A-F
Natasha Almanzar Sanchez
New York State Office of Information Technology Services
Natasha Almanzar Sanchez currently serves as a Excelsior Fellow at the New York State Office of Information Technology Services. Working under the Chief Risk and Privacy Officer, she contributes to the development of statewide privacy frameworks and the assessment of privacy risks in technology. Prior to joining ITS, Natasha supported privacy initiatives at the New York City Department of Social Services, Office of Data Privacy and assisted litigation efforts at a grassroots NYC law firm specializing in criminal and family law . Natasha earned her J.D. from Columbia Law School and an “Up-and-Coming Leader” award at the Government Technology New York IT Leadership Forum. In her free time, Natasha is an avid traveler and enjoys adventures with her dog, Chewbacca.
Chirag Arora
Center for Internet Security
Chirag Arora is widely recognized for his exceptional contributions to the cybersecurity domain. With more than 15 years of distinguished experience, he has been a driving force in strengthening the cybersecurity programs of global enterprises, earning numerous awards and accolades for his visionary leadership. As Chair of the GlobalCISO Leadership Foundation, Chirag guides and mentors top executives, shaping the future of cybersecurity leadership worldwide. His role as an Ambassador at the Center for Internet Security (CIS) further highlights his dedication to promoting global best practices and standards in cybersecurity. Chirag's expertise spans conducting comprehensive security gap assessments using frameworks such as CIS Critical Controls, NIST Cybersecurity Framework (CSF 2.0), and ISO 27001. His deep knowledge of Cyber Governance and Risk Management has positioned him as a thought leader and innovator in the industry. A staunch advocate for advancing cybersecurity resilience, Chirag continues to champion research, innovation, and collaboration to address emerging threats and challenges. His unwavering commitment to excellence ensures organizations worldwide achieve robust, scalable, and sustainable cybersecurity practices.
Brianna Bace
USTelecom
Brianna Bace is a researcher at the SUNY Research Foundation and an adjunct lecturer at the University at Albany, where she previously earned an MPA with a focus on cybersecurity, as well as a B.A. in Emergency Preparedness, Homeland Security, and Cybersecurity (EHC), and Political Science. She is also a part of Team Cyber at USTelecom. Brianna has published research on several critical topics, including catastrophic cyber risk management, the applicability of international law on cyberattacks, and the cybersecurity of the space sector. She is currently a 2024-2025 Yale Law School Launchpad Scholar and plans to apply to law school this fall.
Jeffrey Baez
Splunk, Inc.
Jeffrey's greatest satisfaction in life comes from bringing people together, solving complex problems and making a measurable impact. Technology is a wonderful tool, but it really is about empowering people. Before joining Splunk, Jeffrey served as the first CISO for the New York State Department of Financial Services, and later the first CISO for the New York State Board of Elections. During his tenure, he helped ratify a governance charter establishing the Secure Elections Center, led a series of statewide tabletop exercises, and has spoken at numerous conferences including the National Cybersecurity Summit and annual MS-ISAC Conference. Jeffrey now serves as a Security Advisor for Splunk where he advises executives in the financial services industry and public sector on best practices for establishing and improving their cybersecurity programs in a meaningful way.
Claire Bailey
Tanium
Claire Bailey is the Chief Security Advisor at Tanium, supporting U.S. State and Local Government & Education (SLED). Her more than 40 years of experience includes driving modernization, security, and transformation initiatives for federal, state, and local governments, in both private and public sector leadership roles. Some of her most prominent positions include serving as Chief Technology Officer for the State of Arkansas, as well as several industry vice president and director roles at Veracode, KWR Strategies, and Compuware, among others. Bailey’s contributions to public service and innovation have earned her honors and recognition from several institutions, including the Governor’s Quality Award (Arkansas), Government Technology, StateScoop, and the Arkansas Academy of Computing.
