Kyle Brasseur Editor in Chief

Compliance Week

Kyle Brasseur is Editor in Chief of Compliance Week. His background includes expertise in user personalization with ESPN.com.

Pilar Caballero VP, Chief Compliance Officer & Chief Privacy Officer

Ryder Systems, Inc.

Pilar Caballero is Vice President, Chief Compliance Officer and Chief Privacy Officer at Ryder, a $10B Fortune 500 logistics and transportation company with over 45,000 employees and operations worldwide. She works closely with the Board of Directions and senior executives, and is responsible for the Company’s compliance and ethics, enterprise risk management and data privacy programs. With over 20 years of combined experience as a compliance/privacy professional and practicing lawyer, Pilar has worked as a prosecutor, at national law firms, and at Fortune 500 companies. With the expanding privacy regulatory environment and growing external threats, Pilar has increasingly focused on evolving Ryder’s privacy program. 

Mario Chilin Chief Compliance Officer

EP Wealth

Mario Chilin is the Chief Compliance Officer and a Partner of EP Wealth Advisors, LLC. As the Chief Compliance Officer of a leading independent registered investment advisory firm, Mario oversees and is responsible for all aspects of the firm’s Compliance and Risk Program. Mario is a dedicated and passionate member of the greater Compliance and Risk Management Community. He is an active member and can be found speaking at several local and national compliance industry events, round tables, working groups, and/or committees.”

Cynthia Cole Partner

Baker McKenzie

Cynthia Cole is a partner in Baker & McKenzie's Data & Technology practice, as well as a former CEO and General Counsel. She focuses her practice in the areas of IP transactions, digital transformation, data privacy, and cybersecurity strategy. Cynthia advises clients on cybersecurity and incident response and compliance with the California Consumer Privacy Act of 2018 (CCPA) and the EU's General Data Protection Regulation (GDPR). She is certified as an Information Privacy Professional (CIPP/E) by the International Association of Privacy Professionals and recognized as a thought leader. A frequent author and speaker, Cynthia is often quoted by leading media outlets on tech transactions, data privacy, cybersecurity and leadership. In 2022, she was recognized as a "Top Cyber Lawyer in California" by The Daily Journal. In 2019, she was recognized as a "California Trailblazer in Data Privacy" by The Recorder for her foundational work in data privacy.

Rachel Ehlers Partner, Privacy and Cybersecurity

Baker McKenzie

Rachel Ehlers is a partner in Baker McKenzie's Intellectual Property and Technology Practice Group, based in the Firm's Houston office. Throughout her early career, Rachel served in multiple in-house legal and compliance roles, including chief compliance officer and chief privacy officer, and has provided guidance and training to multinational companies globally. She also served as a foreign service officer with the U.S. Department of State, and is recognized by the International Association of Privacy Professionals as a Privacy Law Specialist and a Certified Information Privacy Professional.

Allan Friedman, PhD PhD, Senior Advisor and Strategist

Cybersecurity and Infrastructure Security Agency (CISA)

Dr. Allan Friedman is Senior Advisor and Strategist at the Cybersecurity and Infrastructure Security Agency. He coordinates the global cross-sector community efforts around software bill of materials (SBOM) and related vulnerability initiatives, and works to advance their adoption inside the US government. He was previously the Director of Cybersecurity Initiatives at NTIA, leading pioneering work on vulnerability disclosure, SBOM, and other security topics. Prior to joining the Federal government, Friedman spent over a decade as a noted information security and technology policy scholar at Harvard’s Computer Science department, the Brookings Institution, and George Washington University’s Engineering School. He is the co-author of the popular text “Cybersecurity and Cyberwar: What Everyone Needs to Know,” has a degree in computer science from Swarthmore College and a PhD in public policy from Harvard University.  He is quite friendly for a failed-professor-turned-technocrat.

James Goepel General Counsel and Director of Education and Content

FutureFeed.co

Jim brings a broad range of legal, technical, and business expertise to the FutureFeed team.  He is a Founding Director and former Board Treasurer of the CMMC Accreditation Body (now called the CyberAB), a CMMC Provisional Instructor, CMMC Provisional Assessor, Certified CMMC Professional, and the author and instructor for the CyberAB’s initial Registered Practitioner program.  Jim regularly speaks at domestic and international cybersecurity conferences and has been called upon as an expert witness on cybersecurity, IT, and government contracts issues.  He was a professor of cybersecurity at Drexel University, where he created and taught undergraduate and graduate-level courses.  Jim’s research into the application of Enterprise Risk Management techniques to the field of cyber and privacy governance has been published by the Supreme Court of Singapore in their National Law Journal and in two different books published by LexisNexis.

