Roota Almeida is the Head of Security Governance at Amazon Stores where she leads the Security, Governance and Risk Management area to drive transformative changes and enhance information security program effectiveness. With over 15 years of experience in establishing and maintaining global security strategies, architectures, standards, and compliance, Roota is a recognized industry thought leader. Prior to Amazon, Roota has served as a CISO for Covanta and then for Delta Dental of NJ and CT and held security leadership positions at Merck and Pfizer. She serves on the Board of Advisors at several organizations, sits as a governing body chair, is an SC Magazine awards judge and also moonlights as a Faculty.

Mike Anderson serves as Chief Digital and Information Officer for Netskope. Over the past 25 years, he has built and led high-performing teams across a wide range of disciplines, including sales, operations, business development, and information technology. He joined Netskope from Schneider Electric, a global fortune 500 company, where he served as SVP, CIO and Digital Leader for North America.

In 2020, Constellation Research named him a member of the Business Transformation 150, an elite list that recognizes the top global executives leading business transformation efforts in their organizations. The National Diversity Council also recognized him as a Top 50 CIO for diversity and inclusion in 2020 and 2021.

Before Schneider Electric, Mike served as CIO for CROSSMARK, where he digitally transformed the business capabilities for the 40,000 employee service provider to the retail and consumer goods industry. Also, he has held executive leadership roles at Enterprise Mobile, a Microsoft joint venture that is now part of Honeywell, Insight, Software Spectrum, and InVerge, a web services pioneer that he co-founded in 1999.

Mike serves on numerous technology and industry advisory boards and volunteers his time working with nonprofits focused on mental health and suicide prevention and those that benefit the development of our future workforce in science, technology, engineering, and mathematics.

Emily most recently served as Senior Vice President, Chief Trust and Security Officer at DocuSign.  Prior to that she served as Vice President, Chief Information Security Officer at United Airlines and Vice President and Global CISO at AECOM. Emily currently serves on the Board of Directors of Norton LifeLock (NASDAQ: NLOK), Cloud Security Company Wiz and Governance Risk & Compliance company, LogicGate.

 Originally from Manchester, England, Emily is a former Police Detective from the UK Financial Crimes Unit where she led investigations into international investment fraud, money laundering and large scale identity theft cases, running joint investigations with the FBI, SEC and London’s Serious Fraud Office.

As Deloitte Global Chief Information Security Officer, Dave is responsible for building and maintaining the vision, strategy, and programs necessary to secure Deloitte’s information assets, technologies, and data. He drives the continuous evolution and deployment of an enterprise-wide information risk management program and has the privilege to lead world class cybersecurity talent.

Prior to joining Deloitte in April 2018, Dave served as the Chief Security Officer (CSO) for CenturyLink, Inc. He also served as the Vice President of Corporate Security for Qwest Communications International, Inc., prior to the merger with CenturyLink where he was responsible for various corporate security programs.

As a Supervisory Special Agent with the United States Federal Bureau of Investigation (FBI), Dave was responsible for investigating violations of federal statutes in which the Internet, computer systems, and networks were exploited as the targets of terrorist organizations, foreign government sponsored intelligence operations or criminal activities. He managed programs related to white collar crime, crisis management, critical infrastructure protection, and violent crime.

Currently, Dave is a member of the International Security Management Association (ISMA) and Society of Former Special Agents of the FBI. 

Shamla Naidoo is an accomplished information security executive with more than 25 years of experience. Previously she was the Global Chief Information Security Officer of IBM, responsible for safeguarding IBM globally including all its business units and brands. She was responsible for IBM\’s overall information security program, which includes the company’s information risk and security strategies, planning, governance, architecture, and operations.

Prior to joining IBM, Shamla was Vice President of Information Risk and Security at Starwood Hotels and Resorts. Previous roles include Chief Information Officer, Chief Information Security Officer and Chief Risk Officer at leading companies including WellPoint, Northern Trust and ABN AMRO.

Shamla is an adjunct law professor, developing and teaching courses in information technology, cybersecurity and privacy law. She also has a license to practice law in both Illinois and Washington DC.

Shamla holds a bachelor\’s degree in Information Systems and Economics from the University of South Africa, and a Juris Doctor degree from John Marshall Law School.

Kevin is the founder and Director of the M.S. in Cybersecurity Policy and Governance Program at Boston College, and an Assistant Professor of the Practice at Boston College Law School and in Boston College’s Carroll School of Management’s Business Law and Society Department. With over 20 years of combined law enforcement, military, national security, business, higher education, and teaching experience, he has worked as an analyst and an attorney for the U.S. Department of Justice, U.S. Navy, U.S. Department of Defense, law firms in Boston and Washington, D.C., and as the General Counsel for an international software company based in Seattle, Washington. Along with his teaching at Boston College, Kevin is a Research Affiliate at the MIT Sloan School of Management and he has taught courses at the U.S. Naval Academy, where he was also the Deputy General Counsel to the Superintendent. Kevin serves as a Trustee for the Board of Boston College High School, as a Member of the Boston College Law School Business Advisory Council, as a Director of the Board for Reading Cooperative Bank, and as an Advisor for HYCU, Inc. From 2016-2017, he was the Panel Lead for the Collegiate Working Group for the U.S. Department of Homeland Security\’s National Initiative for Cybersecurity Education (NICE). Kevin regularly provides expert strategic counsel and training for organizations regarding cybersecurity, privacy, and varying business concerns.  He also provides expert commentary on such matters for varying local, national, and international media outlets. 

Clif Triplett most recently completed his assignment in the Obama Administration where he was recruited to the Federal Government to address the cybersecurity challenges brought to light by the US Office of Personnel Management (OPM) breach of 21.5M individuals background investigation records.  Clif served as one of eight Presidential Executive Fellows brought in from industry to assist in the remediation of significant government issues, in this case, Clif was tasked with cybersecurity.

Prior to his service with the US Government, Clif worked in many major US companies to include General Motors, Motorola and Baker Hughes in a variety of senior leadership positions. In each case, he was asked to assist those organizations in major transformations.

He was brought into General Motors by the CEO and CIO to standardize manufacturing processes and systems, and concurrently those associated with all aspects of quality across GM’s 600 manufacturing facilities.  At Motorola he was once again brought in by the CEO. He served as the General Manager for Global Services and was tasked to create the global service organization and market identity not previously existing.  At Baker Hughes, he was brought into the company by the CEO and COO to facilitate the transformation of the company from a collection of company entities across the globe operating in a holding company fashion, to a single corporation with a single face to the customer.  Also led the evolution of remote digital service operations, and within his organization, led the team responsible all remote horizontal drilling and well monitoring.

Clif is a graduate of the United States Military Academy at West Point and earned a Masters in Computer Information Systems from Boston University.

As vice president and chief Information security officer of Xerox Corporation, Dr. Alissa Johnson  is  responsible  for  protecting  the  information  assets  of  the  $11  billion technology leader. In her role, she established, and currently leads, a corporate-wide information  risk  management  program. She  identifies,  evaluates  and  reports  on information security practices, controls, and risks in order to comply with regulatory requirements  and to align  with  the risk  posture of  the enterprise.

Prior  to  Xerox, Dr. Johnson  served  as  the  first chief  information  security officer  at Stryker Corporation, a multi-billion dollar medical technology company. At Stryker, she oversaw  global activities  related  to  information  security.  She  also  established  the standards and governance around information security issues related to products.  She managed all security transformation initiatives and worked closely with business leaders and  heads of  regional infrastructure to ensure security policy and  strategy was implemented  consistently.

