Alex Dougherty

Alex Dougherty

About

Detail

Senior Security Leader | AI enabled security transformation | IoT, Cloud, AppSec, Vulnerability Management, Incident Response and GRC | ISO 27001, IEC 62443, SO
Cambridge, Ontario, Canada

Timeline


work
Job
folder
Project

Résumé


Jobs verified_user 0% verified
  • Workleap
    Director, Infrastructure and Security
    Workleap
    Jul 2026 - Current (4 months)
    I lead the Infrastructure and Platform, Security, Compliance, and IT teams at Workleap, responsible for the technology foundation that supports our SaaS products including Workleap and Sharegate. My focus areas include cloud infrastructure and platform reliability, application and product security, SOC 2 compliance and audit readiness, and IT operations across the business
  • Generac
    Senior Director, Global Product Security
    Generac
    Nov 2024 - Jun 2026 (1 year 8 months)
    I lead global product security strategy across Generac’s connected product, cloud, IoT, embedded device, mobile and platform environments. My role has expanded beyond traditional product security to include broader leadership across vulnerability management, incident response, security tooling, AI enabled security automation and executive risk visibility. The focus of my work is building scalable security practices that help engineering teams move faster with clearer guardrails, while giving senior leaders practical visibility into product and platform risk.

    Since moving from ecobee into the broader Generac organization, I have helped scale product security from a business unit focused function into a global capability supporting
  • Generac
    Senior Director, Security and IT Operations - Energy Technology
    Generac
    Jul 2024 - Nov 2024 (5 months)
  • e
    Director of Security
    ecobee Acquired by Generac
    Nov 2022 - Jul 2024 (1 year 9 months)
    I built and led product security within ecobee’s engineering organization, supporting connected hardware, consumer IoT, mobile applications, cloud platforms and SaaS services. The role required close partnership with product, engineering, platform, infrastructure and executive stakeholders to make security practical, scalable and embedded into delivery rather than treated as a late stage review.

    During my time at ecobee, I helped mature product security across 12 connected product and SaaS offerings, supporting more than 200 engineers. This included creating product security assessment practices, improving secure development expectations, strengthening architecture review, coordinating penetration testing, managing remediation ac
  • Prodigy Education
    Senior Director, Cyber Security
    Prodigy Education
    Jul 2022 - Sep 2022 (3 months)
    I provided the vision and leadership necessary to manage risks to the organization and ensure business alignment, effective governance, system and product availability, integrity and confidentiality. My responsibilities include developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management program based on ISO 27001.
  • Prodigy Education
    Director, Cyber Security
    Prodigy Education
    Apr 2021 - Jul 2022 (1 year 4 months)
  • DL
    Senior Manager, Information Security, ACSO
    DL
    Sep 2020 - Apr 2021 (8 months)
    Being accountable for information security, I worked with business leaders across our global enterprise to develop strategies to manage risk. My focus was not only to mitigate present risks, but work to understand emerging threats, and leverage as a competitive advantage in the marketplace. Direct reports include program management, application and cloud infrastructure security, compliance, risk and internal audit.

    Key Achievements:
    • Transformed D2L’s ISO 27001 compliance program, achieving “the largest improvement to an ISMS” that BSI International auditors had ever witnessed, allowing D2L to maintain their contractual obligations with clients
    • Key contributor to Canadian Federal Protected A/B clearance, opening the
  • DL
    Manager, Information Security
    DL
    Jun 2019 - Sep 2020 (1 year 4 months)
  • Bluesun Inc
    IT Manager
    Bluesun Inc
    Sep 2017 - Jun 2019 (1 year 10 months)
    Responsible for IT operations including infrastructure, data center, networks, Azure and VMware based servers, PCI compliance, incident and vulnerability management for a leading Canadian fintech SaaS provider. Bluesun’s subject matter expert on data sovereignty and privacy legislation, data security, encryption and system architecture.

    Key Achievements:
    • Implemented an enterprise-wide PCI compliance program. This allowed Bluesun to have market leading security offerings to attract new clients, including a large Canadian retailer and charter banking contract
    • Designed and conducted quarterly cyber incident tabletop exercises to simulate an active attack against assets. There were 17 security and policy enhancements de
  • Technical Standards  Safety Authority TSSA
    Co-Chair, Innovation Committee
    Technical Standards Safety Authority TSSA
    Dec 2013 - Sep 2015 (1 year 10 months)
    A committee, reporting directly to the CIO, charged with developing new ways to tackle business challenges and seize business opportunities.

    In 2014, the committee pursued research into integrating drones (UAVs) into the inspection process to:

    1. Reduce safety impacts to TSSA's inspection force
    2. Decrease time to complete an inspection
    3. Increase the quality of an inspection.

    TSSA is now the first Canadian government safety regulator to obtain federal Special Flight Operations Certificates to leverage the power of UAVs in an inspection. After a successful completion of our pilot program, the committee will look to operationalize this technology in our amusement ride inspection segment in 2015
  • Technical Standards  Safety Authority TSSA
    Team Leader, Infrastructure and Security
    Technical Standards Safety Authority TSSA
    Jan 2013 - Jan 2017 (4 years 1 month)
    Provided IT expertise, for a provincial government agency, pertaining to the functions of incident and vulnerability management, infrastructure, data center operations, networks, data security and enterprise applications. Alex was the core architect on a multi-year digital transformation project that resulted in improved safety outcomes for the citizens of Ontario.

