measurable assurance and compliance across the enterprise.

I served as Head of AppSec & Deputy CISO within a leading French banking group, reporting directly to the CISO, and was an active member of the Executive Committee (COMEX). Following the acquisition of Gambit Financial Solutions by BNP Paribas Asset Management, I was appointed to lead the deployment of the Group’s cybersecurity program within our entity, fully aligned with the NIST Cybersecurity Framework. At the time of acquisition, no formal cybersecurity program existed. I successfully structured and operationalized our security roadmap, achieving a maturity increase from 0% to 30% in under two years. Key Achievements: • Designed and implemented the Group DevSecOps policy, integrating SAST, SCA, DAST, and container scanning into CI/CD pipelines using Fortify, SonarQube, NexusIQ, and Azure DevOps. • Created and enforced security governance policies including: o Mobile Device Management (MDM) o Asset Hardening o Vulnerability Management • Deployed cloud security defense capabilities, including: o Hardening of Azure environments (PaaS/IaaS) o Identity & access governance o Threat detection and response (SIEM, Wazuh, Azure Defender) o Secure configuration baselines and policy-as-code integration • Acted as the interface between IT, compliance, infrastructure, development squads, and executive leadership to align security with business priorities and regulatory expectations. • Led contributions to internal audits, regulatory reviews, and cyber risk governance at the executive level. Tools & Technologies: Fortify, SonarQube, NexusIQ, Rapid7, Wazuh, Azure DevOps, Azure Cloud, Kubernetes, VMware, SIEM Frameworks: NIST, ISO 27001, OWASP, CIS Benchmarks

I acted as the technical lead for the global deployment of Palo Alto’s Cloud Security Posture Management (CSPM) solution across all AXA entities worldwide, covering multi-cloud environments (including Azure and others), as part of a $5 million strategic security program. I was fully responsible for defining and managing the technical roadmap, overseeing end-to-end implementation, and leading a team of 10 engineers across multiple locations. I ensured that all deployments were aligned with AXA’s MtSB controls, as well as NIST CSF and CIS Benchmarks. Key Responsibilities & Achievements: • Led the global roll-out of Palo Alto’s CSPM across all AXA business units, providing centralized visibility, policy enforcement, and compliance reporting across cloud platforms. • Managed a team of 10 engineers based in France and Morocco, with full ownership of the technical roadmap, priorities, and delivery milestones. • Designed and implemented: o CI/CD pipelines o Backup and disaster recovery strategies o IAM & RBAC architecture o Azure and multi-cloud policy enforcement • Developed Python scripts for automation, configuration management, and monitoring. • Built data ingestion pipelines into Power BI, enabling executive reporting on compliance KPIs. • Validated and aligned technical controls with AXA MtSB, NIST, and CIS benchmarks. • Delivered the project under a $5M global cybersecurity budget, meeting scope, timeline, and quality expectations. Tools & Technologies: Palo Alto CSPM, Azure DevOps, Azure Vault, Azure Policies, Power BI, Azure Boards (JIRA), Python

As a member of the cybersecurity leadership team, I was responsible for securing the company’s global application landscape, covering more than 24,000 GitHub repositories, as well as for developing the cloud defense strategy across AWS environments. I took full ownership of the Third Party Risk Management (TPRM) program. I orchestrated the correlation of internal vulnerabilities identified via Qualys with external ratings from BitSight and SecurityScorecard, leveraging the Snowflake platform to aggregate and analyze third-party risk data. ✅ Key Contributions: • Defined and executed the application security vision for one of the company’s largest development footprints, integrating secure development practices across thousands of GitHub repositories. • Led the deployment of a company-wide CSPM program, enhancing cloud risk posture, reducing misconfiguration exposure, and enabling governance at scale. • Strengthened cloud defensive capabilities by integrating proactive monitoring, real-time detection, and automated remediation into the cloud infrastructure. • Aligned technical controls and governance policies with NIST CSF and CIS Benchmarks, supporting internal risk frameworks and audit readiness. • Acted as a key liaison between Security, DevOps, and Cloud Architecture teams, positioning security as a business accelerator rather than a blocker. • Managed the TPRM program by correlating internal findings (Qualys) with external risk ratings (BitSight and SecurityScorecard), using Snowflake for centralized third-party risk aggregation and analysis. 🌐 Technical Environment: Checkpoint CSPM, AWS (ECS, Kinesis, KMS), TruffleHog, Sysdig, GitHub, Qualys, BitSight, SecurityScorecard, Snowflake