Dr. Johnson spent three years as deputy chief information officer of the White House. Beginning in March 2012, she helped to modernize the Executive Office of the President\’s IT systems, with cloud services and virtualization. She employed new cybersecurity strategies, and enhanced technology across the office of the President while serving as chair on multiple boards.

Previously, she served as associate vice president for the Enterprise Solutions Division at Catapult Technology, and as a deputy chief technology officer at Lockheed Martin Corporation. She began her career with the Department of Defense as a cryptologic mathematician.

Dr. Johnson holds a PhD in Information Technology Management from Capella University; a master’s degree in Telecommunications and Computer Networks from The George Washington University; and a bachelor’s degree in mathematics from Savannah State University.

Dr. Edward G. Amoroso is Chief Executive Officer of TAG Cyber LLC, a global cyber security advisory, training, consulting, and media services company supporting hundreds of major organizations across the world. Ed recently retired from AT&T after thirty-one years of service, beginning in Unix security R&D at Bell Labs and culminating as Senior Vice President and Chief Security Officer of AT&T from 2004 to 2016. He was elected an AT&T Fellow in 2010.

Ed has been Adjunct Professor of Computer Science at the Stevens Institute of Technology for the past twenty-nine years, where he has introduced over three thousand graduate students to the topic of information security. He is also a Research Professor in the Computer Science Department at the NYU Tandon School of Engineering, and a Senior Advisor at the Applied Physics Laboratory at Johns Hopkins University. He is author of six books on cyber security, and dozens of major research and technical papers in peer-reviewed journals and conference proceedings.

Ed holds the BS degree in Physics from Dickinson College, the MS/PhD degrees in Computer Science from the Stevens Institute of Technology, and is a graduate of the Columbia Business School. He holds ten patents in cyber security technology, and he served previously on the Board of Directors for M&T Bank and the NSA Advisory Board.

Ed’s work has been highlighted on CNN, the New York Times, and the Wall Street Journal. He has worked directly with four Presidential administrations on issues related to national security, critical infrastructure protection, and cyber policy. He and his wife Lee live in New Jersey and are the proud parents of three wonderfully successful Millennials.

Colin Anderson is Vice President of Information Technology, Global Chief Information Security Officer at Levi Strauss & Co. In this role he manages an international team responsible for information risk management, regulatory compliance, and IT enterprise risk management for a global organization with $5B in annual sales and over 2700 company owned and franchise retail location in 35 countries around the world. Prior to Levi Strauss & Co., Mr. Anderson was the CISO at Safeway a position he held for 6 years, and held IT leadership roles at Commerce One and Bank of America. Mr. Anderson is a frequent speaker on information risk management and other risk and compliance topics, and an elected independent non-executive Director for the non-profit retail cybersecurity organization R-CISC. Mr. Anderson holds both a B.A. in Finance and M.S. in Information Systems.

Richard Arenaro is a Senior Technology Executive with a progressive career spanning 25+ years across a broad range of technology, security and business disciplines.  Known as a trusted advisor to business leaders, his core belief is that it’s not enough to merely partner with the key stakeholders, but rather today’s technology leaders must become an intricate part of the growth strategy; proactively offering solutions which both enable execution of the business strategy and lift revenues.

With a focus on mentoring great talent and building award winning teams, Richard has been able to successfully lead numerous transformative technology initiatives, build world class security operations centers and create commercial security platforms that have been prominently featured in Forbes, the New York Times and Gartner Research.

In his most recent role as Chief Information Security Officer for Horizon Media, he is responsible for the company’s global information security program.  Prior to that, he served as Managing Director, Chief Information Officer & CISO for Stroz Friedberg, a global data risk management and cyber response company.  Other career highlights include positions as Regional CTO for Commerzbank AG,   Director of Information Systems at Lifetime Television and VP of Infrastructure for Citibank’s Consumer Cards Division.

Through various community organizations, and government affiliations, Richard volunteers time towards sponsoring children’s health, education and leadership programs, participating in outreach platforms and working with local law enforcement entities and state agencies on broader reforms.  Richard has held board of director seats at the YMCA, Weeksville Heritage Society and the Forest Hills Inn Corporation.

BG currently serves as the Chief Security Architect at Ross Stores. As one of the leader\’s in the security area, BG\’s passion with security has followed the evolution of Cyber Security. Today, besides being the primary technical resource within the overall security program, defining the strategy for security engineering, risk management and security operations he also oversees security as it relates to the overall enterprise, business and IT. Prior to Ross, BG has held various security architecture, leadership and technical positions at Safeway and Visa.

Patrick was the Global Business Information Security Officer for CBRE currently focused on GWS. He was formerly the Deputy CISO for Cheetah Digital. He is a Security & Privacy Executive, Writer, Speaker, Knowledge Provider and Seeker. He has been an Executive Business Partner at Experian; a Customer Delivery Executive and Service Delivery Leader at Dell; and owned a technology consulting company. He is certified as C/CISO, CISM, CISSP, CRISC, PMP, ITIL Expert, and Lean Six Sigma Black Belt. He is a commercial pilot and flight instructor. He studies and teaches Aikido, rides motorcycles, Scuba dives, and his favorite teaching is “From Chaos Comes Greatness,” a loose translation from the “I Ching”.

Bill Brown was formerly Chief Information Officer & CISO at Veracode, a recognized Gartner Magic Quadrant Leader for Application Security.  He is responsible for making Information Security, Platform Operations, IT and Systems Engineering strategic assets in scaling Veracode’s SaaS platform. Bill has more than 25 years of management experience in Information Technology, Information Security, M&A Technology Integration, SaaS Operations, DevOps, Operations/Logistics and Compliance including FedRAMP, SOC2, SOC3.

In 2010, Bill was recognized as a Computerworld Premier 100 IT Leader, an award that recognizes outstanding technology professionals who have successfully aligned technology with overall business goals to advance their company’s critical IT initiatives.

Prior to joining Veracode, Bill was CIO at Avid where he and his team provided operational support for Avid\’s cloud offerings as well as maintained the continued alignment of information systems and business strategies to ensure the highest level of operational effectiveness.  Before Avid, Bill was at Iron Mountain where he served in several senior leadership roles, including CIO, and he has more than 25 years of management experience in information technology, operations/logistics and electronic commerce.

He was a co-founder and executive vice president of PCs Compleat, a PC retailer/distributor acquired by CompUSA and has also held senior management positions at PC Connection, Send.com, JWP/Businessland and Merisel.

Bill holds a MBA from Babson College and a Bachelor\’s Degree in mathematics from Bridgewater State College.

Marlowe Cochran has been working in the IT field for over 24 years, with 11 plus years in information security roles. He has worked in the federal and state government, health care, not-for-profit, elementary education, and Higher Education sectors in his previous roles. In his current role at the New York State Department of Education, he is the Chief Information Security Officer. Marlowe currently collaborates with external stakeholders, and other NYSED program offices, to lead, manage, and further develop NYSED’s information security program. He is the inhouse consultant for internal and external stakeholders on information security topics and projects. He oversees data risk assessment/management, incident response, the development of policies, procedures, and programs that ensure compliance with all applicable federal and state laws and industry best practices.

