Special Guests

U.S. Army Colonel (ret) JC Vega Founder, Executive Security Advisors, LLC JC is the Executive Security Advisor and the X-Force Cyber Range Coach for IBM Security. He is a proven executive and visionary with over three decades of security leadership experience. He served 29 years in the Army in multiple leadership, advisory and mentorship roles. that include CIO, Board Member, Advisor, CISO, Director of Cyber Operations and United States Military Academy cyber instructor. JC has led operation in high stress environments characterized by demanding standards and intense operational schedules. He possesses extensive experience in building strategic cyber programs at the Army/National level and leading professional Operations, Research and Technology teams in preparation for combat and support missions in the most hostile environments. JC is one of the Founders of the Army Cyber Institute (ACI), the US Army's cybersecurity career field (Cyber branch), Co-Founder and Chairman of the Joint Service Academy Cybersecurity Summit (JSA) and CyCon US. The ACI is US national asset and cybersecurity think tank that is focused on preventing "Cyber Strategic Surprise" that would negatively impact the United States, allies, and its critical infrastructure. In the creation of the Cyber branch, JC addressed the challenges of culture, talent management, education and training, and operational roles and relevance of the positions. He is the first conference chairman of CyCon US, a joint endeavor with NATO's Cooperative Cyber Defence Centre of Excellence that focuses on nation state cyber interests. As the co-founder of JSA and chairman (2015 and 2016), he organizes an elite group of leaders of group of leaders from government, private industry, and academia that focus on the future challenges of the cybersecurity discipline and domain.

Conference Speakers

Jim Ambrosini, CISA, CISSP, CRISC vCISO, CompassMSP Jim Ambrosini, CISA, CRISC, CISSP, is an Information Security and Risk executive with over 25 years of experience spanning the middle market to some of the largest companies in the world. Jim currently works for the CompassMSP as a virtual Chief Information Security Officer (vCISO) for multiple organizations across various business sectors. Before these roles, Jim was the head of Technology Risk for Consumer Lending and Digital Banking at a top U.S. Bank, responsible for implementing the Front-Line Risk function. Before that, Jim worked at global consulting firms for 20 years as a Technology Risk and Information Security professional. He served as the Managing Director for a national cybersecurity practice that he started. Jim worked on many high-profile cybersecurity projects, including assisting NYPD with a global internet crime, leading a well-publicized mega-breach investigation, and establishing global information security, governance and control functions across leading companies. Jim was an Adjunct Professor at NYU and has held leadership positions in several professional organizations, including being a past President of the ISACA Metro New York Chapter. He was the 2022 recipient of ISACA's prestigious Wasserman Award - for his lifetime contributions to Information Security, Risk, and Governance Profession. He is a sought-after public speaker on Cybersecurity and Risk Governance and a strategic advisor to several corporations. He holds a Master of Science in Management from Stevens Institute of Technology, a Bachelor of Arts in Journalism & Communications from Washington & Lee University, and several security and technology certifications.

Rahul Bhardwaj Head Information Security Americas, EXL Experienced security professional focused on designing, integrating, and delivering manageable Privacy and Information Security solutions to mitigate global business risk. Responsible for driving Global Privacy, Risk, Security and Compliance Governance and AI Security program across the global business units to achieve a measurable reduction of privacy, legal and security risk while directly supporting product and service innovation. I am privilege to lead and motivate large teams of globally distributed cross-functional professionals engaged in security and network operations. I like speaks, share my thoughts at leading industry events regarding emerging risks, complexities and potential solutions associated with handling and protection of sensitive data. Specialties: Developing and implementing strategic and tactical initiatives for global Secure AI, privacy and data security; ensuring compliance with regulatory and legal requirements; assessing risk and deploying internal controls; defining security frameworks, architectures, policies and standards; and improving business processes. Proficient in a wide range of technologies, as well as applicable regulatory and industry requirements. Focused on creating stable, cost-effective, repeatable solutions aligned with rapidly changing business needs, integration management and capability maturity.