Craig Besnoy
Dunlap Bennett & Ludwig
Craig Besnoy is a technology-focused attorney specializing in intellectual property, data privacy, and cybersecurity. A substantial portion of Craig’s practice is focused on advising financial firms on the development of cybersecurity programs that meet compliance requirements. Craig earned his B.S. in Accounting from the University of Alabama and his J.D. from the Benjamin Cardozo School of Law, where he specialized in Intellectual Property Law, which lends to his extensive understanding of the intersection of law and business. With broad expertise in both business and legal issues, he counsels clients across a variety of industries and internationally, including banking, finance, insurance, retail, education, manufacturing, pharmaceutical, media, e-commerce, and hospitality. He is licensed to practice in the state of New York. Craig is also the creator of a cybersecurity compliance course and curriculum, which was listed in FINRA’s Compliance Vendor Directory for implementation by financial firms. He earned accreditation as a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Professional/United States (CIPP-US), from the International Association of Privacy Professionals (IAPP).
Kiran Bhujle
SVAM International Inc
Kiran Bhujle is the Global Managing Director at SVAM International, where he oversees SVAM’s Security Advisory Group. With over 25 years of experience, he is a senior technology risk executive who has helped numerous organizations manage their technology risks and transformation programs. He holds various certifications, such as CISA, CRISC, CDPSE, and CMMC RP. He is a lecturer at Columbia University for Technology Risk Management, a Cybersecurity Advisory Board member for Harvard Business Review, and an executive member of the Forbes Technology Council. He serves on the Board of Directors for Green Guerilla, a non-profit organization, and Fairleigh Dickinson University GHSCSE Advisory.
Christopher Braccia
USTelecom
Christopher Braccia is a cybersecurity and emerging technology expert specializing in critical infrastructure protection, AI governance, and nation-state cyberthreats. With extensive experience working alongside U.S. federal agencies, international regulators, and the private sector, he plays a key role in strengthening cybersecurity resilience against geopolitical threats, particularly those posed by the People's Republic of China (PRC) and other state-sponsored actors. At USTelecom, Christopher leads initiatives in cyberthreat intelligence and AI policy tracking and works alongside DHS, ONCD, CISA, and industry partners. His work includes developing a State Actor Cyber Threat Database, working with the Communication Sector Coordinating Council (CSCC), and contributing to CISA's AI Sector Risk Assessments to safeguard critical infrastructure. He actively contributes to the International Communications CISO Council (ICCC), enhancing intelligence-sharing and policy initiatives between the U.S., Europe, and Asia. With a background in global critical infrastructure, he has advised some of Southeast Asia's largest ISP's, Regional Manufacturers and Universities. His expertise spans data center security, communication sector resilience, critical food system security and emerging technology.
Gary Braglia
OrbitalFire Cybersecurity
Gary Braglia is VP, Services at OrbitalFire Cybersecurity, with over 15 years of experience as an IT professional and 10 years in cybersecurity. In his current role, Gary manages the Services Team at OrbitalFire, which is responsible for the successful delivery of penetration testing, vulnerability assessment, incident response, and compliance assessments across industries. Gary began his career as an application developer with the NYS Office of Information Technology Services (ITS), and he is a graduate of SUNY Albany with a Masters Degree in Information Systems (M.S.I.S.). In his prior career at GreyCastle Security, Gary consulted with clients in a wide range of security domains, including (but not limited to) penetration testing, security awareness training, vulnerability assessments, incident response, network security, application security and social engineering.
Todd Brasel
NYSTEC
Todd Brasel has 25 years of experience in software engineering, application security, quality assurance, and security risk assessment. Most recently, he has been developing AI-enabled web applications and helping organizations to develop governance for the use of AI. He is an IEEE Certified AI Ethics Assessor (CertifAIEd) and ISC2 Certified Information Systems Security Professional (CISSP).
Josh Brooks
WorldTech IT
Josh Brooks is one of our leads focused on driving the adoption of forward-facing technologies around F5 and Artificial Intelligence. When he's not working on integrating new technologies you can find him obsessing over his lawn care routine, tinkering with home automation, or enjoying time with his family out in the Texas Hill Country.