Michael Coden is a Managing Director at Boston Consulting Group (BCG) Platinion, the arm of BCG that specializes in business-critical IT architecture, digital transformation, risk management, and cybersecurity solutions. Joining in May 2016, Michael has been instrumental in growing BCG Platinion North America from $30 million to $200 million in sales, and is a Global Leader of Cybersecurity for B of BCG’s Cybersecurity Practice. Michael advises Boards, CEO’s, and C-suite executives at companies in telecommunications, media, technology, financial services, insurance, manufacturing, consumer packaged goods, healthcare, pharma, and other industries.

Michael is also Associate Director of the MIT research consortium: Cybersecurity at MIT Sloan (http://cams.mit.edu), which he co-founded in 2014. CAMS currently has 25 research sponsors including: Google, Microsoft, ExxonMobil, Cisco, SWIFT, State Street Bank, Liberty Mutual, Verizon, and others. From 2003 through 2016, Michael was Vice President of NextNine (now Honeywell), an Israeli technology company where he was recruited by the Board to lead US operations and global sales, developing C-suite relationships with ABB, ExxonMobil, Honeywell, Rockwell Automation, Schneider Electric, Shell Oil, Yokogawa Electric, and others, tripling sales two years in a row. During 1999 through 2003 Michael was an independent consultant with selected assignments including: serving as interim CEO leading a successful turn-around of Digital Fairways Corporation (acquired by DXC/HP/EDS), a leading telecom and enterprise operational support system (OSS) software company by reducing costs and increasing sales approximately 10-fold; developing new business strategies for SMARTS (acquired by Dell/EMC) in the cable TV industry. In 1979 Michael co-founded, was CEO, and Board Chairman of Codenoll Technology Corporation, a leading fiber optics and networking company, that went public in 1980. Codenoll was acquired by ADC Telecommunications (now Arris) in 1996, where Michael continued for four years as Vice President of Marketing and Technology, increasing sales of Metropolitan Area Networks and Cable TV backbones to $300 million. Prior to Codenoll/ADC, Michael was Division Manager for Optical Information Systems (OIS) a subsidiary of Exxon, where his organization became the third company (after AT&T and Hitachi) to produce commercially viable semiconductor lasers. OIS was acquired by McDonnell Douglas. Prior to OIS, Michael was CIO of Maher Terminals (now Maersk), where he designed and implemented advanced automation of the second largest container shipping terminal in Port Elizabeth, NJ. He began his career as a hardware/software engineer at Hewlett Packard and Digital Equipment Corporation.

Board and Advisory Positions:

• Advisor to the National Security Council on the development of Executive Order 13636 and Presidential Policy Directive 21, on Improving Critical Infrastructure Cybersecurity, receiving a letter of appreciation from the White House for his leadership.
• Member, Advisory Board HMG Strategy CIO and CISO Summits
• Technology Advisor, B Capital Group, Venture Capital
• Community of Chairmen, World Economic Forum, developed and conducted cybersecurity training
• Member, the Business Committee of the Metropolitan Museum of Art, NY, NY
• Member, Executive Advisory Board of Polytechnic Institute of Brooklyn (now NYU Engineering)
• Advisor, SenaHill Investment Group, LLC, Fin-Tech investments
• Entrepreneur in Residence at SAS Investors evaluating and advising technology investments for Canaan Partners, Rho Capital, and Sevin Rosen funds.

Michael has published numerous scholarly articles and a book, appeared on radio and television discussing advanced technologies and their business impact, and holds 16 patents in semiconductor devices, fiber optics, networking, and high efficiency cybersecure data protocols.

Michael has a Bachelor of Science in Electrical Engineering from MIT, a Master’s in Business Administration from Columbia University, and a Master’s in Applied Mathematics from the Courant Institute of Mathematical Sciences at NYU. Michael received an Award of Merit from the American Chemical Society, and an Award of Merit from the Laser Institute of America. 

Chris Convey has extensive leadership experience in information and technology risk, cyber security, IT operations and cloud technologies.  Before his current role at Sharp as VP and CISO, he was CIO and CISO at Millennium Health where he led governance, development, operations and security of all company systems.  Prior to Millennium Health, Chris was the enterprise HIPAA Security Program leader at Kaiser Permanente, where he launched and led the strategic plan to improve organizational compliance with the HIPAA Security Rule and other regulations.  Prior to that Chris was Director, Technology Risk and Security Consulting at PwC, where he advised Fortune 500 companies in all aspects of business and technology improvement.

Scott was awarded a Bachelor of Science degree in Commerce from the University of Virginia and holds the Certified Information Systems Security Professional (CISSP) certification.

Ken leads the information security and data privacy programs for the national law firm, Lowenstein Sandler, where he mitigates their security and privacy risks to comply with client and regulatory requirements. He has more than 20 years of experience implementing and supporting secure, complex information technology infrastructures. Ken’s detailed knowledge of security and network methodologies, techniques, and best practices enables him to thoroughly assess and remediate cybersecurity threats and vulnerabilities.

He is President of the New Jersey Chapter of (ISC)², a  charitable, nonprofit organization focused on disseminating knowledge, exchanging ideas, and encouraging community outreach efforts in an effort to advance information security practice and awareness. 

Ken is also a member of the Executive and Threat Intelligence Committees of the Legal Services Information Sharing and Analysis Organization (LS-ISAO), a member-driven community providing a secure framework for sharing actionable threat intelligence and vulnerability information. LS-ISAO fosters collaboration among members and engages key sectors and governments to prevent and respond to cybersecurity incidents.  

He is also an Advisory Board Member for NJ InfraGard, which is a partnership between the Federal Bureau of Investigation (FBI) and members of the private sector for the protection of U.S. Critical Infrastructure.

 Ken is a volunteer with the Cybersecurity Workforce Alliance (CWA), which mentors high school and college students who are breaking into the cybersecurity field. 

He periodically presents at conferences to educate audiences about the evolving cybersecurity and privacy landscape.

 Some of Ken’s cybersecurity and privacy certifications include:

• CISSP: Certified Information Systems Security Professional
• CIPP/US: Certified Information Privacy Professional – United States
• CIPM: Certified Information Privacy Manager
• CIPT: Certified Information Privacy Technologist
• CCSP: Certified Cloud Security Professional
• ISO 27001 Lead Implementer
• HCISPP: HealthCare Information Security and Privacy Practitioner
• CISM: Certified Information Security Manager
• CEH: Certified Ethical Hacker

Mr. Stephen G. Fridakis is the SVP and Chief Information Security Officer of WW (formerly Weight Watchers), located in New York. He has responsibility for the management of IT Security, retail location protection, privacy controls and oversight of networks and applications.

Prior to WW he was the CISO of HBO. He also worked as a Security Scientist at AWS. He served for many years as the CISO of several United Nations agencies (UNDP, FAO). His long experience in IT security includes positions at VeriSign, Oracle, Netscape, and DHL.

He holds post graduate degrees in Business Administration, and Computer Science, and multiple certifications in IT Security Management and Disaster Recovery. He has served in the USNR and is the holder of multiple patents in IT Security technologies.

He lives in Westchester, NY with his family and in his free time serves as a volunteer EMT with his local ambulance company.

Todd Friedman was named CISO for ResMed, a global company that manufactures and distributes medical equipment and solutions for diagnosing, treating and, managing sleep-disordered breathing and other respiratory conditions.