Tom Brennan CIO, Mandelbaum Barrett PC CEO, Proactive Risk Tom Brennan is the CIO of Mandelbaum Barrett PC and founder and CEO of Proactive Risk, a cybersecurity firm established in 2001. He has over two decades of hands-on experience in cybersecurity, specializing in building, breaking, and defending data for various clients globally. Brennan's career includes significant roles at Datek Online, ADP, Intel Security/Foundstone, SafeCode, Trustwave, WhiteHat Security, and the United States Marine Corps.

Vlad Brodsky CIO & CISO, OTC Markets Group Vlad Brodsky is the SVP, Chief Information Officer and Chief Information Security Officer at OTC Markets Group, a regulated publicly traded financial institution that operates the world's largest OTC equity electronic marketplace. His responsibilities include leading the firm's information security strategy, program, and processes as well as running the firm's IT operations and infrastructure. Vlad has expertise in Information Security, Risk Management, IT Infrastructure Management and Financial Services. Prior to OTC Markets Group, he worked as a Chief Security Officer at Innovest Systems, a SaaS provider in the Trust Accounting and Wealth Management space.

Vishal Chawla Founder and CEO, BluOcean Digital With a distinguished 25-year career in cybersecurity, Vishal Chawla has been at the forefront of professional services innovation, scaling high-growth businesses into industry leaders. At BluOcean Digital, which he founded, Vishal's vision and leadership have earned recognition from Evercore as a promising startup delivering groundbreaking cybersecurity solutions. Vishal's expertise has benefited an impressive roster of clients, including Deutsche Bank, Freddie Mac, Fannie Mae, Capital One, Kellogg, VSP, Community Health Systems, Nissan Motors, and many others, spanning diverse industries from financial services to technology and healthcare. Before BluOcean Digital, Vishal's transformative impact was felt at Deloitte, PwC, and Grant Thornton. Launching Deloitte's first Risk Advisory Global Delivery Centre, driving revenues over $300m and assembling a 1500-strong team within four years. Spearheading substantial growth at Grant Thornton, with 25% annual revenue increases and significant practice expansions in cybersecurity, financial, and healthcare regulatory domains. Innovating at PwC by founding a cybersecurity practice that leveraged emerging technologies like Cloud, SaaS, AI, and Machine Learning. Beyond corporate leadership, Vishal serves as a strategic advisor to BluVentures Investors. His insights, drawn from regular interactions with CISOs and C-suite executives, has helped coach and mentor number of cybersecurity startups. Vishal's thought leadership is widely recognized. He is frequently quoted in top publications such as the Wall Street Journal (WSJ), NACD Directorship, MIT Magazine, RMA Journal, Risk & Compliance Magazine, and Compliance Week.

Herbert Decker Jr III Physical Security Support Engineer II, Amazon Introducing Herbert, a seasoned tech professional with over ten years of IT expertise. Holding a Bachelor's in IT and esteemed certifications such as CompTIA CySA+, CompTIA PenTest+ and ISC2 CC, he's currently advancing his knowledge in cybersecurity through pursuit of a Master's degree. Herbert transcends traditional consultancy; he serves as a driving force for Fortune 1000 and 500 companies, fostering innovation and engineering robust IT architectures to ensure a digitally secure future.

Jeff Foresman President of Services, Quadrant Information Security Jeff Foresman is an experienced professional with 30 years of experience in assisting organizations in building successful security programs and responding to cyberattacks. He currently serves as the President of Services at Quadrant Information Security. Prior to this, he held key leadership positions with Rapid7, Optiv, Verizon Business, and the PCI Security Standards Council. Jeff is also the founder of Pondurance, a startup security consulting and managed services business. He has a vast experience in developing risk management programs and building security operations centers for major corporations, retailers, hospitals, and financial services organizations.