Jim earned a BSECE from Drexel University and JD and LLM degrees from George Mason University.  He spent most of his professional career working in the cybersecurity field.  Jim has worked for and counseled a variety of organizations, from various portions of the United States government, including the U.S. House of Representatives and United States Coastguard; to government contractors, including Unisys Corporation and The Johns Hopkins University Applied Physics Laboratory; to start-up technology and consulting companies. 

Jim and his family live in a suburb of Philadelphia.  Jim is a co-founder of the CMMC Information Institute, a non-profit organization helping small businesses to better understand and meet their cybersecurity and data privacy obligations.  When he isn’t working, teaching, or volunteering with the Institute, Jim can be found swimming, kayaking, and fishing with his kids.

Darren Hayes Associate Professor

Pace University

Dr. Darren Hayes, is the Founder and Director of the Pace University Digital Forensics Research Lab. He is also an Associate Professor at Pace in New York. Hayes has been listed as one of the Top 10 Computer Forensics Professors, by Forensics Colleges. Hayes has served as a visiting professor at Sapienza University, Rome, Italy, University College Dublin, and New York University. Hayes is an accomplished author with numerous peer-reviewed publications on digital forensics, cybersecurity, and robot-mediated therapy. In late 2020, he published “A Practical Guide to Digital Forensics Investigations” and his fifth book in 2022, “CISSP Certification Guide”. Hayes has also supported numerous civil and criminal investigations and has been declared an expert witness in federal court.

Alex Iftimie Partner and Co-Chair, Global Risk and Crisis Management Practice

Morrison Foerster

Alex Iftimie is co-chair of Morrison & Foerster’s Global Risk and Crisis Management group and routinely advises Fortune 500 and high-growth clients on all aspects of breach preparedness and response, including counseling executives on cybersecurity governance and risk management, and responding to cyber incidents ranging from ransomware attacks to nation-state sponsored economic espionage. Drawing on his experience at the National Security Division of the U.S. Department of Justice, Alex also advises global entities on legal obligations related to the Foreign Agents Registration Act (FARA); foreign investment transactions before the Committee on Foreign Investment in the United States (CFIUS); and laws related to material support to terrorism, sanctions, and export controls.

Prior to joining Morrison & Foerster, Alex held multiple senior positions at the DOJ, including Counselor to the Attorney General, Deputy Chief of Staff and Counsel to the Assistant Attorney General for National Security, and Special Assistant United States Attorney in the Eastern District of Virginia. Throughout his time at DOJ, he advised the Department leadership on national security, intelligence and cyber matters, including policy and legal issues arising in the National Security Council process, CFIUS matters, complex issues involving FARA, and engagements with non-U.S. officials. He also represented the Department on the Export Control Reform Initiative that sought to strengthen national security and the competitiveness of key U.S. manufacturing and technology sectors, and before the Foreign Intelligence Surveillance Court on issues involving novel questions at the intersection of law and technology. Most recently, as a prosecutor in the National Security and Cybercrime Units of the U.S. Attorney’s Office for the Eastern District of Virginia, Alex brought the Department’s charges against Russian efforts to interfere in the 2018 midterm elections. During his time at the U.S. Attorney’s Office, he also investigated, and/or prosecuted, federal crimes ranging from espionage, trade secret theft, and national security cyber matters, to fraud, firearm, and drug offenses.

Julia Jacobson Partner

Squire Patton Boggs (US) LLP

Julia B. Jacobson is a partner in the Data Privacy, Cybersecurity & Digital Assets Practice of Squire Patton Boggs.

For more than 20 years, national and multinational clients have turned to Julia for practical and tactical advice and counsel on privacy and cybersecurity compliance strategies, data breach response, technology transactions and marketing initiatives.