Todd is a versatile leader with more than twenty-five years’ experience in information risk and security management. His career has spanned the healthcare, toy, entertainment and insurance industries, during which Todd led numerous functions, including infrastructure planning and management, systems integration, PMO, project management, governance, compliance, strategic planning, and for the past decade, information risk and security management. Prior to joining ResMed in early 2015, Todd was the CISO of Mattel, and prior to that the SVP and CISO of Universal Music Group, the world largest music company.

A native of Los Angeles, he holds an MBA from UCLA and a B.A. from UCSD.

Experienced information Security leader, mentor, coach, and team builder with over 20 years of experience in developing and implementing security strategies, risk assessments, employee awareness trainings, internal audits & assessments, and compliance frameworks for organizations across diverse industries. Adept at designing and executing security programs, establishing security policies and procedures, and managing security incidents. A strong communicator and relationship builder, with the ability to articulate complex security concepts to both technical and non-technical audiences.

Extensive experience in Security risk assessments, proactively preparing for Cyber Security Insurance requirements, Internal & external audits, Risk assessment, Risk Mitigation, Incident management, Disaster recovery and Business continuity planning, SOC, MDR services, Internal and External threat hunting, and policies & procedures. Led privacy programs for GDPR, HIPAA, CCPA and other privacy regulations.

I have led and managed cyber security and privacy projects and teams with four global organizations across several geographical locations.

Al Ghous is the Sr Director of Cyber Security for GE Digital. In this capacity Al is responsible for GE Digital’s Cloud Platform and Product Cyber Security where he is focused on building secure and resilient Cloud for the Industrial Internet of Things (IIoT) known as Predix – first of its kind. Al’s Cyber Security organization includes Product Security, Infrastructure and Platform Security, Identity and Access Management, Encryption, Product Assurance and Response Services. Al’s organization takes pride in their approach to secure software development practices while maintaining a state of preparedness to detect anomalous activities and take necessary action to protect Predix and GE’s Customers.

Al has been in the Cyber Security industry for over 18 years contributing in different capacities from Risk Management to Solution Consulting and Security Architecture. Al is active in the Cyber Security industry and part of several consortiums. He has held leadership roles in organizations such as Ernst and Young, Oracle, Kaiser Permanente and Informatica to name a few.

Daniel Gorecki is the Chief Information Security Officer at Ascot Group Limited, a specialty insurance & reinsurance organization.  In this role he leads a global team overseeing the company\’s cyber security, and data privacy functions for the organization.  Prior to joining Ascot Group in November 2020, he held the role of CISO at Aramark Services and both CISO and CIO roles at Intercept Pharmaceuticals.  Dan maintains the certification for Certified Information Systems Security Professional (CISSP), Certified Data Privacy Solutions Engineer (CDPSE), has completed SIM\’s Regional Leadership Forum for IT Executives, and holds a B.E. in Computer Engineering from Stony Brook University.  

Experienced, energetic, and engaging Information Security leader with 25+ years in IT and Cybersecurity across multiple verticals: such as Financial, Health Care, State and Local Government, and Higher Education. 

Strong believer that Cybersecurity is a critical business function partnering with Compliance and Enterprise Risk Management. 

CISO at SUNY Downstate Health Sciences University (Since December of 2019)

Former CISO of NYCERS (3 years) and NYC Law Department (10 years) 

Kevin Gowen serves as Chief Information Security Officer for Synovus and is responsible for all aspects of information and cyber security, physical security, business continuity, fraud, and financial crimes. This includes security architecture and operations, risk assessment, business continuity planning, disaster recovery, identity and access management, fraud monitoring and investigations, and crisis management. He was named Chief Information Security Officer in February 2015. Gowen earned Bachelor’s and Master’s degrees in Mechanical Engineering from the Georgia Institute of Technology. He received the James H. Blanchard Leadership award in 2016. Gowen was a finalist for both the ISE Southeast Information Security Executive of the Year and the ISE North America Financial Services Information Security Executive of the Year awards in 2019. Gowen is an alumnus of Leadership Columbus and serves as a board member of the National Technology Security Coalition.

Meredith Harper serves as vice president and chief information security officer at Eli Lilly and Company. She is responsible for the company’s global information security program. 

Prior to joining Lilly in 2018 as senior director, deputy chief information security officer, Meredith served as chief information privacy and security officer at Henry Ford Health System, where she had ultimate responsibility for the protection of Henry Ford’s provider, insurance, retail and research businesses.    

Meredith is an active member of the Health Care Compliance Association where she holds dual certifications in healthcare compliance and privacy. She is certified as a Healthcare Information Security & Privacy Practitioner through the International Information System Security Certification Consortium Inc. and a Certified Information Security Manager through the Information Systems Audit and Control Association.

She earned a master’s degree in health services administration and a bachelor’s degree in computer information systems from the University of Detroit Mercy. She also earned a master’s of jurisprudence in health law from Loyola University Chicago School of Law.  

Meredith serves on several advisory boards in support of empowering women and minorities to embark upon careers in technology, especially in information security. She has also served her community for 29 years through her Diamond Life membership in Delta Sigma Theta Sorority Inc.

Todd brings years of security leadership and innovation experience managing cyber risk and delivering business results. He’s been a CISO, lead cybersecurity assessments globally and delivered in multiple industries, including high tech, manufacturing, pharmaceuticals, and financial services.

Amir Jabri serves as information security manager at Accuray, a leading edge manufacturer of radiation oncology medical devices. He is responsible for the information security program, and plays a key role as subject matter expert in constructing and maturing enterprise information security programs. He partners closely with business functions to ensure that all security, privacy, legal and regulatory compliance requirements are met.

Jabri has more than 20 years of experience in information technology and security, architecture, and risk management. Having led teams in developing and implementing risk management programs for Fortune 500 firms and the U.S. Government, he is an expert at managing organization-wide security strategies.

Jabri holds the CISSP certification and a master’s degree in information assurance from University of Detroit Mercy. He also serves on the board for several professional and nonprofit organizations. In his free time, he enjoys spending time with wife and two young sons, swimming, and watching soccer.

Craig James-Heer is the Chief Information Security Officer for Gordon Food Service, the largest family-operated broadline foodservice distributor in North America.  In this role, Craig is accountable for information security, risk, and compliance across the enterprise. Craig has been an employee with Gordon Food Service for over 20 years and spent much of his career in Application Development, Infrastructure, and IT leadership. Craig holds a bachelor’s degree in Computer Science from Michigan Technological University, an MBA from Grand Valley State University, and is certified as a CISM.

Strategic MBA / CISSP / SFCP CISO equivalent transformational leader in Fortune 500 Information Technology and Cybersecurity.

A seasoned cybersecurity transformational leader with over thirty years of experience in information technology security, operations, change management, SDLC release management, disaster recovery, risk management, IT governance and compliance, PCI compliance, and innovative IT business development for $2b private retail organization, multi-million/ billion dollar Fortune 500 quick service food industry, world-class trade show industry, and creative services / marketing for bleeding edge voice services industries.

Josh Knopp, vice present and information security officer of Enterprise Holdings, is responsible for developing and implementing Enterprise Holdings’ global information security strategy in a manner that enables business and reduces friction.

Enterprise Holdings operates – through an international network of regional subsidiaries and independent franchises – the Enterprise Rent-A-Car, Alamo Rent A Car and National Car Rental brands, as well as more than 9,000 fully-staffed neighborhood and airport locations in more than 75 countries. Enterprise Holdings is the largest car rental company in the world, as measured by revenue, fleet and employees. In addition, Enterprise Holdings is the most comprehensive service provider and only investment-grade company in the U.S. car rental industry.