Dr. David Byrne
St. John's University, Criminal Justice & Homeland Security
David S. Byrne is an Assistant Professor at St. John’s University in the Division of Criminal Justice and Homeland Security at The Lesley H. and William I. Collins College of Professional Studies. He earned his doctorate (Ph.D.) in Information Science with a specialization in Criminal Justice Technology and a Master of Science in Criminal Justice from LIU Post, NY, and a second Masters in Library Science (MLS) from St. John’s University, NY. Dr. Byrne’s career spanned nearly a decade and a half in Law Enforcement Intelligence focusing on transnational organized crime and Homeland Security investigations. Dr. Byrne’s expertise is in datamining OSINT, mobile phone and computer forensics, and intelligence analysis. He was cross designated as a Special Detective Investigator for several District Attorney Offices in New York State and earned many accolades for his investigative efforts in several high-profile criminal cases. Among the courses Dr. Byrne taught include Computer Forensics, Intelligence Operations, Homeland Security Intelligence & Counterterrorism, and Criminal Investigations. He was the recipient of the prestigious SUNY Chancellor’s Awards for Excellence in Adjunct Teaching (2023-2024) at Farmingdale State College, NY. Dr. David Byrne is the author of two books; Intelligence Analysis for Criminal Investigations and Crime Scene Investigation as well as multiple peer-reviewed publications. His research interests include enhancing criminal justice education through simulations, applied/experiential learning, cybercrime, identity theft, intelligence studies, and privacy issues.
Bill Carter
Fortinet
Bill Carter is a dynamic cybersecurity leader with a passion for securing the digital world and educating others on the evolving threat landscape. Currently serving as a public sector cybersecurity strategist at Fortinet, Bill previously protected Ohio’s 12 million citizens as the Chief Information Security Officer for the Department of Commerce and Deputy Chief Information Security Officer for the State, overseeing security strategies across 80+ agencies. With a career spanning additional roles as Field CTO, Senior Systems Engineer, and Technical Consultant, he brings deep expertise in cybersecurity strategy, infrastructure, and risk management. A hands-on technologist and sought-after public speaker, Bill holds a master’s degree in Cybersecurity and multiple industry certifications, including CISSP, SecurityX, and all MITRE credentials. He is also an Adjunct Professor of Cybersecurity, as well as an active member of the Ohio Cyber Reserve and the FBI’s InfraGard.
Elijah Cedeno
Multi-State Information Sharing & Analysis Center
Elijah Cedeno is a Regional Engagement Manager for the Multi-State Information Sharing and Analysis Center™ (MS-ISAC®), a division of the Center for Internet Security, Inc.®. He is a member of the Stakeholder Engagement team, which works with our nation’s State, Local, Territorial, and Tribal (SLTT) governments and public education institutions to provide no-cost cybersecurity resources and services. Elijah manages the MS-ISAC® members in the Northeast regions, supporting their overall cybersecurity posture.
Leo Cruz
Cisco Systems
Leo Cruz is a passionate technologist, engineer and advisor with 15+ years of experience as a security practitioner in the cybersecurity industry. He has presented at conferences such as RSA, Blackhat, DEFCON, Cisco Live, and many others. He has served as a lead architect and advisor to dozens of public sector agencies.
Michael Daganhardt
ReversingLabs
Michael Daganhardt is a Solutions Architect at ReversingLabs, where he helps organizations across the US East Coast, Canada, and South America strengthen their cybersecurity posture. Specializing in software supply chain security, malware analysis, and cybersecurity automation, Michael works closely with clients in high-tech and financial sectors to align their needs with modern security solutions. With over a decade of experience in cybersecurity, Michael has played a key role in advancing endpoint security at companies like Carbon Black, Capsule8, and Sophos. His expertise spans threat detection, security architecture, and automation strategies, making him a trusted advisor in the field.
Sam Dikeman
NYSTEC
Sam Dikeman is a principal consultant with over 40 years of IT experience focused on cybersecurity, programming, and IAM solutions. Earlier in his career, he worked for a number of consulting firms and specialized in setting up and maintaining enterprise IAM solutions. Sam has been specializing in cybersecurity work for over 6 years. Sam holds CISSP and CIPT certifications.
Curtis Dukes
Center for Internet Security
Curtis W. Dukes joined CIS as the Executive Vice President and General Manager of the Best Practices and Automation Group in January 2017. The CIS Benchmarks™ and CIS Controls™ program provides vendor-agnostic, consensus-based best practices to help organizations assess and improve their security. Prior to CIS, Curt served as the Director, Information Assurance for the National Security Agency, Central Security Service. In that role Curt was responsible for securing systems that handle classified and critical information for military and intelligence activities. Dukes joined the National Security Agency in 1984 as a Computer Scientist. He served in a variety of organizations within NSA, and earned the Distinguished Executive, Meritorious Executive, as well as Exceptional Performance and Meritorious Civilian Service Awards. He later led highly skilled technical workforces as Director NSA/CSS Commercial Solutions Center. Dukes earned a bachelor’s degree in computer science from the University of Florida, as well as a master’s degree in computer science from Johns Hopkins University. He is a 2004 graduate of the Intelligence Community Officer Training Program.
