Speakers

Software engineer at heart that somehow managed to fall in the Security Pit and complains he can’t get out of it cause he loves it too much … Spends most of his time talking about IAM, Security, Architecture, how stuff should work. Has experienced industries like Telecoms, Utilities, Financial Services (Banking), OEMs (Manufacturing) and as of late Insurance. Still enjoys building stuff with his own hands, although he’d talk to death about building and making plans than doing anything …

In 1909, the Nobel Prize-winning Norwegian poet and writer Bjørnstjerne Bjørnson wrote a comedy named “When the new wine blossoms”, and 100 years later a gang of Norwegian artists re-used the name of the comedy to describe themselves – “The new wine”, claiming that they were the young professionals that surpass and displace the old.

Although Øystein is no famous writer or artist, he does consider himself “the new wine” in the space of Norwegian cybersecurity – one that dare to speak up, challenge perceptions and provide a new and more modern approach to the role of security in business.

Øystein has a M.Sc. from the University of Oslo and began his career within national healthcare and high-availability environments. Not even three years into his cybersecurity career he was offered to become the CISO of a scale-up MSSP in Norway and later headed the certification process that led to Defendable becoming the first MSSP in Norway to hold the ISO27001:2022 certificate for the totality of the company.

By combining his skills as a CISO with his love for security architecture, Øystein can achieve balanced and appropriate solutions to complex challenges whilst exploring any space to maneuver within defined business goals & objectives. Øystein always defaults back to making governance & management of cybersecurity valuable in a practical context for the business – it’s the practical impact that matters.

Chris is the Enterprise Security Architect for a SaaS provider specialising in software and data analytics for health and fire services. He is a seasoned cybersecurity professional and is passionate about business-driven security and delivering pragmatic advice that enables organisations to achieve their business objectives.

Ghariba is a dreamer, sensitive and unconditional coffee lover. She is currently working as Cybersecurity Transformation Consultant providing services in CyberSecurity Culture and giving deeper experiences advice in Security Awareness, two main topics which drive her passion for the field. Previously, she worked as Deputy CISO of an insurance group by managing the Third-Party Security, IT project security, responsible for IT-Security communication and becoming a security awareness specialist. She has two degrees in Business Sciences and in Business Financial Engineering.

Recently volunteering as TSI Community Manager, she previously worked as Deputy CISO of an insurance group by managing the Third-Party Security Risk concept, dealing with IT project security aspects, being responsible for IT-Security communication and becoming a security awareness specialist. She has completed two university degrees in Business Sciences and in Business
Financial Engineering.

Hugh Boyes is a security adviser and an Honorary Fellow at Loughborough University. He is a Chartered Engineer, Chartered Cyber Security Professional and a Principal member of the UK NPSA-sponsored Register of Security Engineers and Specialists (RSES). Hugh has been the technical author for several standards issued by BSI and is a regular standards reviewer and contributor.

As a security adviser Hugh works across a range of information intensive public sector initiatives, particularly those involving infrastructure and complex geospatial data. His research interests relate to the security of cyber-physical systems, industrial IoT and digital twins, particularly those in the
built environment and the critical national infrastructure.

Steven is a Belgium-based independent security consultant at Cyber Enterprise Modelling (CEM) and has been a regular presenter at COSAC since 2018 on the topic of security by design through automation and modelling. He is the principal author of the SABSA Institute / Open Group paper “Modelling SABSA with ArchiMate” and chairs the associated SABSA Working Group. He holds several security, architecture and privacy certifications including SABSA Chartered Practitioner and ArchiMate.

In his 50+ years of in-depth experience in IT and security consulting, systems management and technical implementations, Glen Bruce has focused on Security Frameworks, Strategies, Architectures, PKI and Governance supporting business and governments in their approach to managing information and cybersecurity risk. He has led many information/cyber security engagements, where he has helped clients establish effective strategies, governance, architectures, frameworks, policies, PKIs and infrastructure implementations in support of a wide range of business and technical requirements. Glen is the leader of the SENC workgroup project.

George is a Manager in PwC UK’s Cyber Security team, specialising in Security Architecture. He helps organisations design and implement large-scale security transformations, leveraging technology for automation and efficiency. More recently, his focus has been on how emerging cyber security innovations – along with shifting investment trends, are influencing security strategy and technology adoption.

Jonathan is a Senior Manager in the PwC Cyber Security practice with diverse experience across both public and private sectors helping organisations tackle some of their most complex security challenges. He is also leads our Secure-By-Design proposition and works with a number of clients to securely delivery solutions.

Jonathan has proven delivery capability and offering real value to businesses with experience that covers a broad range of areas including, strategy, architecture, policy and procedures and training, with particular focus on security architecture

As the Enterprise Cloud Security Architect for Admiral Insurance in the UK, I bring more than a decade of cloud computing expertise to the table. In the last 7 years, I have worked with Fintech companies of all sizes, from startups to FTSE 100 Giants. I shape the vision and strategy for cloud security at Admiral, and I have shared my insights and hosted events in the industry as a security Architect.