Dora Gomez, MS, CFE, CRMA, GRCP, GRCA FinCrime, Fraud, and Compliance Leader, EY Dora Gomez has over 25 years of experience in financial services, including 17 years at AXA where she completed an expat assignment in Paris, France. Dora held pivotal roles at AXA Technology as the Global Fraud Officer, Audit Director, and Risk Officer, establishing global departmental practices and governance. She was also the Director of Internal Controls at Wolters Kluwer's Corporate Legal Services division, managing their risk and control testing environment across the division to ensure regulatory requirements were met. Currently, Dora brings her wealth of experience and expertise to EY's IT Consulting - Financial Crimes, Fraud, and Compliance practice, where she serves as a Team Leader and provides invaluable guidance and strategic anti-fraud solutions to her clients in the financial services sector, solidifying her reputation as a trusted advisor. Dora earned her Master of Science in Business and Information Systems at NJIT and BBA in Accounting from Pace University in NYC. She holds various professional certifications: Certified Fraud Examiner (CFE) from the ACFE, Certification in Risk Management Assurance (CRMA) from the IIA, and Governance, Risk and Compliance Auditor (GRCA) and Professional (GRCP) from OCEG. Beyond her professional commitments, Dora is deeply engaged in fostering collaboration and knowledge-sharing within her industry. She is the current Chairwoman of the Board of the Association of Certified Fraud Examiners New York Chapter (NYCFE), Audit Committee Chair for the High Technology Crime Investigation Association (HTCIA), and Advisory Board Member of Pace University's Seidenberg Cybersecurity Advisory Board. In 2023, she was honored with the prestigious Distinguished Achievement Award by the ACFE's President and CEO, a testament to her exemplary leadership and unwavering commitment to combating fraud and enhancing financial integrity. Dora is an advocate in actively raising awareness about elder fraud by educating professionals and the public about common scams, warning signs, and prevention strategies, thereby empowering them to recognize and combat financial exploitation targeting elderly individuals.

Nick Loui Co-Founder and CEO, PeakMetrics Nick Loui is the Co-Founder and CEO of PeakMetrics, a leading company specializing in AI-driven narrative threat intelligence. They assist organizations in various sectors by identifying and forecasting the evolution of adversarial messages online. As concerns about social media manipulation continue to rise alongside the proliferation of generative AI, PeakMetrics' innovative approach has gained recognition and received awards such as the NSIN COVID-19 Disinformation Challenge and the BAE Fast Labs Partner of the Year. Their technology supports a diversity of complex issues, including crisis management, financial manipulation, and countering state-sponsored propaganda. Prior to founding PeakMetrics, Nick served as the Chief Marketing Officer of an ad-tech startup. During his time, the startup expanded from its initial hire to a team of over 80 members and secured over $70M in funding. He began his career as an engineer and digital marketer, helping Ashton Kutcher become the first person to amass a million followers on Twitter. Nick has been featured by Forbes and garnered viral attention on HackerNews and TechCrunch for his creation of "Parrot.vc," a generative AI tool that humorously targeted the VC community. Nick has held leadership positions at NEXUS, a global community dedicated to bridging the gap between individuals of wealth and social entrepreneurship, and Out in Tech, a global non-profit that supports 50k LGBTQIA+ tech workers in 32 cities.

Bill Malik Former Research Director, Gartner As a founder of Gartner's Information Security Strategies service in the mid-1990s, Bill has deep expertise in information security matters. He has spoken internationally on information security, identity management, privacy, business continuity, and enterprise architecture. During his IBM career he guided the mainframe operating system zOS (then MVS) through the process leading to a NIST/NSA B1-level security rating. He taught a graduate class on Information Security Policy at Georgia Tech and authored the chapter "Information Security Policy in the US National Context" for the text "Information Security: Policy, Processes, and Practices," Detmar Straub, et al., editors. M. E. Sharpe, 2008.