Julia advises clients on an array of privacy, cybersecurity, data breach and data governance matters. She assists clients to design, develop and implement compliance programs to meet the challenges of the evolving privacy and cybersecurity legal landscape. Julia regularly advises businesses on the privacy and cybersecurity aspects of environmental, social and governance (ESG) programs, ethical data use, machine learning and artificial intelligence deployment, vendor contracting and management, and business sales, combinations and acquisitions. Julia also helps clients maximize the value of their strategic relationships by drafting and negotiating a wide range of commercial contracts, particularly technology-centric agreements. Her practice also involves advising businesses on marketing law matters, particularly digital advertising issues.

Ericka Johnson Senior Associate

Squire Patton Boggs

Ericka Johnson has extensive experience responding to bet-the-company global and domestic cybersecurity incidents on behalf of clients across a variety of industries, including healthcare, education, insurance, manufacturing, financial institutions and law firms. She is a trusted advisor, helping clients understand and meet their legal obligations associated with experiencing ransomware attacks, business email compromises, data leakage, data exfiltration, insider attacks and third-party/vendor incidents.

David Kessler Vice President & Associate General Counsel

BAE Systems, Inc.

David Kessler is Vice-President and Associate General Counsel, IT & Data Law for BAE Systems, Inc. where he handles IT contracts, cybersecurity, data privacy and supply chain compliance issues.  Prior to joining BAE Systems, he was Lead Public Sector Product & Marketing Counsel for Verizon where he oversaw all product-related legal matters for its Federal, State, Local and Public Safety businesses.  He was also General Counsel, Managing Attorney & Board Member of McAfee Public Sector LLC, a subsidiary of McAfee LLC (formerly Intel Security).  He also served as McAfee’s Chief Compliance Officer and managed a team responsible for all aspects of its worldwide ethics and compliance program.  Earlier legal roles included Group Corporate Counsel, Public Sector at Autodesk, Inc., Senior Corporate Counsel – Public Sector at Symantec, and Senior Associate with Greenberg Traurig, LLP.  He received his B.A. with honors from the University of Florida and his J.D., summa cum laude, from the American University Washington College of Law.  He was the 2020 winner of the Compliance Week Excellence in Compliance – Cybersecurity award, as well as twice a finalist for the Association of Corporate Compliance National Capital Region Outstanding In-House Counsel award.

Diane Lu Senior Counsel

SoftBank Group International

Diane Lu is Vice President, Senior Counsel at SoftBank Group International and is a Certified Information Privacy Professional (CIPP/US). She advises C-suite and other functional team leaders on various legal matters, including data privacy and commercial contracting, on a global scale. Her prior experiences include litigating patents, advising an international R&D institute, serving on an Institutional Review Board, and completing a data science program in 2021 to better understand the technical side of data.

Diane also sits on the Board of Directors of Breakthrough Silicon Valley and holds a J.D. from Boston University and a B.A. from the University of California, Berkeley.

Meghan Maneval Director of Technical Product Management

Reciprocity

Meghan is a passionate GRC evangelist, DIBs champion, and acronym enthusiast with over 15 years supporting audit, governance, security, risk, and compliance activities in highly regulated markets. Prior to joining Reciprocity, she worked with mobile application and SaaS platform developers designing, executing, and managing GRC programs- including the deployment of Reciprocity ZenGRC at multiple companies.  Meghan specializes in process improvement and program iteration to resolve issues, drive innovation, and produce sustainable solutions. 

Joshua Marpet Founder

MJM Growth

Joshua is an entrepreneur and advisor to many of the Fortune 100 on Information and Physical Security, as well as Compliance and Risk Management.  He honed his skills in police, fire, and surveillance industries, as well as the Federal Reserve Bank system. 

Joshua is a current faculty member for IANS, the Institute for Applied Network Security, a co-host of Paul’s Security Weekly (one of the top Infosec Podcasts worldwide), a CMMC (Cybersecurity Maturity Model Certification) author for the DoD, and author of a patent-pending invention around blockchain and forensic files. 

Joshua is a board member of BSidesDE and BSidesDC, and a global BSides council member. He has been honored as one of the top 10 most influential people in the entire BSides movement.

Patricia McArdle Principal

Patricia McArdle, PLLC

Patricia has over 18 years of in-house experience in technology, software and transportation. In these roles, she focused on contracts, licensing, M&A, private equity, employment and corporate governance. In private practice, she has handled client matters in litigation, securities, corporate acquisitions, executive compensation and data privacy. She has a B.A. in Comparative Literature from
Brown University and a J.D. from Boston College Law School, and she resides in Dallas, Texas.