As VP Cybersecurity & Architecture, I held a dual strategic and operational role within the CCoE, with full accountability over cybersecurity governance for digital and cloud transformation initiatives. I was also an active member of the Group Architecture Committee, where I contributed to cross-functional decisions impacting IT security, infrastructure, and enterprise architecture at scale. Operating under the Global Digital Governance Framework’s Cyber Risk Management gate, I ensured that all cloud and digital projects met the required security posture, compliance expectations, and architectural standards. I managed a $5 million cybersecurity budget, negotiated and signed the enterprise contract with Cloudflare, and built and led the dedicated cybersecurity team supporting these functions across the organization. Key Strategic Responsibilities & Achievements: • Represented cybersecurity in the Group Architecture Committee, ensuring all technical decisions adhered to cyber risk, compliance, and long-term resilience requirements. • Defined and enforced group-wide security and cloud governance policies, including: o Cloud onboarding and risk assessment processes o Secure API exposure and gateway configuration standards o Data protection and encryption controls (aligned with NIST and CIS) o Third-party risk management policies • Oversaw project security assurance for all global digital initiatives, embedding risk assessments and controls early in the lifecycle. • Led the deployment of security services, including Cloudflare for edge protection. • Created and led a cross-functional security team supporting secure adoption of Azure Cloud Services, API Gateways, and enterprise integrations. • Ensured all efforts were aligned with NIST Cybersecurity Framework, CIS Benchmarks, and internal audit and compliance requirements. Technologies & Frameworks: Cloudflare, Azure, Risk Management, NIST CSF, CIS Benchmarks, GitHub, Azure DevOps

As CISO of the Cloud Center of Excellence (CCoE) within the Global Technology Services (GTS) division, I led the design and execution of the company’s cloud cybersecurity strategy and transformation roadmap. Our CCoE acted as the central authority for cloud governance, risk assessment, and security architecture across global initiatives. My mission was to embed security-by-design into every phase of the cloud journey, ensure regulatory compliance, and drive innovation — including award-winning advancements in machine learning for security. Key Responsibilities & Achievements: • Defined and executed the cloud and IT security roadmap for the enterprise, supporting innovation while enforcing cyber risk controls. • Helped 25-person cross-functional team of DevOps engineers and cloud security architects, operating across multiple cloud environments. • Assessed and approved use of AWS cloud services through a cybersecurity risk lens, integrating tools and practices aligned with NIST CSF and CIS Benchmarks. • Recipient of the GTS Innovation Award for applying machine learning techniques to security operations, enhancing threat detection and response. • Drove the integration of advanced monitoring, secure configurations, and governance automation into the enterprise cloud model. • Positioned the CCoE as a strategic enabler of secure, scalable, and compliant cloud transformation across the bank. Technologies & Frameworks: AWS (ECS, GuardDuty, Inspector, KMS, Config, Security Hub), Prowler, Sysdig, TruffleHog NIST Cybersecurity Framework, CIS Benchmarks, Risk Management, DevSecOps best practices

In my role as a Security Solutions Architect at Thales in Région de Paris, France, I was responsible for developing automated Cloud solutions, implementing Cloud SSO & AD FS, and conducting pentesting on Cloud applications to ensure data security.

In my role as an SRE/Solutions Architect at Baxter International Inc. in Région de Bruxelles, Belgique, I led the migration of on-premises IT projects to cloud services providers, ensuring HIPAA compliance and security. I developed Infrastructure as Code using Python and defined high scalability and disaster recovery strategies.

In my role as an SRE/Solutions Architect at Gemalto in Marseille, France, I defined architecture designs to meet PCI-DSS standard, migrated on-premises IT projects into cloud services providers, developed auto-compliance checks features & alerting features, and provided Identity Access Management using native cloud services.