The company and its affiliate, Enterprise Fleet Management, offer a total transportation solution, accounting for more than 1.7 million vehicles throughout the world. Combined, these businesses – accounting for $19.4 billion in revenue and more than 93,000 employees in fiscal year 2015 – include the Car Sales, Truck Rental, CarShare, Rideshare vanpooling, Zimride, Exotic Car Collection, Motorcycle Rental and Flex-E-Rent services. The annual revenues of Enterprise Holdings, one of America’s largest private companies, rank near the top of the global travel industry, exceeding many airlines and most cruise lines, hotels, tour operators and online travel agencies.

Josh has more than 20 years of experience in information technology and more than 16 years of experience directly in the field of information security.  Prior to joining Enterprise Holdings in April, 2016, Josh led MasterCard’s Site Data Protection program and was responsible for improving the logical security framework for the global payment industry.  Josh developed and implemented MasterCard’s strategy to influence market stakeholders towards increasingly secure information security postures and use of secure, emerging payment technologies.  Josh also represented MasterCard on the Executive Committee of the PCI Security Standards Council.

Susan Koski is the head of Security & Enterprise Response for The PNC Financial Services Group.

In this capacity, Susan is responsible for digital identity, fraud and strategy, incident management and monitoring, and physical security.

Susan has more than 25 years of experience in Information Technology (IT), cybersecurity, business continuity, third-party risk management and IT risk management. She has also served in executive leadership roles with BNY Mellon, Synovus and Aetna.

Susan holds a bachelor’s degree in electrical engineering from the University of Pittsburgh and an MBA from Duquesne University. 

She is a CISO Executive Network Advisory Council member, chair of the BITS Security Steering Committee and a governing body member for the Evanta Pittsburgh CISO program.

Matthew Lagana is an accomplished technology executive with over 25 years of proven success in strategic planning, cybersecurity, risk management, and operational excellence.  In his dual role as Chief Technology Officer (CTO) and Chief Information Security Officer (CISO) at MBIA, Matthew leads all facets of Infrastructure & Operations, Cybersecurity, Enterprise Applications, Architecture & Engineering, and HelpDesk Services.

Prior to joining MBIA, Matthew held key technical and leadership positions at Avon Products, honing his expertise in managing large-scale IT initiatives. His deep knowledge of the financial services sector has enabled him to streamline costs, accelerate time to market, and spearhead innovative security and risk management programs.

A specialist in aligning technology with business strategy, Matthew has a strong track record of leading digital transformations that drive operational efficiency and enhance business value.

Matthew holds a Master’s Degree in Management & Systems from New York University, with a concentration in Strategy & Leadership, and has been a Certified Information Systems Security Professional (CISSP) since 2002.  He serves on the Board of Fairfield/Westchester’s Chapter of the Society for Information Management and sits on Technology Advisory Boards for Iona College and Pace University.

Outside of work, Matthew enjoys golfing and spending time with his wife and three children.

Jason Lish is currently the Chief Security, Privacy, and Data Officer for Advisor Solutions where he is developing a comprehensive and proactive strategy to drive business decisions and protect value creation on behalf of Advisor Group and its affiliated Advisors. Prior to Advisor Group Jason served as Alight’s Chief Information Officer. In this role, Jason was responsible for Alight’s overall digital, technology, enterprise risk and security strategy and execution. Before joining Alight, Jason was the Senior Vice President of Security Technology and Operations for Charles Schwab and held senior roles in cyber security at Honeywell. Jason began his career in the United States Air Force as a telecommunication specialist where he administered large network, communication, and cryptographic systems. He serves on several advisory boards related to systems security. Jason degrees include a B.S. in Business Information Systems and an M.B.A.

 Tomás Maldonado is the Chief Information Security Officer (CISO) at the National Football League (NFL).  He is globally responsible for leading the information security program for the League and its entities.  Maldonado has over 23 years of experience in this area, having led global information security teams and programs at several large international organizations.

Prior to Joining the NFL, Maldonado was the CISO at International Flavors & Fragrances where he was globally responsible for establishing and leading the Cybersecurity & Technology Risk Management program. Maldonado was an executive director and CISO for the corporate sector of JPMorgan Chase, where he established and shaped the future direction of the security program and focus for the line of business. He was also a VP of technology risk management at Goldman Sachs where he worked on several key initiatives namely creating and leading the data loss protection program. He had additional opportunities at Schroders where he was the network security officer, Ernst & Young and Bloomberg LP. 

Maldonado holds several industry recognizable certifications: he is a CISSP, a CISM, a CDPSE, and a CRISC, while holding a Bachelor of Science in computer science from Fordham University.

Israel is a professional in cyber strategy and innovation empowering boards and companies that have decided to reclaim cyber dominance.  He’s recognized as an expert in Cyber Enterprise Risk Management, as well as an NACD Full Board Member and Leadership Fellow, obtaining the highest credentials for Board Directorship. His board experience includes training directors, advisory and board service with: F500; National Bar Associations; American University Kogod Cyber Governance Center; The Association for Corporate Growth, representing 14K companies; Globes International (Tel Aviv’s “WSJ”); the Global Manufacturing ISAO, sharing threat information for 29K companies; and the Axon Global Alliance®. Martinez is also an accomplished thought leader and speaker with appearances in: The WSJ MarketWatch ®, NACD ® Annual Board Leadership Conferences, DHS Office of Analysis & Intelligence training conferences, Forbes CEO Conferences, CIO Magazine, U.S. Federal Reserve, and U.S. Congress.  As the CEO of Axon Global Services, recognized as leaders by the U.S. Secret Service and DHS, he is currently an advisor in cyber to the President’s 100-day team. He’s the recipient of, the HITEC top 100, The U.S. Senatorial Medal of Freedom (also awarded to Ronald Reagan and General Schwarzkopf), and his recent post graduate certifications include; business strategy at Harvard, Intelligence Analysis (TCOLE) at SMU, Cyber Counter Terrorism & Defense at DHS, and FINTECH Blockchain at MIT (2017). 

As vice president and chief information security officer for BJC HealthCare, Matthew Modica is responsible for the strategic direction, planning and implementation of enterprise IT systems, business operation and facility defenses against security breaches and vulnerability issues. He has the responsibility for establishing, meeting and continuously monitoring the information security goals and objectives, while maintaining alignment with the strategic goals and priorities for BJC. BJC HealthCare is one of the nation’s largest nonprofit health care organizations with $5.3 billion in net revenues and more than 31,000 employees in the greater St. Louis, southern Illinois and mid-Missouri regions. Its teaching hospitals, Barnes-Jewish Hospital and St. Louis Children’s Hospital, are affiliated with internationally renowned Washington University School of Medicine. Modica has a long-tenured career in the information security field at multiple Fortune 1000 companies in the financial services, health care and data services industries. Modica holds a Bachelor of Science degree in Industrial Technology from Southeast Missouri State University and is currently attending Webster University’s MBA program. He is a Certified Information Security Manager (CISM) and holds a Project Management Professional (PMP) certification. Modica is passionate about preparing the next generation to serve in cybersecurity and STEM-related roles. He serves on the St. Louis CISO board and cybersecurity advisory committees for Southeast Missouri State University, Webster University, Washington University, SecureWorld St. Louis and the Evanta CXO Summit. Additionally, Modica sits on the Autism Speaks STL golf committee whose mission is to raise funds to support research and services for those on the autism spectrum.