McKenzee McCammack JD, CCEP, Regional Compliance Manager

American Express Global Business Travel

McKenzee began her career as a litigator practicing employment law. She subsequently transitioned into compliance at Panasonic Avionics while it was under federal monitorship. As both an investigator and then compliance manager, she was part of an integral team that guided Panasonic to its successful completion of the monitorship. After the monitorship ended, McKenzee became a Regional Compliance Manager for the Americas at American Express Global Business Travel where her responsibilities include managing the compliance aspects of the third party risk management program.

Kayne McGladrey Field CISO

Hyperproof

Kayne McGladrey, CISSP is the field CISO for Hyperproof and a senior member of the IEEE. He has over two decades of experience in cybersecurity and has served as a CISO and advisory board member, and focuses on the policy, social, and economic effects of cybersecurity lapses to individuals, companies, and the nation.

Lori McKellar

Reciprocity

Lori has 20 years of sales and marketing experience focused on information management software including the technology sector across various technologies, from call center applications, enterprise content services, digital process automation, artificial intelligence, and analytics.

Prior to joining Reciprocity, Lori served as Senior Director, Product Marketing for Advanced Technologies at OpenText and was responsible for marketing strategy, improving go-to-market effectiveness, and driving revenue for the AI and Analytics and the Digital Process Automation product portfolios.

She has also held marketing roles at Dell, EMC, Documentum, Kana Communications, Broadbase, ServiceSoft Technologies, and Pitney Bowes.

She holds an MBA from Bentley University and a BS in Marketing from the University of Rhode Island.

Amy Mertz Brown Chief Compliance Officer

Gurstel Law Firm, P.C.

Amy Mertz Brown has over 30 years of experience as a leader, lawyer, and compliance professional. Amy currently serves as Chief Compliance Officer (CCO) at Gurstel Law Firm, P.C., a creditors’ rights law firm headquartered in Golden Valley, Minnesota and practicing in nine states. Amy leads both the Firm’s regulatory compliance with federal and state law concerning creditors’ rights and consumer rights, as well compliance with operational requirements for the Firm such as business and attorney licensing.

Prior to joining Gurstel in 2020, Amy was CCO at the U.S. Securities and Exchange Commission (SEC), leading a team of compliance attorneys and professionals to oversee government ethics compliance for all SEC employees and managing several large dollar value IT projects. Amy developed and implemented the enterprise ethics and compliance program at the Consumer Financial Protection Bureau (CFPB), a financial services federal agency. She joined CFPB in 2010 in its start-up phase and over the course of eight years helped establish and build CFPB’s in-house legal department. Amy also has served in legal department management positions at the U.S. Department of the Treasury and the U.S. Small Business Administration (SBA). 

Amy is a national public speaker on compliance program and risk management, regulatory compliance, and creditor’s rights, for groups such as National Creditors Bar Association (NCBA), Receivables Management Association International (RMAI), Compliance Week, and Great Women in Compliance Podcast. Since October 2022, Amy has served on the NCBA Board of Directors and co-chairs NCBA’s Advocacy Committee. Amy also is a member of the National Association of Corporate Directors (NACD), and Chief, a private network of executive women.

Amy is a graduate of Washington College of Law, The American University, in Washington, DC, and is licensed in California. She holds a Leadership Professional in Ethics and Compliance (LPEC) Certification from the Ethics and Compliance Initiative (ECI).

Jamie Miller CEO

Mission Multiplier

Mr. Miller is the Founder and CEO of Mission Multiplier, a Huntsville-based, HUBZone-certified small business and Department of Defense recognized asset at the forefront of cybersecurity and information assurance innovation.  Mission Multiplier is formally sponsored by the Missile Defense Agency as part of their Mentor-Protégé program and was recently awarded the 2019 Small Business of the Year in the Government Contracting / Technology category by the Huntsville – Madison County Chamber of Commerce. Mr. Miller is also the CEO of two additional companies, both Joint Ventures (JVs): (1) Mission Innovate LLC, a JV with All Points (our MDA-sponsored Mentor); and (2) MARS Suite LLC, which is also under an SBA-JV with All Points.  Both JVs are focused on cyber technology development and innovation.