    Key Achievements:
    • Introduced an Information Security Management System based on NIST 800-53, leading to improved
    data security controls, enhanced mobile inspection services and increased system availability
    • Upgraded network backbone, storage and compute and physically migrated the primary and
    secondary data centers with no dow
  • Chartered Professional Accountants of Ontario CPA Ontario
    Team Lead, Technical Services
    Chartered Professional Accountants of Ontario CPA Ontario
    Jan 2010 - Jan 2013 (3 years 1 month)
    Responsible for IT functions including incident management, data security, vendor management and audio-visual equipment for a 20,000 sq. ft event space. Provided IT expertise for a multi-year business transformation project.
  • Future Shop is now operated by Best Buy
    Senior Technical Manager
    Future Shop is now operated by Best Buy
    Jan 2001 - Jan 2010 (9 years 1 month)
Education verified_user 0% verified
  • University of Waterloo
    Certificate, Project Management Applied Tools and Techniques
    University of Waterloo
  • I
    Certified Information Security Manager
    Infosec Institute
Projects (professional or personal) verified_user 0% verified
  • S
    SentinelOne deployment
    May 2018 - Jul 2018 (3 months)
    Moving away from traditional signature based AV to a ML/AI based system.
  • O
    Office 365 migration
    Nov 2017 - Jan 2018 (3 months)
  • W
    Windows 10 Migration
    Oct 2017 - Dec 2017 (3 months)
  • D
    Data Center Modernization Project
    Sep 2017 - Mar 2019 (1 year 7 months)
    Migration to a hyper-converged platform
    VXrail, VMware SRM with vSAN replication
  • F
    F5 Load Balancer
    May 2017 - Sep 2017 (5 months)
    Introduction of a GLB, SSL decryption and reverse proxy capability across two Data Centers.
  • C
    Cisco ISE
    May 2017 - Sep 2017 (5 months)
    Further strengthening TSSA's secure posture, we are implementing Cisco's Identity Service Engine to work in conjunction with FirePower.
  • i
    iPhone 7 Migration
    Nov 2016 - Dec 2017 (1 year 2 months)
    Migration of all iPhone 5S mobile devices (310) to the iPhone 7 Plus platform
  • W
    Windows 10 and Endpoint Migration
    Nov 2016 - Dec 2017 (1 year 2 months)
    Moving to a Windows 10 64 bit OS and migrating to a pure laptop environment impacting 430 employees.
  • N
    Network Security Enhancement
    Oct 2016 - Jan 2017 (4 months)
    Implementation of Cisco Firepower (NGIPS) at TSSA's primary data center. The project involves the configuration and operationalization of the solution including URL categorization and filtering, SSL decryption, AMP for Network and Endpoint deployments and the setup of robust stock report templates.

    This project will further strengthen TSSA's security posture.
  • T
    TSSA Facility Move
    Oct 2015 - Jul 2016 (10 months)
    Responsible for the on time delivery of the infrastructure in TSSA's new office building including:

    Diverse WAN links (MPLS, fiber)
    VoIP solution based on Skype for Business
    Printing infrastructure integrated with RFID security cards
    WLAN and structured cabling
    IP based building security (physical and surveillance)
    Crestron based Audio Visual solution across 13 meeting spaces and common areas
    Consultation on electrical, design elements and configuration of all meeting spaces
  • O
    Office 365 Migration
    Oct 2014 - Sep 2015 (1 year)
    Migration from Google Business App's to a Office 365 Exchange hybrid environment
  • M
    Migration of TSSA to an iOS based device platform using Airwatch MDM
    Aug 2014 - May 2015 (10 months)
    Replacing all of TSSA's Blackberry 9900's to iOS based devices secured through a cloud based MDM provider, Airwatch.
  • W
    Web Content Consolidation Project
    Jul 2014 - Dec 2014 (6 months)
    Consolidating all of TSSA's web assets into a single, centralized Canadian based hosting environment.
  • D
    Data Center Migration Project
    Feb 2014 - Aug 2015 (1 year 7 months)
    A multi phased project to consolidate TSSA's data centers to a single primary facility and a fully redundant DR data center. I led our team in the migration of TSSA's on-prem DC to the Province of Ontario's Tier IV facility on time and on budget without down time to the business.
  • C
    Cisco Anyconnect VPN implementation
    Dec 2013 - May 2014 (6 months)
    Upgrading and consolidating our VPN to one singular solution using Cisco Anyconnect.
  • S
    Server OS upgrade
    Nov 2013 - Aug 2016 (2 years 10 months)
    Updating all legacy server OS's to 2008 R2
  • W
    Windows 7 migration
    Aug 2013 - Feb 2015 (1 year 7 months)
    Planned and project managed migrating all TSSA's endpoints from a Windows XP to and Windows 7 environment.
  • D
    Data Center and Network Enhancement Project
    May 2013 - Dec 2013 (8 months)
    Project managed a complete redesign and replacement of TSSA's primary Data Center. This included replacement/upgrade of WAN, LAN, SAN, enterprise backup and the P2V of 52 physical servers. Under my leadership, this project was completed ahead of schedule and on budget without any down time to the business.
  • S
    Secure MDM device roll-out - Android and iOS
    Dec 2012 - Jan 2013 (2 months)
  • A
    Active Directory Migration
    Jan 2012 - Aug 2012 (8 months)
    Migrated all our servers from a multi-domained mixed 2003/2008 environment to a single 2008 AD domain system.
  • W
    Windows 7 and Office 2010 Deployment
    Oct 2011 - Mar 2012 (6 months)
  • S
    Secure remote portal using two factor authentication
    Oct 2010 - Mar 2011 (6 months)
  • M
    McAfee ePO implementation
    Aug 2010 - Apr 2011 (9 months)