Eric Dull
Deloitte
Eric Dull is a Managing Director and AI Fellow at Deloitte & Touche LLP, where he leads applied research in computer security and applied analytics for defense and Intelligence community clients. He has more than 23 years of applied research and prototyping in modeling and Simulation, applied Graph Analytics, behavioral analytics, AI, and High-Performance Computing. He holds a BA and an MS in Computer Science.
Terire Fears
Inspired eLearning | VIPRE Security Group
Tre Fears is a cybersecurity and compliance superhero responsible for creating meaningful and memorable learning programs at Inspired eLearning. He has been focused on security awareness and compliance training for the last seven years, working in adult learning and development and instructional design for more than 20 years.
Holden Fenner
Red Hat
Holden Fenner is an automation specialist with Red Hat. He previously worked with cyber response teams developing infrastructure necessary for incident response.
George Freeman
LexisNexis Risk Solutions
George is a subject matter expert for customers in the government space. George provides illustrated use cases and workflow designs to mitigate identity cyber fraud resulting from increasing use of stolen identities, fake identities, and malicious BOTs. Workflow solutions include data-driven digital identity risk assessment with physical identity verification and step-up authentication via LexisNexis Risk Solutions physical identity products. George works with various LexisNexis Risk Solutions business development teams to scope identity solutions from rapid shifts in various Internet threat landscapes. Use cases include solving state agency public benefits web portal fraud, integrating with leading Identity and Access Management (IAM) vendors, and work-from-home remote access fraud.
G-P
F. Paul Greene
Harter Secrest & Emery LLP
F. Paul Greene is a partner at Harter Secrest & Emery, a full-service business law firm with offices throughout New York. He chairs the firm’s Privacy and Data Security and Artificial Intelligence and New Technologies Practice Groups. Recognized as a leading authority on data protection and AI, he helps clients maximize the benefits of technology while managing risk. A Fellow of Information Privacy and a Distinguished Fellow of the Ponemon Institute, he frequently speaks and publishes internationally, including in the New York Law Journal. With a background in academia and commercial litigation, Paul brings deep insight into AI, forensic investigations, e-discovery, and technology-related disputes. His clients include major retailers, financial institutions, healthcare organizations, higher education institutions, AdTech, AI developers, and manufacturers. He has led high-profile incident response efforts involving millions of individuals and collaborates with law enforcement and regulators. On the proactive side, Paul helps clients develop privacy management and AI governance programs. His team is an authorized Breach Coach® by NetDiligence. Additionally, he is a leading litigator in Medicaid reimbursement, advocating for healthcare providers in securing necessary funding. Fluent in German, Paul applies a global perspective to data protection and AI matters.
John Griffin
New York State Troopers
Johnny Griffin has 25 years experience in software development, digital forensics and cyber incident response, red teaming and cyber fraud investigations.
He is currently employed at the New York State Police Cyber Analysis Unit as the lab lead, teaches Incident Handling for the SUNY Albany graduate program, and is a member of the USSS Empire State Cyber Fraud Task Force.
Antony Haynes
Albany Law School
Antony Haynes leverages his more than 30 years of experience in the legal, financial, and technology fields to help organizations grow, minimize risk, and prosper. He is currently a Partner and Head of the Cybersecurity and Data Privacy Practice Group at Dorf Nelson & Zauderer LLP and Professor of Law and Director of the Cybersecurity and Data Privacy Program at Albany Law School. Versed in educating and engaging a range of audiences and constituents, on a daily basis, Antony advises senior executives and instructs early career professionals on matters of cybersecurity and data privacy, criminal defense, ethics, technology, securities, and internal investigations. He has trained hundreds of senior leaders in the corporate, non-profit, and government sectors. He has served as a guest lecturer for many institutions and organizations, including repeatedly for Harvard University. As a long-serving Director at MountainOne Bank, he is a member of the Audit Committee and the Asset-Liability Committee. Early in his career, Antony served as an Assistant Professor of Computer Science at the U.S. Air Force Academy, where he taught courses in programming, developed the Academy’s Information Assurance curriculum, and created the intercollegiate Cyber Defense Exercise and was one of the first employees at Chatham Financial, a global financial risk management firm. He is a graduate of the U.S. Air Force Academy, University of Illinois-Urbana-Champaign, and Georgetown Law School.