Mr. Miller possesses over 20 years’ experience and is a proven thought leader that has developed innovative approaches and methodologies to solve problems in the areas of: cybersecurity assessment; governance; engineering; operations; critical infrastructure protection; data analytics; and continuous monitoring.  Mr. Miller’s innovative cyber solutions – to include ISSO-as-a-Service, MARS Suite™, and SATURN-i – are changing the game for how organizations make more informed and effective risk management decisions at a reduced cost.

Mr. Miller was awarded the “2021 Entrepreneur of the Year” by the Catalyst Center for Business and Entrepreneurship.  Mr. Miller was also awarded the prestigious Russell G. Brown Award by the Huntsville Chamber in 2021, after being a finalist for five years in a row -- from 2017 through 2021.  Mr. Miller was also named a finalist as “Entrepreneur of the Year” as part of the 2018 Economic Development Partnership of Alabama (EDPA) imerge Innovation Awards, and won the “2016 Emerging Entrepreneur of the Year” by the Innovate Huntsville organization.  He is a regular speaker at cybersecurity industry leading conferences (e.g., National Cyber Summit), and has published several industry articles – most recently writing about “Shared Risk” for the Security Magazine. Mr. Miller serves as the President of the Board of Directors for Cyber Huntsville, a Tennessee Valley Initiative; CyberReach; the Southeastern Cyber Security Foundation; and he also serves as the National Cyber Summit Program Co-Chair.  Mr. Miller is also a proud member of the Leadership Huntsville Class of 29, and Focus Class 31.  He holds an MBA in consulting from Thunderbird School of Global Management, and a BA in International Studies from American University. 

Katie Nisbet Solutions Consultant

Exterro

Kate Nisbet is a Solutions Consultant at Exterro for Privacy, Information Governance and Cyber Security solutions. Kate is currently going into her fifth year at Exterro. She has completed several sales certifications on the Privacy, eDiscovery, and Forensic products. During her career she has worked with clients and prospects by identifying solutions to automate their internal processes. She continues to grow by learning about the everchanging privacy laws and regulations, as well as continues to update her knowledge around the Exterro product suite.

Rebecca Perry CIPP/US/G Director of Strategic Partnerships

Exterro

Rebecca Perry is the Director of Strategic Partnerships at Exterro.  Rebecca has been with Exterro almost 30 years.  She works with legal, IT, Compliance and Privacy professionals, along with their outside counsel, to accelerate compliance and mitigate risks in the areas of Data Privacy, Data Retention, Data Inventory/Mapping, Data Breach, E-Discovery & Digital Forensics.

Rebecca has been a Certified Information Privacy Professional for the last 10 years and has been in the trenches with clients helping them solve complex data governance challenges.

Rebecca speaks frequently on these topics to groups like the Association of Corporate Counsel, IAPP, PrivSec, Data Protection World Forum and Today's General Counsel. Rebecca also manages strategic partnerships with legal service providers and works closely with law firm partners.

Timothy Rohraugh Former JetBlue Airways

CISO

A senior security and data governance professional, Tim Rohrbaugh is currently the former CISO of JetBlue Airways.

Prior to his role at JetBlue, Tim was the CISO for a public financial services firm Intersection Inc for 12 years. His cyber security experience includes military, DoD and Federal Government, including commercial consulting. He is also a CISSP and holds two joint patents on Identity Verification.

David Sherman Partner

BakerHostetler

David Sherman helps clients anticipate, understand and proactively mitigate cyber risk. He leverages insights developed from hundreds of security incidents to deliver pragmatic, risk-informed legal counsel to key stakeholders across an organization. David is sought after for his creative, reasonable and clear approach to incident response preparedness; his ability to enhance an organization's enterprise security posture; and his skill in crafting security assessments and policies tailored to an organization's legal and business objectives.

As a member of the firm's Digital Assets and Data Management group, David works closely with clients to proactively assess and mitigate cyber risk, facilitate incident response preparedness and develop privacy and information security policies that comply with state, federal and international privacy and cybersecurity laws, including the California Consumer Privacy Act (CCPA) and E.U. General Data Protection Regulation (GDPR). He also works with clients to enhance enterprise security posture and manage responses to any digital crisis that may be present.

