CISO Global Finalists

Omar Al Assaf is the Regional Information Security Officer for Canada and Latin America at American Express, where he leads cybersecurity, risk management, and cyber resilience across multiple markets. With more than two decades of experience spanning information security, technology, and risk leadership, he focuses on aligning cybersecurity with business objectives, strengthening organizational resilience, and developing high-performing teams. Omar is passionate about mentorship, talent development, and advancing the cybersecurity profession through collaboration and leadership.

As Regional Information Security Officer for Canada and Latin America, I transformed cybersecurity from a traditional control function into a business enabler across multiple markets. By embedding security into business and technology decision-making, my team strengthened organizational resilience, enhanced regulatory readiness, and fostered a culture of shared accountability for cyber risk. The result was a more proactive and business-aligned security organization that enabled innovation, supported growth, and strengthened trust among customers, colleagues, regulators, and business partners while maintaining a strong focus on protecting the enterprise.

Carey Frey is an accomplished cybersecurity executive with over 20 years of industry and intelligence experience. As a leader at TELUS, he oversees both the corporate securityprograms and the security solutions business, helping organizations defend infrastructure and respond to threats. Previously, Carey served as Director General of Cyber Defence at the Communications Security Establishment (CSE). He holds a Master’s in Public Policy and a Bachelor of Science in Computer Science.

As Chief Security Officer (CSO) at TELUS, Carey Frey’s tenure is defined not by a single standalone project, but by a major transformation of the company’s security practices and his ability to bridge the public-private to drive cross-sector collaboration. Since joining TELUS in 2016, he has led his team to drive robust cyber and physical defences to ensure exceptional operational resilience and build customer trust. With more than 20 years of combined industry, intelligence, and technical experience, is highly regarded as an industry thought leader and frequently shares his expertise at major security events.

Top Global CISO Award winner and a seasoned executive leader in the Cybersecurity and IT Risk Management space with 20+ years of global experience. I bring a strong record of building, transforming and leading enterprise-wide programs in large organizations, including technology manufacturing, aviation and financial services. My background combines strategic foresight, deep technical expertise, and operational excellence to influence executive and board-level stakeholders by delivering measurable value and enhance organizational resilience.

Under my leadership, the team established a scalable assessment process for all our lab infrastructure that were one of our biggest security exposure. I helped establish the first proper GRC framework for assessing and reporting risks to the enterprise and Audit committee in a consistent manner. The visibility helped establish the context to accelerate certain programs as well as positioned our policy structure and certification processes to be built upon a control framework rather reacting to new external requirements. We had a significant dwell time for our vulnerabilities and I established a program to bring those practices within compliance.

Chief Information Security Officer with 20+ years of experience leading global cybersecurity programs in complex, regulated environments. Proven leader of distributed, multicultural teams, driving alignment across regions while maintaining strong governance, risk management, and operational standards. Expert in risk-based security strategies, translating cyber risk into business impact for executive decision-making. Recognized for strengthening resilience through mature governance models, enhanced data protection, and continuous improvement of Information Security Management Systems.

Led the transformation of Security Operations into a global centralized activity by establishing a SOC and incident response function as a center of excellence, and advancing into the role of Global Head of Security Operations. Concurrently, as CISO for the Americas, Felipe ensured a strong and consistent regional security posture aligned with global standards, and enabled five countries (Australia, Hong Kong, France, Canada, and the U.S.) to achieve ISO 27001 certification and modernized our global risk assessment approach, improving visibility, consistency, and risk-informed decision-making at scale.

I am the Global Chief Information Security Officer at Manulife, where I lead enterprise cybersecurity strategy, risk management, and digital resilience across a global business. With more than 30+ years of leadership experience across cybersecurity and technology, I focus on helping organizations translate complex risk into clear business decisions that support growth, resilience, and innovation. My approach is business-first: align security to strategy, build trust with leaders and enable the business to take calculated risks.

When I joined Manulife as CISO, my priority was uniting cybersecurity across the enterprise, aligning global teams around shared outcomes. I have since built an integrated model where cybersecurity, technology and business leaders operate as one community, with common cyber language and strong collaboration. I repositioned cybersecurity from a protective function to a business enabler, embedding architects and engineers into the business. I also led the cybersecurity strategy, anchored on customer outcomes, innovation, and risk-based decisions. Key programs—including CTEM, secure-by-design (shift left), strong identity, and AI security—are reducing risk and accelerating delivery, while strengthening accountability, and trust across the enterprise.