Michael Melore, CISSP IBM Public Sector Security Ambassador Chair of Nationwide SecRT (Security Leaders Round Table) IBM Public Sector Security Evangelist, Certified Information Systems Security Professional, Author, frequent National public speaker and moderator, FBI InfraGard committeeman, and recognized subject matter expert in Security and Threat Intelligence, Identity Access Governance, and Authorization. Pioneer in Identity and Access Management, Access Governance, and Authentication. Past Consulting roles include: Lead architect for many of the world's largest authentication and authorization infrastructures. This includes two of the 1st individual Billion user authentication infrastructures. Founder/Moderator for 26 Nationwide (1900+ Security Executive Members) CISO/Security Leader Round Table Chapters across the US (aka www.SecRT.us). Champion, host and evangelist of regularly scheduled cyber range threat simulation exercises, cyber training and education.

William Hugh Murray National Cyber Security Hall of Fame, (ISC)2 Fellow & Harold Tipton Lifetime Achievement Award, ISE Luminary Leadership Award William Hugh (Bill) Murray has been responding for years to security threats with nonconventional thinking. When he sees a security breakdown, he asks what is the current practice that allows the breakdown to happen, and what new practice would stop it? Most of our security vulnerabilities arise from poor practice, not from inadequate technology. He joined IBM Research as a programmer in 1956, where he worked on such iconic systems as the first 704 and the first 650 Tape System, US Steel One, and with such industry pioneers as Nathaniel Rochester, Arthur Samuels, Jerrier Haddad, and Frederick Brooks. He managed the design and development of the access control subsystem for IBM's Advanced Administrative System and has since been associated with security, audit, and control. He has been recognized as a "founder" of the systems audit field and as a "pioneer" of computer security. After retiring from IBM in 1987, he has been associated with Ernst & Young, Deloitte, TruSecure, Cybertrust, and Verizon Business. He serves on the faculty of the Naval Postgraduate School. He also serves on the board of (ISC)^2, the certifying body for computer security professionals. In 2016, he was inducted into National Cyber Security Hall of Fame.

David Raviv Founder, The New York Information Security Meetup David's career spans over 20 years in enterprise cybersecurity, with a specialized focus on cloud security, network security, and networking. He holds an MBA from Saint Mary's University, which has provided him with a unique combination of skills in Business IT and Marketing, essential for navigating the complex cybersecurity landscape. Aside from David's professional responsibilities, he is deeply involved in the cybersecurity community as a podcaster and videocaster. He has produced numerous episodes, engaging with industry experts and reaching a vast audience. His initiative in founding and leading The New York Enterprise Security Meetup, the country's largest independent security group, along with his role in the Forbes Technology Council, are testaments to David's commitment to the cybersecurity field. Sharing knowledge and fostering workforce development in cybersecurity are passions that drive his engagement in these endeavors.

Katie Reilly Senior Consultant, BluOcean Digital Katie Reilly is a Cyber Planning Specialist at BluOcean Digital leading efforts in developing and implementing robust security risk management strategies for organizations. In her prior experience as a security engineer she built solutions focusing on security operations, threat detection, and incident response.

David Rhoades VP of Security Consulting, Palindrome Technologies Chapter Lead for OWASP Delaware David is the VP of Security Consulting at Palindrome Technologies (https://palindrometech.com). David's expertise includes web application security and vulnerability assessments. David has been active in information security consulting since 1996, when he began his career with the computer security and telephony fraud group at Bell Communications Research (Bellcore). David has taught at various security conferences around the globe (Interop, OWASP, USENIX, ISACA, SANS, DefCon, Black Hat). David is a chapter lead for OWASP Delaware chapter. David has a Bachelor of Science degree in Computer Engineering from the Pennsylvania State University (psu.edu).