Alex Holden
Hold Security, LLC
Alex Holden is the founder and CISO of Hold Security, LLC. Under his leadership, Hold Security played a pivotal role in information security and threat intelligence, becoming one of the most recognizable names in its field. Mr. Holden researches minds and techniques of cybercriminals and helps our society to build better defenses against cyberattacks.
Jeff Janies
Deloitte
Jeff Janies is a Specialist Leader in Deloitte & Touche LLP’s Government and Public Services practice. He leads teams in the development and delivery of data science approaches that support cyber operations. He has nearly 20 years of experience in developing and delivering mission-driven analytics-based approaches to support cyber operations in everything from data enrichment, transformation, and loading to behavioral modeling of network traffic for detection of malicious activity. He holds a BS and an MS Computer Science and is also a CISSP.
Christopher Jensen
Tenable
Christopher (Chris) Jensen is the Director of Public Sector Business Development at Tenable, where he develops strategic cybersecurity initiatives and supports programs in federal, state, and local markets. Prior to joining Tenable in 2017, Chris served in a broad range of leadership roles in Public Sector IT contracting, including business operations, contract and program management, and business development. Chris began his professional career as an officer in the U.S. Navy. After leaving active service, he continued to serve in the U.S. Navy Reserve, retiring at the rank of Captain. A graduate of the U.S. Naval Academy, Chris also holds a J.D. from The George Washington University Law School.
Michele Jones
NYS Office of Information Technology Services
Michele Jones is New York State's first-ever Chief Risk and Privacy Officer. In this capacity at NYS ITS, she is responsible for driving the state's strategy in protecting the personal and confidential data of New Yorkers amid a rise in digital service offerings and new data privacy laws and regulations. Prior to joining ITS, Michele served more than 10 years in various roles, including General Counsel and Deputy Director of Risk Management, as well as Compliance/Data Protection Officer for Capital Region BOCES, where she was a key member of the executive team. She also managed vendor engagements, developed information privacy and security awareness training, and spearheaded the campaign to shift BOCES culture towards data privacy and security awareness. Michele is a graduate of Albany Law School and holds a certificate in Human Resource Management from Cornell University's School of Industrial and Labor Relations.
Kayvan Karimabady
NYSTEC
Kayvan Karimabady holds a Juris Doctorate and a Master of Science degree in Cybersecurity Risk Management obtained from Indiana University. With his legal and cybersecurity background, he has been working as a consultant on NYSTEC’s Cybersecurity and Data Privacy team for nearly a year. He has experience in regulatory review as well as drafting, processing, and reviewing Data Use Agreements with a large number of organizations.
Drew Lasater
NYS DHSES
Drew obtained a master's degree in Strategic Intelligence from American Military University and a second master’s degree in Diplomacy and International Relations at Seton Hall University. Starting a career as an analyst for the Philadelphia Police Department at the Delaware Valley Intelligence Center (DVIC) in Philadelphia, working gang and group related violence, organized crime, counterterrorism, and threat analysis. He is now currently an Intelligence Analyst for the NYS Division of Homeland Security and Emergency Services Office of Counterterrorism Critical Infrastructure Protection Unit.
Roderick Link
Federal Bureau of Investigation
Roderick Link has over 10 years of experience working as FBI Albany's Computer Scientist. In that time, he has served as the division's primary subject matter expert on digital forensics, cryptanalysis, network, memory and malware analysis in support of over 500 FBI operations including more than 40 computer intrusions. He is also a member of the FBI's Cyber Action Team (CAT), a team that's responsible for providing rapid incident response to the most critical attacks under FBI investigation. His recent major deployments include containing attackers accessing Super Bowl 2020 infrastructure, combating the SunBurst backdoor at U.S. federal agencies, and assisting with the international arrest of a subject in the US Navy's largest ever public corruption investigation.