M. K. Palmore is the Vice President, Field Chief Security Officer (Americas) at Palo Alto Networks. He currently serves to enhance client relationships through strategic engagement and advisory services as a leader within Insight by Palo Alto Networks. He provides cybersecurity thought leadership and evangelism on the cyber threat landscape, emerging threats and the digital transformation of Palo Alto Networks customers.

M. K. Palmore served as the Head of the Cyber Security Branch for FBI San Francisco and is a 21-year veteran of the FBI. His responsibilities included the strategic and tactical operational management of several teams of cyber intrusion investigators, computer scientists, analysts and digital forensics personnel charged with conducting and supporting investigations of cyber threat actors in both criminal and national security intrusion matters.

Additionally, Mr. Palmore leads the San Francisco Division’s internal security and risk apparatus. Mr. Palmore’s leadership and investigative experiences include: Cyber Security, Crisis Response/Management, Risk-Management Advisory Services and Counter-Terrorism Investigations and Intelligence Development. Mr. Palmore’s cyber security certifications include the ISACA – CISM, ISC2 – CISSP and the Carnegie Mellon University CISO Certificate. He earned a B.S. from the United States Naval Academy and a MBA from Pepperdine University where he currently serves as an adjunct professor in the Information Systems Department for graduate studies. Prior to the FBI, Mr. Palmore served as a commissioned officer in the U.S. Marine Corps.

Blake Penn currently serves as the CISO for Colgate University. He has spent over twenty years in a wide range of leadership roles in cybersecurity, risk management, compliance, and privacy and has a decade of experience consulting executives at leading organizations in these matters.

Blake is an experienced public speaker, instructor, and mentor. He is currently working on his doctorate and holds a master’s degree in computer science and a bachelor’s degree in applied biology.

Michael brings over 20 years of combined IT/Tech practitioner and Executive Search experience specific to CISO/VP Security, CIO/CTO, and DevOps engagements.  Michael has led a focused subset of recent Security leadership engagements across a variety of company sizes and industries including Veritas/Symantec, EY, Virgin America, Duo Security, MuleSoft, and One Medical Group.  Most recently Michael was the CEO for Mitchellake in the US and a Technology Partner at Calibre One.  He also spent 10 years as the Founder and Managing Technology Partner for CVPartners.  Prior to his executive search career Michael was in the managed cloud operations space as a Co-Founder of OpSource and an early executive member at SiteSmith/AboveNet.  Michael began his career with MTI, one of the pioneers in the managed storage space.  A native of Maryland, Michael holds a B.S. Degree from the University of Delaware.  Michael lives in the SF Bay Area.

Matthew Rosenquist joined Intel Corp in 1996 and benefits from 28 diverse years in the fields of cyber, physical, and information security. Mr. Rosenquist specializes in security strategy, measuring value, developing best-practices for cost effective capabilities, and establishing organizations which deliver optimal levels of cybersecurity. As a cybersecurity strategist for the Intel, he identifies risks and opportunities to build organizations that balance risks, costs, and usability factors across hardware, firmware, software, artificial intelligence, and services. Mr. Rosenquist is active in the industry and consults on best-practices and emerging risks to academic, business, and government audiences around the globe. Mr. Rosenquist built and managed Intel’s first global 24×7 Security Operations Center, oversaw several internal platform security products and services, deployed the enterprise intrusion detection program, and was Intel’s first Incident Commander for worldwide IT emergency responses. He has conducted investigations and risk assessments in defense of corporate assets and managed the security playbook for Intel security features landing in the PC architecture. Mr. Rosenquist ran security for Intel’s multi-billion dollar mergers and acquisitions activities and quantitatively justified the improvement strategy protecting Intel’s global manufacturing capability. His development of the Threat Agent Risk Assessment (TARA) methodology to optimize security, has influenced how organizations view and prioritize risks. Currently, he is leading cybersecurity for Intel’s Artificial Intelligence group, with a focus on how AI will transform security, privacy, and safety. Mr. Rosenquist is very active in the industry, speaks at conferences, consults with industry partners, member of multiple advisory boards, and has published acclaimed white papers, blogs, and videos on a wide range of cybersecurity topics. In 2018, he was named one of LinkedIn’s Top Voices for technology. He is very passionate about cybersecurity and strives to blend practical risk mitigation practices, business processes, and technology capabilities to achieve an optimal level of security.

Award-winning IT security and risk advisory leader. She served various roles at First Data (now Fiserv) including Head of Cybersecurity in Asia Pacific and Head of IT audit for SDLC. She provided risk advisory services for affected merchants, issuers, and internal stakeholders resulting in loss mitigation valued at over $100 million to date. Her team’s work was acknowledged by federal law enforcement for providing key intelligence related to two national breaches that led to arrests of leaders of the FIN7 cybercriminal group. American Banker’s PaymentsSource named her Most Influential Woman in Payments Next (2021). Prior to joining Fiserv, Ms. Rusin spent five years working at K2 Intelligence, a specialized investigative, compliance, and cyber defence services firm. Her work included a securities/bankruptcy case and a top-tier law firm engagement involving a decade-long $4.26 billion global asset recovery. She has conducted more than 65 investigations involving fraud, bribery, corruption, money laundering, and data security.

Anahi Santiago is the Chief Information Security Officer at Christiana Care Health System in Delaware, one of the country’s largest healthcare providers.  With over 20 years in the Information Technology field, Anahi has extensive experience in areas of cybersecurity, privacy, regulatory compliance, program management and infrastructure services.

Anahi has overall responsibility for the organization’s information security program and strategic direction. She leads a team of high performing information security professionals in supporting Christiana\’s strategic initiatives by partnering with the business and managing risks, implementing policies and controls, and generating overall awareness.

Anahi holds a BS in Electrical and Computer Engineering as well as an Executive MBA from Drexel University.  She is also an active contributor in several national information security and privacy organizations.

Bradley J. Schaufenbuel is currently Vice President and Chief Information Security Officer at Paychex. Prior to his current role, he held security leadership positions at Paylocity, Midland States Bank, Midwest Bank, Zurich Financial Services, Experian, and Arthur Andersen LLP. Bradley is the author of multiple books (including two “For Dummies” titles) and has had numerous articles published in professional journals on a wide variety of topics related to information security and governance. He is licensed to practice law in Illinois and is a member of the United States Supreme Court Bar.

Bradley holds twenty-five professional designations in the areas of information security management, IT compliance, information privacy, fraud examination, IT audit, computer forensics, ethical hacking, business continuity planning, project management, cloud security, and process improvement, including the C|CISO, CISSP, CISM, CISA, CCSP, CIPP/US, CIPP/E, CIPM, CSSLP, PMP, CRISC, CGEIT, ISSMP, ISSAP, CFE, C|EH, CBCP, CCSK, CDPSE, DFCP, CIFI, CSOXM, CSOE, ITIL v3 Foundation, and Six Sigma Black Belt. He holds an MBA from DePaul University’s Kellstadt Graduate School of Business and a JD and an LLM in information technology and privacy law from the University of Illinois at Chicago’s John Marshall Law School. Bradley has served as a director on several corporate and non-profit boards, is a regular speaker at industry conferences, and has served numerous clients in the legal, financial services, and healthcare industries as a freelance consultant. He is an advisor to YL Ventures GP, Ltd., Glilot Capital, Eclipz, Inc., Great North Labs, CloudSimple, CloudVector, and ThirdPartyTrust. Bradley was recognized as the Chicago CISO of the Year in 2018 and as one of the Top 100 CISOs for 2020 by Cyber Defense Magazine.

