Michael Sumner

Building an independent advisory practice focused on business, process, and information security analysis for SMB and MSP. Working along side business owners, MSP, and cyber insurance brokers to remove friction in cyber insurance readiness, prioritize information security program governance improvement, and enhancing project clarity and velocity.

Embedded within Ontario Power Generation supporting OT cybersecurity governance, operational process improvement, and tool development across critical infrastructure. Delivered a custom OT asset tracking application replacing manual spreadsheet processes, established lifecycle management for operational technology laptops, modernized endpoint protection while maintaining operational continuity, and strengthened identity governance and cybersecurity documentation standards.

Full-time Business Analyst within a provincial transit agency supporting enterprise technology initiatives across business, IT, security, operations, and vendor teams. Transformed cybersecurity assessments and strategic recommendations into a prioritized enterprise roadmap, translated complex business needs into functional specifications across multiple domains, and coordinated successful solution implementations while managing dependencies and stakeholder impacts across concurrent initiatives.

Business analysis engagements across major Canadian banking institutions supporting web, mobile, and enterprise platform initiatives. Led requirements analysis, use case development, and wireframe documentation across online banking, credit card fulfillment, compliance automation, and enterprise customer data platforms. Supported complex system integrations spanning card product platforms, enterprise customer infrastructure, and retail banking data warehouse expansion. Acted as primary liaison between business stakeholders and offshore development and QA teams, ensuring clear translation of business intent and consistent delivery quality across distributed teams.