Tom Ryan Founder and CEO, Asymmetric Response Thomas Ryan, CEO and Founder of Asymmetric Response is a leader in offensive cybersecurity with over 25 years of experience. A third-generation Navy veteran, Ryan's disciplined approach and strategic mindset are evident in his groundbreaking work, including the Robin Sage Experiment, which exposed social media vulnerabilities. His published CVEs and references in the MITRE ATT&CK framework highlight his impact on the field. At Asymmetric Response, Ryan has built a culture of excellence and innovation, delivering cutting-edge solutions across various sectors. His leadership, inspired by special operations principles, drives mission success and unwavering loyalty. Ryan is also a sought-after speaker and thought leader focused on AI risk, security, and hybrid IT/OT security. His contributions continue to shape the future of cybersecurity, inspiring the next generation of professionals.

Michelle Schaap Leads CSG's Privacy & Data Security practice Focus of Practice: privacy and data protection, cyber security preparedness and incident response counseling; breach coach; construction law; renewable energy; software and technology commercial agreements, franchising, general corporate counseling. Over the course of her thirty year practice, Ms. Schaap has developed in-depth knowledge and experience in the following areas: cyber-security preparedness and incident and breach counseling: - asset inventory; risk assessments; drafting internal policies; training personnel; reviewing and drafting e-commerce privacy policies; drafting incident response plans; coordinating with clients and experts on overall cyber preparedness, remediation and mitigation; counseling regarding cyber insurance; reviewing and drafting contract clauses regarding cyber and data privacy issues; guiding and counseling clients through incident and breach response and recovery; vendor risk assessments construction practice with expertise in drafting and negotiating construction management, project management, architect, and design-build agreements for diverse projects including performing arts centers, flight simulator facilities, bio-tech research facilities, ferris wheels, indoor snow domes and office complexes. renewable energy projects, including the negotiation and drafting of power purchase agreements and related documents, EPC agreements, and O&M agreements. software industry, including the drafting and negotiation of software licensing, development, SaaS and PaaS agreements. commercial transactions, advising new and mature business on issues relating to formation, structure, financing, mergers and acquisitions. franchising: counseling franchisees on rights and remedies and exploring franchising as a means of growth employment matters, including the drafting and negotiation of employment contracts and non-disclosure, non-circumvention and non-compete agreements frequent lecturer on cyber-security preparedness, privacy, data protection, and best practices, software licensing and cloud computing

Tim Schnurr, CRISC Founding Partner, Inquisitive IT Tim Schnurr, CRISC is a founding partner at Inquisitive IT, a company that is striving to protect retirees with cyber awareness and managed devices. Previously Tim co-founded FortMesa, a governance, risk, compliance (GRC) and vulnerability management workflow platform. Tim had a long career at Deloitte in cybersecurity, product development, and data analytics. Tim also spent some time at MIT in a Deloitte collaboration to scout, validate, and commercialize new technologies. Tim frequently speaks about insider threat and the nexus of cybersecurity and intellectual property (IP) protection.

Frederick Scholl Program Director Cybersecurity, Quinnipiac University Frederick is a cybersecurity thought leader and innovator, passionate about enabling success for people and businesses. He has a unique combination of leadership and technical skills and experience in academia, business and technology. His accomplishments range from the server room to the board room. He has a record of enabling successful innovation. This includes cybersecurity program development in the academic and business worlds. In the academic world, his work has included cybersecurity program development and management, teaching and student advising. He has accomplishments in both the on-ground and online worlds. In the business world, he has started enterprise security programs and advised clients already on this journey.

Daniel Shechter CEO and Co-Founder, Miggo Daniel Shechter is the CEO and co-founder of Miggo, leading innovation in application security with a focus on addressing the complexities of distributed architectures and chains of trust. His expertise in real-time detection and response to evolving application security threats positions Miggo at the forefront of modern cybersecurity solutions.

