CISO Enterprise Finalists

Maneesh Agnihotri is the Chief Information Security Officer (CISO) at the City of Toronto. He is accountable for cybersecurity governance and risk management for the City's 51 divisions and 40+ Agencies and Corporations. Maneesh has over 25 years of experience in implementing cyber security programs and controls in public and private organizations. Prior to joining the City of Toronto, Maneesh has worked extensively in the Telecommunications and Retail industries.

Providing Cyber services to Agencies and Corporations in the City of Toronto. Initially scope of CISO office was only Divisions. Under my Leadership have provided Cyber coverage to over 40 agencies along with 51 Divisions. Reduced attrition in the Toronto Cyber Security Office. At joining the attrition rate was 30%. Over the last 3 years, attrition rate is 5% on average. Culture change and supporting the right resources in roles has delivered a positive and output driven environment. Streamlined Cyber advisory and compliance to ensure Stakeholders are getting clear and concise cyber security guidance.

Brent Fowles has served as Chief Information Security Officer at Western University since 2022 after joining the university in a leadership capacity in 2017. He leads Western's cybersecurity strategy, advancing risk-based security, governance modernization, cybersecurity awareness, and institutional resilience. Brent also serves as Co-Chair of the NKST Advisory Board and is an active contributor to national and provincial higher education cybersecurity initiatives through CUCCIO, Canarie, and ORION.

As Western University's CISO, Brent Fowles led a comprehensive, risk-based cybersecurity strategy that reduced compromised accounts by 97% between 2019 and 2026. By strengthening cybersecurity awareness, modernizing governance, expanding endpoint visibility, and embedding cybersecurity as a shared institutional responsibility, Brent helped improve Western's cybersecurity maturity. His leadership also contributed to Western exceeding National Cybersecurity Assessment targets across Protect, Detect, Respond, and Recover while an endpoint security pilot achieved an 82% reduction in vulnerabilities.

Nadeem Hussain is a senior information security leader with extensive experience across infrastructure, enterprise technology, cloud transformation, AI and cybersecurity. His career has evolved from technical architecture to executive leadership, with experience spanning professional services, real estate, hospitality, consulting, and operational technology environments. He has led security programs through major industry shifts including cloud adoption, ransomware risk, and AI-driven transformation, with a continued focus on business alignment, resilience, talent development, and secure innovation.

Success comes from understanding business priorities and aligning technology and cybersecurity capabilities to enable those goals securely. I have focused on building trust with business leaders by delivering practical, risk-based security outcomes that support growth, resilience, and client confidence. By balancing security, innovation, cost discipline, and execution, we have strengthened the organization’s ability to adopt new technologies while protecting the firm and its clients.

Austin Smith is the Chief Information Security Officer for Siemens Canada, where he leads cybersecurity strategy, governance, risk management, and awareness initiatives. He is focused on helping the business operate securely while making cybersecurity practical, approachable, and relevant to employees. Austin is especially passionate about strengthening security culture, improving awareness of social engineering threats, and helping individuals apply cybersecurity practices both at work and in their personal lives.

Cybersecurity awareness is most effective when it feels practical and personal. I developed an enhanced phishing awareness program that uses real-world examples, targeted conversations, and scenario walkthroughs to help employees better recognize social engineering threats. I also lead a monthly cyber community call focused on social engineering, new technology, and simple ways people can protect themselves and their families online. Together, these efforts have strengthened security awareness, reduced the risk of successful social engineering attacks, and given employees knowledge they can apply both at work and in their personal lives.

Derek Sutton is a seasoned cybersecurity and technology executive with extensive experience across public transit, healthcare, pharmaceuticals, and financial services. As Chief Information Security Officer at the Toronto Transit Commission, he leads enterprise-wide cybersecurity strategy, safeguarding critical infrastructure and customer systems. He is recognized for driving risk management, digital transformation, and adaptable security programs, while embedding security into strategic decision-making and fostering a proactive, organization-wide culture of cyber resilience.

TTC’s Information Security Office has rapidly strengthened the organization’s cybersecurity posture by establishing enterprise-wide governance across IT and OT, aligning risk management with business priorities. A NIST-based maturity assessment now guides a multi-year improvement roadmap, while a formal third-party risk program addresses supply chain exposure. Cyber readiness has been embedded into FIFA 2026 planning through enhanced response capabilities exercises. Expanded security awareness efforts are reinforcing the human layer of defense, while executive engagement ensures cybersecurity is positioned as a strategic priority across new leadership and the broader organization.