Ed Solomon has over 30 years of IT Services, Consulting and Staffing experience with the focus on building high performing fast growth businesses. Ed’s relationships with “C” level IT Executives helped him to transition to successfully grow Genesys Works and Year Up Bay Area Corporate Partnerships in Northern California, LA, Phoenix, DC, & NY.  Ed has helped to build and manage a series of CIO Roundtables in Northern & Southern California to help CIO’s network and share best practices.

Prior to Non Profit Consulting, Ed was President & CEO & Co-Founder of an International Nurse Recruitment business. During most of his career Ed was the Senior U.S. Partner and SVP of a Technology Consulting and Staffing Business Division responsible for the six technology offices in the western U.S.

Ed has his BS degree in Industrial Management from Fairleigh Dickinson University, and an MS in Management Science from Stevens Institute of Technology. He is a long standing volunteer at the Berkeley Haas School, Institute for Business Innovation, Fisher Center for Business Analytics and has co-managed many Executive IT Seminars and MBA Tech Competitions over the past years.

Gary Sorrentino currently serves as Global CIO for Zoom Video Communications. A former Managing Director for J.P. Morgan Asset & Wealth Management, Gary was the Global Head of Client Cyber Awareness and Education.  For over 12 years, Gary was the Chief Technology Officer for J.P. Morgan AWM’s global technology infrastructure initiatives, where he managed its Data Privacy program and was responsible for Infrastructure, Application and End User Technology Production Support. In 2014, he assumed a new role as the lead for their Cybersecurity efforts and developed a firm wide “Protect the Client” Cyber program designed to raise cybersecurity awareness among employees and clients.  With almost 40 years of experience in Information Technology, Gary has served in various other IT leadership positions in firms across the financial services industry. Prior to joining J.P. Morgan in 2005, Gary was Head of Global Infrastructure and Head of Technology Efficiencies at Citi Private Bank, where he was responsible for Global Infrastructure Support and strategic technology initiatives. Other roles he has held include Global Technology CFO at Credit Suisse and North America IT Controller at UBS 

Stephen Spagnuolo is a Director in the Baltimore office and leads cyber, digital security, risk focus areas, and client engagements. He has earned a recognized track record of delivering leadership talent and corporate development solutions with a principal focus on cyber security and operational risk across technology, financial services, and other industry sectors, ranging from early stage/startup to emerging growth to mid and large global corporates, banks and consultancies. In so doing, he leverages his deep and extensive network, particularly across the U.S. National Security and Wall Street communities.

Prior to Stanton Chase, Stephen launched and led the Digital Security Practice for several boutique executive search firms. Earlier he was with Russell Reynolds Associates in New York, as a member of the Global Banking & Markets Practice and then Co-Founder/Head of the Americas for Sheffield Haworth, a London-based global financial services recruitment firm, where in just a few years’ time, the platform and team he established and built earned ‘firm of choice’ recognition amongst their US based Tier 1 bank and corporate clients.

He currently serves as a cybersecurity expert and the on-call cyber security headhunter with RANE (Risk Assistance Network + Exchange), and he is frequently engaged as a moderator and guest panelist on cyber security talent leadership, recruitment, and development for various executive leadership summits and forums, including Security Innovation Network (SINET) and HMG Strategy CIO & CISO Summits, the latter of which he co-established and built as an adjunct to HMG CIO.

A graduate of the U.S. Naval Academy, Stephen served with distinction as a US Marine Corps infantry officer, having deployed to multiple overseas contingencies.

Mike was appointed Takeda’s first Chief Digital Trust Officer in April 2022, since joining as Chief Information Security Officer in August 2018. Mike is accountable to ensure Takeda meets its critically important security and trust responsibilities, as deeply embedded and as consistently as possible, in a rapidly disruptive landscape of data, digital and technology innovation across healthcare. Data and digital aspirations across life sciences present new challenges across privacy, security, ethical, and reputational risk areas. Digital Trust capabilities, platforms, and services will be expanded to reflect this critical shift in business strategy. Data, digital and cloud centricity underscores all parts of the biopharmaceutical value chain; Mike and his team are evolving to ensure the focus of protection extends to enabling and assuring Trust and Resiliency. As healthcare continues to extend data and digital products to providers, patients, donors, and other external stakeholders, the \”users\” will number in the tens of millions. Trust and reputation will be directly linked to these digital engagements. 

Prior to joining Takeda, Mike was CISO at Allergan plc and before that, VP, Information Security Assurance at GlaxoSmithKline (GSK).  He has led due diligence and integration efforts for more than 50 acquisition and divesture transactions throughout his career, including four major acquisitions and one significant divestiture each valued at more than $40 billion. 

Mike was enshrined into the CSO Hall of Fame in 2021, recognized within HMG Strategy’s 2020 Global Technology Executives That Matter and 2019’s 100 Technology Executives to Watch and was awarded Information Security Executive of the Year within the Northeast region and Healthcare industry in 2020 and 2015.  He is a regular speaker, author, and expert panelist on digital trust, information risk, healthcare resiliency and cybersecurity.  Mike passionately advocates cross-industry sharing and collaboration and has served on the Board of Directors for the Health Information Security & Analysis Center (H-ISAC) since 2017.  Mike is a venture capital Board Advisor for Cyberstarts, and sits on the executive advisory boards for Okta, Armis and Palo Alto. 

Mike holds an MBA from St. Joseph’s University and a Bachelor of Science in Computer Engineering from the University of Notre Dame.  Mike splits his time between his home office in Cambridge, MA USA, and offices in Zurich and Tokyo. 

A high energy, experienced c-level security executive with expertise in leading global enterprise level vision, business solutions, and enterprise transformation initiatives. Key strengths include cultivating positive partnerships between the business and IT leaders along with building and transforming information security programs for various Fortune 100 companies. 

Specialties include: 
Digital Security
Governance, IT Risk Management, & Compliance
Cyber Security, Threat Analytics, & Incident Response
Threat & Vulnerability Management
Security Architecture & Engineering
Identity & Access Management
Mobile Security
Security Operations 
Firewall & Network Security Management
Security Awareness & Education
Cloud Security 
Security Forensics 
Data Loss Prevention
Database Activity Monitoring
Encryption 
Remote Access 
Managed Services 
Virtualization 
PCI
SOX
GLBA 
HIPAA
NIST 
ISO 
COBIT
Certifications – CISSP-ISSMP, CRISC, CISM, & CISA

Joseph Tso is a Cybersecurity professional with over 20 years of Information Security and Information Technology management experience. His areas of expertise include but not limited to creating and managing Cybersecurity programs, Cyber/IT Risk Management, Incident Response, Security Governance, Data Governance and Privacy Management. He has extensive knowledge of cyber law and regulations such as NY DFS Cybersecurity Regulations, HIPAA, EU GDPR, FFIEC, and SEC.