Niloufer Tamboly Principal Risk Management, Verizon Niloufer Tamboly is a risk management professional who leads system and process improvements with business owners to reduce risk. She also guides business teams on Third-Party compliance and vendor assessment to mitigate risk and achieve business objectives. I anticipate bottlenecks and manage escalations. I use data to manage risk, quantify the impact, and translate risk metrics for business stakeholders. Niloufer holds multiple certifications in IT Security (CISSP, CCSP), Risk (OPEN Fair), Privacy (CDPSE), Audit (CISA, CIA), and Fraud (CFE). She is a Certified Public Account licensed to practice in New Jersey. And a Chartered Global Management Accountant (CGMA). Niloufer has authored two patents for System For And Method of Generating Visual Passwords (US 9,171,143 B2) and Establishing An Alternate Call Path Using Short-Range Wireless Technology (US 9,392,523). Niloufer teaches part-time at Rutgers University, the state university of New Jersey, and is the organizer of the largest cybersecurity career MeetUp group and creator of the YouTube Channel "Cybersecurity Career Talks." Niloufer co-founded two nonprofits Step Up Skill in 2020 and (ISC)2 New Jersey Chapter in 2012.

Tony "UV" UcedaVelez Founder, VerSprite Chapter Lead, OWASP Atlanta Founder of VerSprite - a risk-focused security consulting firm in Atlanta - Tony works with global Fortune 500 organizations seeking something beyond compliance-driven approaches to security challenges. With nearly 20 years of IT/ IS experience across three continents, Tony has hands-on operational and management experience. He is a co-author of the only risk-centric threat modeling methodology named PASTA (Process for Attack Simulation & Threat Analysis) and is an author with Wiley Life Sciences. Tony also runs the OWASP Atlanta chapter and organizes the annual BSides Atlanta conferences. Tony's last public speaking events include the likes of the AppSec USA, BSides ATL, Great Wide Open/ All Things Open Developer Conference, Cloud Connect, ISACA Information Security Risk Management, OWASP LanTAM, regional ISSA and ISACA events, and multiple OWASP global training and speaking events in Asia, Latin America, Europe, and North America.

Alex Waintraub SOC Director, Simulint Alex Waintraub is a cyber security professional with over a decade of experience in IT, Security Operations, and DFIR He possesses in-depth knowledge of security analytics, leadership qualities, and the ability to work with small-or large-scale cyber security teams. Over the last 8 years, he has been managing or leading operations while triaging, validating and ultimately defining escalations for various security incidents. He has enhanced several Security Operation Centers, developed CyberSecurity Incident Response Plans, honed cyber threat hunting teams, and refined threat intelligence operations with their response, containment, and remediation methods. Alex employs a strong mix of technical, business, and strategy acumen to directly respond to cyber security incidents. Alex has worked as part of multidisciplinary teams delivering CyberSecurity operations and privacy response services to multiple global retail, commercial, financial, and technology enterprises. He speaks at conferences nationally as well as at his growing NJ Cyber Fireside Chat (cyberfiresidenj.com) in his backyard. He graduated with a bachelor's in Information Technology and Network Security from New York Institute of Technology.

Matthew Webster Founder / CEO / CISO, Cyvergence A veteran cybersecurity leader bridging the gap between innovation and compliance. Matthew Webster's IT and cybersecurity journey began in 1997, rapidly ascending through the ranks at a university computer center. Soon, he was navigating the intricate landscapes of federal cybersecurity with the Center for Medicare and Medicaid Services, mastering frameworks like NIST SP 800-53, IRS 1075, and SAS 70 with unwavering diligence. This rigorous environment, boasting up to 8 audits annually, honed his skills and propelled him to his first CISO role at Healthix, a regional health information powerhouse handling millions of daily records. Here, he built the cybersecurity program from scratch, expertly wielding frameworks like SOC 2, HITRUST, and MARS-E to safeguard sensitive data. But Matthew's expertise extends beyond building secure environments. He holds a Master's degree and boasts over 20 industry certifications, including CISSP, CISA, and CRISC, making him a walking encyclopedia of cybersecurity knowledge. He continuously upskills by attending industry events like RSA and HIMSS, ensuring his finger remains firmly on the pulse of evolving threats and solutions. Beyond his CISO roles, Matthew spent years in cybersecurity sales, evaluating hundreds of products and gaining invaluable insights from customers. This unique perspective grants him not just an understanding of organizational needs, but also a keen eye for the capabilities of the latest security solutions. Matthew doesn't just understand compliance; he bridges the gap between innovation and regulation. He leads Cyvergence, a cybersecurity firm, with a laser focus on guiding organizations through their unique risk landscapes. Whether it's building robust programs, ensuring regulatory adherence, or implementing cutting-edge solutions, Matthew brings a balanced and insightful approach to every challenge.