Prof Clark is an acknowledged expert in Cryptography, I.S. Security, Systems Engineering, Information Forensics & Cyber Security. He has worked in the field of Computer and Information Systems Security and Cryptology since 1984 and is a registered expert witness with 20+ years’ experience of presenting computer and information systems evidence in a wide range of criminal & civil cases. He is a co-author of the SABSA Blue Book & was the first recipient of the COSAC award.

Martin is an experienced Information Security Professional with a background in Project Management, Service Management and Innovation. He joined the Eindhoven University of Technology as their Chief Information Security Officer in 2021. In this role he helps the university realising secure, state of the art and innovative digital facilities to meet the university’s strategy. As digitization comes with risks he ensures that these are assessed and dealt with in the context of the university’s full risk profile.

For over twenty five years, Dimitrios has been a technology executive with a proven success record of delivering future proof information security strategies and helping organisations implement their digital transformation plans with a commensurate level of assurance. Mastering specialisation in business-driven security strategy, architecture and operational resilience, Dimitrios draws strength from the diverse experience in leadership roles, predominantly within financial services, i.e., Head of Enterprise Security Architecture at Visa and Global Head of Information Risk Strategy at HSBC.

Driven by his vision to shift the resilience risk paradigm by challenging core beliefs and driving better decision making, in 2020, Dimitrios founded Qiomos and started providing value-driven services to guide organisations into building resilient services and products. In 2024, this extensive experience led to the launch of the innovative QnousTM solution – a single source of truth to strengthen operational resilience by modelling the organisation’s security posture and centralising security-related information into a single data model. Dimitrios is now working with organisations, across the globe, streamlining their security risk management and truly simplifying their security decision-making.

Paul Dorey is facilitator for the UK Energy Emergencies Executive Cyber Security Task Group (E3CC), the UK Aviation Cyber Security Forum and is co-lead for the UK NCSC ICS Community of Interest Supply Chain Expert Group. His leadership roles have included Global CISO at BP and Barclays and other CISO roles in financial services, technology and pharmaceutical sectors. He currently advises security leaders, business executives and governments on cyber security strategy and risk reporting and acts as an expert witness. He is a Visiting Professor in Information Security at Royal Holloway, University of London.

Kaleb Frye is a student intern at Marshall University where he is a senior studying Computer Science and has branched into cybersecurity. Kaleb is a student intern, and he is exploring various cybersecurity career paths.

G. Mark Hardy serves as President of National Security Corporation and co-host of the award-winning CISO Tradecraft podcast. He has been providing cyber security expertise to government, military, and commercial clients for over 35 years, and is the author of over one hundred articles and presentations on security, privacy, and leadership. A graduate of Northwestern University and Loyola University, he holds a BS in Computer Science, a BA in Mathematics, a Masters in Business Administration, a Masters in Strategic Studies, and is designated as a Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM).

Lynette Hornung is a Principal Security Architecture Manager at Iowa State University. She has her MS in Information Assurance from Iowa State University, CIPP-US and SABSA security architecture certifications.  Senior Member of IEEE. She enjoys researching a variety of topics in information security, such as Artificial Intelligence and its many complexities, such as ethics, privacy and security.  She likes to study and analyze the many aspects of security architecture, cybersecurity, financial technology and the intersection with the legal landscape and geo political events.

Dr Gordon Jenkins heads up the security architecture team at Admiral Insurance in the UK. He has 25+ years’ experience in IT and security for large financial services organisations in the UK and US, across investment banking, life & pensions, asset management, and general insurance. He has worked as a security architect for the last 14 years, providing guidance to dozens of major business and infrastructure projects and helping to shape enterprise security functions.

Dr. Connie Justice is Professor Emeritus at Indiana University. Dr. Justice has an extensive background in cybersecurity education and research where she built and maintained the Indiana Cybersecurity Living Lab where she taught students in a hands-on integrated environment in both building and attacking cybersecurity solutions. Dr. Justice has research interests in education, fake news and Artificial Intelligence

Previously lead investigator for Microsoft’s detection and response team (DaRT), Lesley has spent 16+ years responding to Microsoft customers’ largest and most impactful cybersecurity incidents. As Chief Security Advisor, she now provides customers, partners and agencies around the globe with deep insights into how and why security incidents happen, how to harden defences and more importantly, how to automate response and contain attacks with the power of the cloud and machine learning.

Anne Leslie is the Cloud Risk and Controls Leader for EMEA at IBM. With 18+ years of experience spanning financial services and technology, she is a distinguished expert at the intersection of AI, cloud, operational resilience, and cybersecurity.

Since joining IBM, Anne has been instrumental in guiding clients worldwide in securely accelerating their adoption of public cloud and AI technologies, while also preparing them for the future landscape shaped by quantum computing. Her work ensures these organisations can adapt their operating models and enhance their resilience in a rapidly changing digital environment.

Co-editor of The AI Book and co-author of The RegTech Book, Anne excels at facilitating outcome-oriented dialogue on complex industry issues, building positive relationships across diverse stakeholder groups. She is actively driving industry momentum around post-quantum readiness by advising clients on strategies to mitigate risks and embrace quantum-resistant solutions. Well-established as a trusted voice in the industry, Anne regularly contributes her thought leadership to C-level conferences and working groups convened by public authorities.

