Aviso Wealth
Aviso Wealth manages over $160 billion in assets for 300 partners across Canada - virtually every credit union in the country - through a wealth management platform launched in 2018 by consolidating Credential Financial, Qtrade Financial Group, and NEI Investments. The attack surface is considerable: client financial data, transaction systems, and partner integrations spanning coast-to-coast operations. The tech stack runs on Microsoft Azure with ServiceNow for operations, Archer for governance and risk, and Workday for internal systems - standard enterprise tooling for regulated financial infrastructure. The threat model centers on protecting client assets and partner trust in a sector where breaches trigger regulatory scrutiny and reputational collapse. Security teams operate within the constraints of Canadian financial regulations while defending cloud-native wealth management platforms that handle sensitive investment data at scale. The company's structure as a technology-enabled wealth services provider means security isn't just compliance theater - it's core to the business model of powering other institutions' wealth operations. Security work here involves defending multi-tenant financial systems, managing third-party risk across hundreds of credit union partners, and securing integrations between legacy wealth management infrastructure and cloud platforms. The operational reality is protecting a consolidated entity still digesting multiple acquisitions while maintaining uptime and compliance for partners who depend on the platform for their own customer-facing services.
Aviso Wealth manages over $160 billion in assets for 300 partners across Canada - virtually every credit union in the country - through a wealth management platform launched in 2018 by consolidating Credential Financial, Qtrade Financial Group, and NEI Investments. The attack surface is considerable: client financial data, transaction systems, and partner integrations spanning coast-to-coast operations. The tech stack runs on Microsoft Azure with ServiceNow for operations, Archer for governance and risk, and Workday for internal systems - standard enterprise tooling for regulated financial infrastructure.
The threat model centers on protecting client assets and partner trust in a sector where breaches trigger regulatory scrutiny and reputational collapse. Security teams operate within the constraints of Canadian financial regulations while defending cloud-native wealth management platforms that handle sensitive investment data at scale. The company's structure as a technology-enabled wealth services provider means security isn't just compliance theater - it's core to the business model of powering other institutions' wealth operations.
Security work here involves defending multi-tenant financial systems, managing third-party risk across hundreds of credit union partners, and securing integrations between legacy wealth management infrastructure and cloud platforms. The operational reality is protecting a consolidated entity still digesting multiple acquisitions while maintaining uptime and compliance for partners who depend on the platform for their own customer-facing services.