Career Mentors

Kiran Bhujle, CISA, CRISC, CDPSE, CMMC RP Global Managing Director, SVAM Security As the Global Managing Director at SVAM International, Kiran oversees SVAM's Security Advisory Group, which encompasses various areas such as cybersecurity consulting, proactive risk management, digital identity, cyber defense, response and remediation services, and managed security services, catering to all industries. With over 25 years of experience, he is a senior technology risk executive who has helped numerous organizations manage their technology risks and transformation programs. His extensive knowledge spans information security, ERP application security, identity, access management, and IT and business transformation. Additionally, he has successfully implemented compliance programs in adherence to enforcement actions and industry-recognized standards such as SOX, COBIT, HIPAA, FFIEC, NIST, and ISO 27001. He holds various certifications, such as CISA, CRISC, CDPSE, and CMMC RP, and actively participates in the cybersecurity community. He is a lecturer at Columbia University for IT Risk Management and Data Privacy and Strategic Communication course for the Enterprise Risk Management graduate program, a Cybersecurity Advisory Board for Harvard Business Review member, and an Executive member of the Forbes Technology Council. He serves on the Board of Directors for Green Guerilla, a non-profit organization.

Dr. Keith Clement Professor of Criminology, Fresno State University Dr. Clement chairs the Workforce Development/Education Subcommittee of the California Cybersecurity Task Force led by the California Governor's Office of Emergency Services and California Department of Technology. Professor Clement authored the California Cybersecurity Workforce Development and Education Strategy and Framework (2020) and implementing the California Cybersecurity Career Education Pipeline and Pathway Project (C3EP3). He co-authored the California Cybersecurity Essential Workforce Youth Pre-/Registered Apprentice Talent Model Framework/Strategy, co-organized the 2020 California Cybersecurity Industry Convening Meeting (virtual), and hosted the 2022 CSU Systemwide Virtual Cybersecurity Roundtable Meeting. Professor Clement Chairs the IT Subcommittee of the California Interagency Advisory Committee on Apprenticeships (IACA). In terms of previous service, Dr. Clement received a U.S. Department of Homeland Security (DHS) Early Career Scientific Leadership Award (2008).

Brian Erickson Head of Cyber Strategy, SS&C Brian Erickson is a seasoned Cybersecurity Director with specialized expertise in strategy, supply chains, financial analysis, and data engineering. Currently serving as the Associate Director of Strategy at SS&C Technologies, he assists the Global CISO in overseeing critical projects and initiatives. In prior roles at the same organization, Brian led the Application Security Team and the Threat and Vulnerability Management division, continually optimizing secure software development and vulnerability pipelines. His deep technical knowledge and strategic thinking have resulted in automated, efficient security frameworks that are integrated across cloud and SaaS platforms. Brian's multi-faceted background offers invaluable insights into the convergence of cybersecurity and organizational strategy.

Adrianna Iadarola Vice President of Sales, VerTalents Adrianna Iadarola is the Vice President of Sales at VerTalents, where she leverages her extensive experience in cybersecurity and talent management to bridge the gap between top-tier cybersecurity professionals and leading organizations. With a strong background in sales and client services, Adrianna excels in cultivating relationships that drive growth and innovation. Before joining VerTalents, she served as the Managing Director of Client Services at CyberSN, a renowned cybersecurity jobs and career marketplace. In addition to her role at VerTalents, Adrianna is an active advocate for diversity in the tech industry, serving as an Ambassador for Secure Diversity, and hosting events for The Cyber Breakfast Club, where she fosters connections and learning opportunities within the cybersecurity community. Adrianna's passion for empowering women in tech and her commitment to professional development have made her a respected leader in the industry.