Irish by nature and French by design, Anne lives with her family in Paris, France, which has been her home for almost 30 years.

Vriti Magee is an experienced technology strategist specialising in enterprise security, AI, and digital transformation. With a background in top-tier global consulting firms, she has advised executive leadership on navigating complex, technology-driven change.

Her work is increasingly focused on human-machine collaboration—examining how AI can augment creativity and decision-making rather than merely automate tasks. As AI systems become more agentic—integrating multi-agent reasoning, foundation models, and adaptive workflows—the challenge is not just technological but strategic: ensuring these systems are scalable, secure, and trustworthy.

A pragmatic problem-solver, she has led high-performing teams, shaping digital strategies that balance innovation with responsible and secure practices.

At Transurban, she is a key member of the team that established an AI Immersion Centre, convening thought leaders from major players like Microsoft and AWS. Success in this era is about more than just adoption—it requires rethinking how AI, security, and digital strategy converge. As AI’s role expands, her focus remains on ensuring it is human-centric, resilient, and designed for lasting impact.

Vriti Magee is SABSA Foundation SCF certified. She has a Master’s in Business Information Systems. She also holds the following technical certifications—CISSP, AWS Certified Solutions Architect (Associate), AWS Certified Security – Speciality, BizzDesign Enterprise Studio Foundation and Advanced.

Sophia is a Senior Associate at the Cyber Security Practice at PwC UK with a keen focus in architecture and engineering. Her main experiences and interests lie in cloud security working with a range of different cloud specific technologies such as kubernetes. Her work spans across different industries such as private sector, public sector and governmental bodies.

Sophia has a strong technical background with a MsC in Cyber Security. Her focus within architecture lies with threat modelling where she has focused on a range of systems such as Cloud to Operational Technology. Asides for this, Sophia has a wide range of knowledge of various cloud platforms such as Google, AWS and Azure.

Sophia is an avid speaker at various security/technology conferences and aims to continue to spread her knowledge in cloud security and threat modelling.

Kathleen Mullin is an influential information security practitioner and international speaker with over twenty-five years of experience. She started her career in Accounting and Internal Audit before moving into Information Technology and Cybersecurity. She has been CISO at various organizations, focusing primarily on healthcare. Most recently, she is CIO|CISO for MyCareGorithm a SaaS startup focused on transforming the Doctor/Patient experience.

Throughout her career, Kate has volunteered and contributed to information security as a profession, including serving on multiple board and advisory positions. Currently she is a Board member of the SABSA Institute (TSI) and
Chair of the TSI EMEA-NA Liaison Group.

Lori Murray is a Staff Cyber Data Platform Engineer at Adobe, bringing two decades of expertise in security architecture, systems engineering, machine learning, advanced analytics, and design engineering. Dr. Murray holds a PhD in Computer Engineering with a specialization in Secure and Reliable Computing, as well as a Master of Science in Information Assurance and a Bachelor of Science in Mathematics, all from Iowa State University.

Muhammed Zubair (MZ) Omarjee, is a former Enterprise Security Architect providing advisory to leading banking institutions in South Africa and abroad. He is instrumental in crafting technology strategies as it relates to digital transformation, mobile banking and cyber security. He plays a pivotal role in shaping information technology practices as a transformative business driven and risk-oriented discipline.

As the implementer of CSV::TSV in Ruby core, I bring unique insights into API security from both core library development and enterprise systems. My work on Ruby core exposed critical security patterns that challenge traditional API security approaches, leading to novel defense strategies now used in production environments.

Core expertise:

• Ruby core contributor (CSV::TSV implementation)
• API security architecture
• Cross-language security testing
• Zero-trust API design

International speaking experience includes PyCon Africa, PyDelhi, and multiple Open Source Conferences in Japan, where I’ve shared insights on secure API design and implementation.

Dermot Turing is the award-winning author of X, Y and Z – the real story of how Enigma was broken and has written numerous other books relating to his famous uncle Alan Turing, codebreaking and computing history.  He is also a regular speaker at historical and other events. He began writing in 2014 after a career in law. Dermot worked for the Government Legal Service and then the international law firm Clifford Chance, where he was a partner until 2014. His specialism was financial sector regulation, financial market infrastructure and bank failures. As well as writing and speaking, Dermot is a trustee of the Turing Trust and a Visiting Fellow at Kellogg College, Oxford.

Practicing Cybersecurity expert and Leader (15+ years), (ISC)2 CC (Certified in Cybersecurity). Currently – Principal Security & Community Architect at Red Hat. Formerly – Head of Product Security & Privacy for Data Center & AI SW at Intel.

Roman has broad experience from security architecture & threat modelling to secure development & tooling to vulnerability management & incident response to security education programs for engineers & senior managers. Currently Roman leads industry engagement and several Open-Source security initiatives: Security Champion for Linux Foundation projects, contributor to several working groups under OpenSSF, Eclipse, other foundations. Lecturer at Universities and commercial educational centers. Security Advisor and Evangelist. Mentor and consultant for startups. Recognized as the best speaker and mentor several times.