Financial Industry Regulatory Authority

At Western & Southern Financial Group, we believe that enduring relationships built on trust and integrity form the foundation of financial security. Since our founding in 1888, we've grown from a modest door-to-door life insurance business into a Fortune 500 diversified financial services leader headquartered in Cincinnati, Ohio. Our corporate campus in downtown Cincinnati is home to 11 member companies offering insurance, annuities, mutual funds, and investment services. We take pride in our 135+ year legacy of stability and our commitment to helping families achieve financial well-being across generations. Our culture emphasizes long-term thinking, professional development, and community impact. With 107 offices operating in 23 states and Washington D.C., our associates work face-to-face with middle-market clients to understand their unique needs and provide tailored financial solutions. We foster an environment where tenure is celebrated - our Legion Day tradition recognizes associates who have dedicated decades to serving our policyholders. This commitment to our people extends to comprehensive benefits including a defined benefit pension plan, 401(k) matching, paid parental leave, and opportunities for growth within our family of companies.

Manulife Financial Corporation is a leading international financial services provider that helps people make their decisions easier and lives better. With a heritage dating back to 1887, the company has grown into one of Canada's oldest and largest financial institutions, serving millions of customers across Asia, Canada, and the United States. Manulife provides comprehensive insurance, wealth management, and investment solutions designed to meet the evolving needs of individuals, families, and businesses. Headquartered in Toronto, Manulife operates through its core subsidiaries and brands, including John Hancock in the United States. The company offers a diverse range of products and services, including life and health insurance, group benefits, retirement planning, investment management, and banking solutions through Manulife Bank. With more than 135 years of experience, Manulife combines financial strength with digital innovation to deliver customer-centric solutions that help clients achieve their financial goals and secure their futures.

OneMain Financial is the nation's largest personal installment lender, having served over 18 million customers since 2006. With more than 1,300 branches across 47 states, the company provides responsible access to credit for nonprime customers who may not qualify for traditional bank loans. OneMain offers personal and auto loans from $1,500 to $20,000 with fixed rates, clear terms, and fast decisions - money can be available as fast as one hour after loan closing. The company's customer-first approach is evident in its 90% customer satisfaction rate and comprehensive Customer Bill of Rights, which guarantees affordable payments, transparent pricing, and a satisfaction guarantee that allows customers to cancel their loan within seven days. Beyond lending, OneMain is committed to improving customers' overall financial health through free monthly credit score updates, financial education resources, and personalized budgeting assistance. The company's mission extends to community impact, partnering with local and national organizations to break down barriers to economic mobility. OneMain also offers the BrightWay® credit card, which rewards customers for building positive payment history. Founded in 1912 as Commercial Credit, OneMain has evolved over more than a century while maintaining its core commitment to helping hardworking Americans achieve better financial futures through responsible lending practices and personalized service.

At Momentum Financial Services Group (MFSG), we're on a mission to help people move forward by reimagining how money works for those who need it most. With more than 40 years of experience, we're the team behind Money Mart - Canada's largest non-bank branch network - and a leader in financial solutions for underserved communities across North America. Our culture thrives on removing barriers and creating access. We come together across teams and departments to build something bigger: solutions that connect over a million customers annually to the money they need, when they need it. Whether you're designing systems, solving complex problems, or shaping strategy, your work drives real impact for real people. We combine a strong physical presence with modern digital innovation, showing up for customers wherever and however they prefer to manage their money.

AmTrust Financial Services, Inc. is a global specialty insurer founded in 1998, operating at significant scale with more than 7,000 employees worldwide and serving over 500,000 small commercial policies. The company focuses on property and casualty insurance for small and mid-sized businesses, holding the position of third-largest workers' compensation provider in the United States. Its core technical domains span workers' compensation, risk management, loss control services, and insurance technology infrastructure that supports flexible payment solutions and policy administration at scale. The company's insurance technology stack must handle the operational complexity of managing hundreds of thousands of active policies across multiple product lines, geographies, and industry verticals including contractors and healthcare. This creates technical requirements around secure data handling for sensitive business and worker information, payment processing systems that support flexible arrangement options, and digital platforms that enable both policy management and claims processing. AmTrust's emphasis on technological innovation suggests ongoing platform modernization efforts that require secure development practices and infrastructure protection. The threat model for an organization processing this volume of financial transactions and personally identifiable information is substantial. Insurance companies face persistent targeting from financially motivated threat actors seeking payment data, medical information from workers' compensation claims, and business intelligence from commercial policy holders. The company's global operations and stated entrepreneurial spirit indicate a distributed technical environment where security architecture must balance accessibility for a geographically dispersed workforce against the protection requirements of regulated financial services data.

The Alberta Energy Regulator oversees the full lifecycle of energy operations across Alberta - from initial exploration through decommissioning - regulating an industry extracting billions of barrels of oil and trillions of cubic feet of natural gas annually. Created in 2013 as a quasi-judicial independent agency, the AER conducts thousands of audits and inspections each year, enforces compliance through legally binding orders, and responds to energy-related emergencies that threaten communities and ecosystems. The organization manages financial assurance programs to prevent orphaned wells from becoming taxpayer liabilities and is actively developing regulations for emerging technologies including carbon capture and storage. The security surface spans operational technology environments tied to critical infrastructure oversight, regulatory data systems holding sensitive compliance information, and decision-support platforms used in quasi-judicial proceedings. The stack includes Microsoft Defender for Endpoint and Sentinel for detection and response, SharePoint for collaboration, and specialized reservoir simulation tools like Schlumberger Eclipse and CMG GEM. SQL, Power BI, and custom VBA applications support analytical workflows processing audits, inspection findings, and liability tracking across Alberta's energy sector. Excel remains deeply embedded in operational processes - a common pattern in regulatory environments where auditability and long-term data retention drive technology choices. Security work here means protecting the integrity of regulatory decisions that carry legal force, maintaining confidentiality around company compliance data, and ensuring continuity of oversight functions during emergencies. The threat model includes both external actors targeting critical infrastructure data and insider risks inherent to agencies holding enforcement authority over politically sensitive industries. The role balances public sector constraints with the technical complexity of protecting systems that underpin resource development worth hundreds of billions of dollars and power infrastructure serving millions across North America.