Adnan Rafique Sr. Advisor Cloud Security Governance, Elevance Health Adnan Rafique, CISM, is a distinguished expert in cloud security, presently heading the cloud security governance program at Elevance Health. He's a valued member of the InfraGard NJ Chapter and actively engages with ISACA and IS2 New Jersey Chapter communities. Adnan's extensive expertise spans Microsoft MVP for M365, recognized proficiency in Security & Threat Intelligence, Identity & Access Management, Cloud GRC, and Application and Data Security. Additionally, he co-hosts a cybersecurity podcast with ISACA NJ and runs his own podcast, focusing on cloud security insights.

Patrick J. Slattery Professor, Zicklin School of Business at Baruch College Professor Patrick J. Slattery serves as a Lecturer at the Zicklin School of Business at Baruch College, specializing in the intersection of business and cybersecurity. He brings decades of experience from roles at KPMG and Hackett, where he focused on risk management and technological innovation. In academia, he teaches courses at CUNY City Tech and Fordham University, including a course he developed on 'Cybersecurity for Business'. Slattery is also a member of the ATARC Higher Education and Cybersecurity Workforce Development Working Group, contributing to the discourse on cybersecurity in higher education.

Workshop Instructors

Angus Chen Director of Data Science, Binary Defense Angus Chen is a leader who fosters a culture of trust and is an experienced cybersecurity data scientist known for his ability to connect the dots. As DEFCON Goon and a board member, he contributes to communities and promotes diversity in all its forms. He is also a speaker who shares his knowledge extensively. With over 20 years of hands-on experience, Angus has developed, and implemented data science and deep tech solutions for a wide range of organizations, including MITRE, the Federal Reserve Board, and FINRA. He is a rock climber who looks for projects. He is the Director of Data Science at Binary Defense. He holds an MBA from IESE and a Master's in Applied and Computational Mathematics from Johns Hopkins University. Angus is also certified in CISSP, CCSP, and PMP.

Jayson Ferron, CEH, CISM, CISSP, C)PTE, C)ISSM CRISC, CVEi, MCITP, MCSE, MCT, MVP, NSA-IAM, ... CEO, Interactive Security Training, LLC Jay is a multi-certified Information Security Subject-Matter-Expert (SME) and with more than 30 years of professional experience, which includes Security & Compliance, Integration and Transformation Initiatives, IS Management Process and Operational Metrics Definition and Documentation. Customers include Community Health Network of Connecticut, Inc. (CHNCT), Cigna Insurance, Microsoft, Rogers Communications, GM, AT&T, USMC, US Air Force, US ARMY and DISA. Other customers include banks, government agencies, health agencies and providers. Jay is Past President of Greater Hartford Chapter of ISACA.

Omid Mirzaei Security Research Lead, Cisco Talos Omid Mirzaei is a Security Research Lead in the Email Threat Research team at Cisco Talos. He holds a PhD in Computer Security from University Carlos III of Madrid (UC3M), where he specialized in android application triage, malware detection, and characterization. He furthered his research at Northeastern University's Systems Security Lab, focusing on detecting code reuse in advanced Windows malware. He has served on the technical program committees of top security conferences and has presented at venues such as OWASP and BSides SF.

Dave Solano Cyber Security Practitioner, Deltamine Inc. [TBD]

Allen Ureta Managing Director, Deltamine Inc. Allen Ureta is an accredited IT and governance professional with certifications including CMMC (CCP, CCA & PI), CISM, CISA, and ITIL. Specializing in governance, risk, and compliance, Allen provides services to include cybersecurity assessments and consultations, enterprise risk management and digital transformations. Allen is dedicated to value creation, strategic governance, and leadership in IT security and risk management.