OTH Security Information

OTH Security is the named CISO for fintech and financial services companies across Canada and the United States. We own your security program and represent you to the people who decide whether you grow: your board, bank partners, enterprise customers, auditors and regulators. Founded in 2018, we're based in Vancouver, Toronto and New York. What we do: • Fractional CISO (vCISO): audit readiness for SOC 2, ISO 27001 and PCI DSS, bank and enterprise vendor security questionnaires, third-party risk, and board reporting • Penetration testing, with retesting and attestation letters partners and auditors accept • Tabletop exercises built around your own systems, vendors and risks • AI security and governance: readiness for OSFI Guideline E-23, security testing of AI agents, guardrails for teams using AI coding tools, and an ongoing AI risk office Who we work with: embedded finance and BaaS providers, lenders, money services businesses and payment service providers, plus AI platforms, healthcare, private equity, the public sector and SaaS companies. Frameworks we work in every day: SOC 2, ISO 27001, PCI DSS, NIST CSF 2.0, the Retail Payment Activities Act (RPAA), Quebec Law 25 and PIPEDA. We've delivered 35 SOC 2 reports in two years and bring most clients to audit readiness in about three months. Through a network of 80+ specialist partners, you deal with one accountable firm instead of a dozen vendors. Book a 30-minute call at othsecurity.com.