Security & Engineering Executive
A practitioner-leader who can chair an audit conversation in the morning, review a security PR in the afternoon, and author the corporate AI policy that night. Functional CISO and player-coach with 25 years of unbroken custody of an enterprise Canadian SaaS platform.
Security and engineering executive with 25 years of unbroken custody of the systems, codebase, and PII that underpin a Canadian SaaS platform serving enterprise clients responsible for ~$15M ARR. Functional CISO at Venngo since the role existed in practice — owner of SOC 2 Type 2, GDPR posture, AI governance, the internal risk committee, and customer security diligence.
A practitioner-leader who can chair an audit conversation in the morning, review a security PR in the afternoon, and author the corporate AI policy that night. Hired, trained, and retained the engineering function over a quarter century without a single material incident.
SOC 2 Type 2 program ownership, GDPR compliance, risk committee chair, M&A and customer security diligence, vendor risk, PII custody, Vanta-driven control automation, and secure SDLC.
Authored corporate Generative AI usage policy. Governance for Microsoft Copilot, GitHub Copilot, and internal LLM tooling. Public speaker on AI under regulatory constraint.
Headcount and compensation strategy, hiring, performance management, coaching new managers. Player-coach across Java, PHP/Laravel, Dart/Flutter, and modern TypeScript stacks.
Dart packages, AI agent tooling, and developer infrastructure — actively maintained at @cdavis-code.
ONVIF protocol implementation in Dart — integrate IP cameras and NVRs into Dart and Flutter applications.
Google Vision in Dart — image labeling, face/logo/landmark detection, OCR, and safe-search classification.
Dart connector for OBS Studio's obs-websocket plugin — remote control broadcast software programmatically.
Multiple YouTube APIs (Data, Live Streaming, Analytics) wrapped in a single Dart library.
Dart framework for stateful AI agents — tool use, skills, sub-agent delegation, planning, streaming, evals, multi-provider LLM support.
Dart code generator that transforms annotated functions into Model Context Protocol (MCP) servers.
Dart package wrapping the opencode.ai API using retrofit for type-safe HTTP requests.
AI-powered charity golf tournament management — QwenCloud Hackathon Track 4.
Currently open to security leadership, fractional CISO, and senior engineering roles — Toronto, hybrid, or fully remote.