He is currently the Chief Information Security Officer for Scotiabank USA. Joseph was previously the Cybersecurity Program Manager for TransRe where he helped create and managed the Cybersecurity Program. Prior to that he was the Vice President of IT Infrastructure and Security for a Hedge Fund called Structured Portfolio Management where he created the Cybersecurity program to satisfy SEC requirements.

Joseph is an active participant in the Cybersecurity community. As a subject matter expert in cybersecurity, he is a frequent speaker and panel participant for cybersecurity conferences. He has written many cybersecurity blogs for various cybersecurity companies. As an active member of the ISACA NY Metropolitan Chapter, he volunteers his time to help with the corporate sponsorship programs. He routinely promotes cybersecurity to help mentor students and professionals to get into the cybersecurity field.

He holds a M.S. degree with Distinction in Information Security and Assurance from Embry-Riddle Aeronautical University and a B.S in Computer Forensic with Summa Cum Laude from Pace University. Joseph holds industry certifications in (ISC)² Certified Information Systems Security Professional (CISSP), ISACA Certified Information Security Manager (CISM), Six Sigma Green Belt, ITIL V3 Foundation, and FINRA Series 99 Operations Professional.

Laura Whitt-Winyard VP of Security & IT at Hummingbird and was formerly CISO of Malwarebytes. In addition to her role at Malwarebytes, Laura is a Fellow at the Institute for Critical Infrastructure Technology (ICIT). As a Fellow, she has contributed to the Cyberspace Solarium Commission\’s report on cybersecurity plus The Cybershield Act S.965 of the 117th Congress. She is also an International Advisory Board Member and Women in Technology board member at HMG Strategy. Prior to her time at Malwarebytes, she was Global Chief Information Security Officer for DLL Group, Director of Security for Billtrust, and held senior leadership positions in security at Comcast and Bloomberg, LP.

 Laura has been a member of the cybersecurity community for over 20 years and was featured in the book: Women Know Cyber: 100 Fascinating Females Fighting Cyber Crime. She and her teams have been nominated for and the recipients of many awards spanning multiple years such as HMG Strategy\’s Global Technology Executives Who Matter Award, ISE® North America & Northeast Project Nominee & Finalist, ISE® North America & Northeast Executive of the Year nominee, CSO 50/40 Awards winner, RSA Archer Innovation Awards & Excellence Awards.

With 25+ years of industry experience in information technology and cybersecurity. Gernette began my career on the technical side of IT before moving into more security-focused leadership roles serving as Senior Manager for Security Operations, VP of Information Security and most recently IT Information Security Officer for Americas at Schneider Electric.  He is responsible for maintaining enterprise-wide information security risk and privacy but main areas of responsibilities are incident response, managing the global M&A cybersecurity remediation program, and functioning in an advisory and governance capacity for Schneider’s portfolio companies in the Americas helping them build and mature their security programs. 

 He is a leader in the cybersecurity industry; actively participates in industry-aligned groups, conferences and serves as Advisory Board Member for multiple groups.   Gernette is passionate about making cybersecurity approachable, part of the day-to-day conversations, and ensuring cybersecurity is viewed as a business enabler and a competitive advantage.  He holds advanced security and privacy certifications from IAPP, ISC2, ISACA, & EC-Council, is a Computer Science graduate of Stockton University in NJ, holds a Graduate Certificate in Cybersecurity from the Van Loan School at Endicott College, and an Executive Certificate in Management & Leadership from MIT Sloan’s School of Management. 

Frank is an SVP / Business Information Security Officer for Bank of America where he manages risk for key client facing applications and lines of business. 

Prior to the Bank, Frank was Global Head of Security Operations for Zurich Insurance.  At Zurich, he set the vision & strategy for Zurich’s global security toolkit and oversaw its daily operation.  He also led Zurich’s Identity Administration Management team.

Throughout his career, Frank has held several impactful IT Leadership positions, including CIO for Barrington Capital, Head of Global Applications for Hewitt, Chief Delivery Officer for Sears and SVP /  Practice Lead at The Revere Group, an IT consulting firm.   He holds a Bachelor\’s Degree in Economics from Northwestern University and is active in a number of professional organizations, including the Association for Information Technology Professionals and the Society for Information Management.

Nick Yoo is Chief Information Security Officer at Noodle.ai.  Noodle.ai\’s applications and platform apply advanced data science to industries at the core of the global economy to create a world without waste.  He has more than 20 years of IT experience and served as Chief Security Officer at BMC Software, where he was responsible for product security. His previous roles included Chief Security Architect at McKesson Corporation, leading its global security architecture and strategic cybersecurity initiatives, and VP of Software Engineering at Samsung SDS, among other roles. He holds BBA and MS, and numerous professional certifications including CISM, CISSP, and Advanced Stanford Security Program.

Bob joined BUNGE in February 2015, bringing more than 25 years of experience in Global IT executive leadership to the Global IT Risk and Security organization. In early 2018, Bob added the role of Chief Technology Officer to his existing role as CISO. Prior to BUNGE, Dr. Zandoli was the Global Chief Information Security Officer at AIG and MetLife. He also has held senior positions leading global technology infrastructure at major financial firms including Bank of America. As Global Chief Information Security Officer at AIG and MetLife he managed the information security programs for their Global enterprises. Those responsibilities included IT Risk management; security policies, standards and procedures; compliance; threat and vulnerability management; cyber threat intelligence; Security Operations/incident response; Identity and Access Management; forensics; and eDiscovery, as well as Disaster Recovery and Business Continuity. Bob is an active participant in several professional security organizations; has held board positions in many technology industry groups and participates in several industry councils and roundtables as both a panelist and speaker. He has served as an Adjunct Professor at Stevens Institute of Technology, teaching graduate and undergraduate courses. Bob holds a doctorate from Pace University in Information Technology, a MBA from Baruch College and is a Certified Chief Information Security Officer (C|CISO), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT), Certified in Risk and Information Systems Control (CRISC) and a graduate of the FBI CISO Academy.

Michael Zanga is a Business Development Executive at IBM. Mr. Zanga had been previously seated on TechR2’s Advisory Board which is a data protection, assessment and eradication firm. He also was on the Board of Alkymi which is a Natural Language and Artificial Intelligence data manipulation firm. Mr. Zanga is very experienced in all facets of technology from working at major international banking institutions including the Royal Bank of Scotland as CIO, Deutsche Bank as CTO and the Union Bank of Switzerland as an Engineer. Early in his career he worked at the Greenwich Connecticut Board of Education as an analyst. He is a CISSP certified in information security and has a Master’s degree from Iona College. He has worked with the Federal Reserve on reviews of practices across banks. Mr. Zanga has focused on cost containment and the continual alignment of technology initiatives with business needs. Mr. Zanga led in a variety of information security initiatives including safeguarding critical, confidential, and sensitive data which provided him with the insight into data security regulations making him a subject matter expert.

Michael is on the Board of the Stamford Connecticut Public Education Foundation (SPEF). Founded in 1996, the mission of the Stamford Public Education Foundation (SPEF) is to deliver educational programs and resources that elevate student, educator, and parent success by bridging the gap between needs in the Stamford Public Schools and resources in our community. The Foundation’s vision is that each and every student in the Stamford Public Schools will graduate high school prepared and inspired to be a productive member of society.

Michael also worked with the Utah Chamber of Commerce as well as University of Utah and BYU to create in school curriculum that aligned to the Royal Bank of Scotland open roles. Internship programs and Graduate program were created which fostered junior talent at the bank as they created an Operations program in Salt Lake City.