David also has substantial experience drafting and negotiating service provider agreements on behalf of customers and vendors and analyzing clients' existing agreements to evaluate and optimize contractual allocation of risks, rights and obligations in the event of a security incident.

Marco Siccardo Head of Solutions Architecture

Hyperproof

Marco is the Head of Solutions Architecture for Hyperproof and has spent the past 8 years in the SaaS Cloud space. His team sits between the Product and Business units, ensuring the platform is represented in its latest and greatest form. He specializes in global business and has deployed high-impact software across 6 continents.

Dana Simberkoff Chief Risk, Privacy and Information Security Officer

AvePoint

Dana Simberkoff is Chief Risk, Privacy and Information Security Officer at AvePoint, the most advanced SaaS and data management platform provider. One of CSO Online’s “12 Amazing Women in Security”, Dana is a founding member of the Women Leading Privacy Advisory Board, and a former member of the Education Advisory Board for the International Association of Privacy Professionals (IAPP). Dana spearheads AvePoint’s privacy, data protection and security programs, is an expert in cyber and data security trends, and is a firm believer that all software vendors should have third-party security certifications and validation to show customers their commitment to protection. She holds a bachelor of arts from Dartmouth College and a juris doctorate from Suffolk University Law School.

Bill Tolson Vice President, Compliance and eDiscovery

Archive360

Bill brings more than 30 years of experience with multinational corporations and technology start-ups, including 20-plus years in the archiving, information governance, and eDiscovery markets. Bill is a frequent speaker at legal and information governance industry events and has authored numerous eBooks, articles, blogs and hosts the Information Governance 360 Podcast.

Edward Vasko Director, Institute for Pervasive Cybersecurity

Boise State University

Edward Vasko, CISSP, is currently the Director of Boise State University’s Institute of Pervasive Cybersecurity. He is a cybersecurity leader and entrepreneur with over 30-years of experience in the cybersecurity industry. Prior to joining Boise State University, Edward established and was a Senior Vice President at Avertium, a leading national managed security and consulting provider. Before establishing Avertium, he was the co-Founder and CEO of Terra Verde, based in Phoenix, Arizona. Prior to being acquired by growth equity in 2018, Terra Verde was one of the nation’s largest providers of cybersecurity advisory and managed security services, with over 2,000 active clients around the world.

Edward’s other passion is tackling the challenge of enabling a “Ready to Work” cyber workforce. He has served on over 20 advisory boards providing expertise around cybersecurity industry needs and career pathways. He has been appointed by multiple governors to lend his expertise to solving workforce challenges.

Maria Vullo Founder & CEO, Former New York Superintendent of Financial Services

Vullo Advisory Services, PLLC

Maria T. Vullo is the CEO of Vullo Advisory Services, PLLC, which specializes in strategic advisory services and expert consulting on financial regulatory matters.  In addition to her consulting practice, Ms. Vullo is an Adjunct Professor of Law at Fordham Law School, Regulator-in-Residence at the Fintech Innovation Lab NYC, and a member of several for-profit and nonprofit boards of directors.  From 2016-2019, Ms. Vullo served as the Superintendent of the New York State Department of Financial Services, where she was New York's banking and insurance regulator, leading an agency of 1,400 employees responsible for the oversight of New York's vast financial services industries, including all insurance companies licensed to do business in New York, and all New York State chartered and foreign bank branches, and non-depository firms.  As Superintendent, among her many accomplishments, Ms. Vullo promulgated a cybersecurity regulation applicable to all New York-regulated institutions, which became the national model.  Prior to her service as Superintendent, Ms. Vullo was a senior litigation partner with the leading international law firm of Paul, Weiss, Rifkind, Wharton & Garrison LLP, and also served as Executive Deputy Attorney General for Economic Justice in the Office of the New York Attorney General.  Ms. Vullo is a frequent public speaker.  She holds a JD from NYU School of Law, an MPA from NYU Wagner's Graduate School of Public Service, and a BA and an Honorary PhD from the College of Mount Saint Vincent.  

Greg Wendt Executive Director Security Solutions

Pathlock

Greg Wendt is one of the top ERP security experts with knowledge across multiple ERP platforms.   During his 24-year career, he has been recognized as a leader in data security, application architecture and enterprise business operations