CYBERSECURITY / OTTAWA, CANADA
I’m Prescott James. I turn complicated systems into security architectures, defensible decisions, and evidence that holds up under scrutiny.
Former naval officer. Current security professional.
Occasional bearer of inconvenient findings.
01 / THE WORK
Security only works when the architecture, the mission, and the evidence agree. I work at that intersection.
End-to-end Security Assessment and Authorization (SA&A), from control selection and traceability to assessment findings, remediation plans, and the case for Authorization to Operate.
An ATO is a decision. A green spreadsheet is a colour choice.
Security architecture for defence and mission systems, with practical controls that fit the operating environment and the people who depend on it.
“It’s air-gapped” is the beginning of a conversation, usually an expensive one.
Control validation, vulnerability management, and evidence collection integrated into engineering workflows, so assurance can keep pace with the system.
Risk accepted. Calendar invite declined.
02 / CAREER LOG
From a deployed frigate to defence engineering and distributed cloud: understand the mission, manage the risk, earn the trust.
Security and compliance for Google Distributed Cloud in Canadian defence environments. Connecting technical capability with customer security expectations and the evidence required for assurance.
Owned SA&A packages for defence systems, including SSPs, SARs, SRTMs, and POA&Ms. Led control traceability, vulnerability remediation tracking, and engagement with authorizing officials.
Integrated security validation and evidence collection into engineering workflows, with an emphasis on automation and audit readiness.
Advised engineering teams on secure design, sensitive data handling, and control implementation. Translated technical risks and trade-offs into guidance that supported program decisions.
Supported defence cybersecurity compliance, control validation, audit readiness, and remediation planning across mission systems.
LC4ISR: Dec 2022 – Apr 2024 · Net C2 ISAC: Jul – Dec 2022
Managed operational risk and mission-critical engineering systems in a NATO environment. Led the Electrical Department aboard a deployed frigate during Operation REASSURANCE, coordinating personnel and allied stakeholders.
A useful education in consequences that don’t fit in a slide deck.
03 / CREDENTIALS
Engineering discipline, security practice, and an English degree. Useful when the system is complicated and the explanation shouldn’t be.
Certified Information Systems
Security Professional
Global Industrial Cyber
Security Professional
Professional Engineering
Licence
Bachelor of Computer Engineering (Honours)Royal Military College of Canada · 2016
Bachelor of Arts (Honours), English LiteratureQueen’s University · 2007
GeekWeek 9 & 10Canadian Centre for Cyber Security · 2024 & 2025
Community & professional serviceLiveWorkPlay Ottawa, Ottawa Tool Library, and leadership with the Salaried Employee’s Alliance Canada.
Advanced Cyber Security Certificate · York University, 2023
Certified SAFe 6 Scrum Master · 2025
Certified SAFe 5 Practitioner · 2023
Exploitation Techniques · RMC, 2022
Malware Analysis (EEE569) · RMC, 2020
SANS SEC401: Network Security Essentials · 2019
“Secure” is a claim.
Show me the receipts.
Healthy scepticism.
Documented decisions.
A survivable sense of humour.
04 / OPEN A CHANNEL
Security architecture, defence assurance, or a system that needs more than a reassuring adjective.