Coast Capital Savings

Information Security Co-op · Coast Capital Savings · Jun 2026 – Feb 2027

Security risk assessments for internal projects and third-party vendors at a Canadian credit union.

• Internal assessments 50+ projects
• Vendor reviews 20+ vendors
• Evidence reviewed ISO 27001 · SOC 2 Type II · PCI · pentest reports
• Platform Archer

Decision-ready risk

I research each change, threat-model it, and document a risk rating with a treatment recommendation: accept, mitigate, transfer or avoid.

Assessed 50+ internal security projects with threat modelling and documented risk treatment.

Reviewed 20+ vendors against ISO 27001, SOC 2 Type II, PCI and pentest evidence, plus OSINT and external ratings.

Kept audit-ready Archer records; updated internal security policies, procedures and awareness material.