Neal Maguire
Verizon
Neal Maguire is a Principal Consultant with Verizon’s Cyber Security Consulting Services. In this role, Neal is chiefly responsible for managing the conduct of computer forensic investigations, analysis, data recovery, case-load intelligence and IT investigative work related to delivery of the team’s book of business and providing advisory consulting services to client senior management and the C-suite.
Neal is an active public speaker, discussing various topics ranging from high-level best practices to C-suite executive briefings. He has been a contributing author to the Verizon Data Breach Investigations Report and routinely presents the report and its findings to audiences and at conferences on a global basis.
Joe Malinka
Arista Networks
Joe Malinka manages the technical pre-sales engineering team for Arista's Zero Trust portfolio. He's a veteran infosec engineer with a penchant for cybersecurity startups, innovation, and rapid adoption of new technologies. He has provided engineering, consultative, and architectural expertise in many different security domains, working extensively with organizations of all sizes and verticals. He has received numerous industry and security certifications, and has a degree in Applied Physics.
Joseph Maltino
Spruce Technology
Joseph (Joe) is a long-tenured Business Development Manager at Spruce. Joe’s experience with Spruce includes direct project oversight of engagements ranging from cybersecurity consulting to ERP system implementations, infrastructure upgrades, and system assessments. He has working knowledge—sometimes hands-on—of many of the leading platforms and technologies currently in use and emerging in government agencies, such as business automation, ERP, cloud, cybersecurity awareness, and robotic process automation tools. Joe’s experience at Spruce includes managing many Spruce accounts in both the public and private sectors, including municipal clients in the City of New York and City of San Jose, as well as State clients such as the Pennsylvania Turnpike Commission, the University of Illinois, and Orange County IT, among many others. He also actively manages subcontractor, supplier, and consultant relationships to ensure Spruce has a steady source of diverse partners with expertise in any service area. Other past experience in the public sector includes working for Morris County Superior Court as an Assistant Court Clerk.
Slawomir Marcinkowski
NYSTEC
Slav Marcinkowski, NYSTEC’s risk/compliance assessment and data classification domain lead, has more than 25 years of experience in cybersecurity and holds multiple cybersecurity certifications from SANS. He holds the ICS2 CISSP and has published in academic journals. Over the years, he has developed compliance programs; performed compliance assessments against various security and privacy frameworks; and developed data classification processes and policy development across a myriad of New York State governmental agencies, such as the New York State Department of Health, Division of Homeland Security and Emergency Services, Office of Mental Health, Board of Elections, Office of the Attorney General and the Office of the New York State Comptroller. Mr. Marcinkowski has several publications with IEEE, Journal to Technology Transfer, and Expert Systems with Applications.
Robert Mayer
USTelecom
Robert Mayer serves as Senior Vice President of Cybersecurity at USTelecom, where he leads cyber and national security policy initiatives for the broadband industry. With over a decade at the association, Mayer has established himself as a respected leader in the cybersecurity community, bringing extensive expertise that benefits both USTelecom members and the hundreds of millions of customers they serve. As Chair of the Communications Sector Coordinating Council (CSCC) at the Department of Homeland Security, Mayer plays a crucial role in public-private partnerships focused on national security and emergency preparedness. He co-leads the Multi-Association Framework Development Initiative, representing over 30 major U.S. trade associations on cybersecurity risk management policy issues and regularly engages with top government officials. In 2015, Mayer was appointed to the FCC Communications Security Reliability and Interoperability Council (CSRIC V), where he led a team of 100 cybersecurity professionals in producing a landmark report adapting the NIST Cybersecurity Framework to five industry segments within the communications sector. Before joining USTelecom, Mayer served as the Telecommunications Director of the New York Public Service Commission, where he was the state's top telecommunications official. His academic credentials include a B.A. from Albany State University, an M.A. in Information Management from Central Michigan University, an MBA from Boston University, and a J.D. from New York Law School. Mayer continues to be at the forefront of developing cybersecurity strategies that protect critical infrastructure while fostering innovation across the telecommunications landscape.
Carl Mazzanti
eMazzanti Technologies
Carl Mazzanti, CISSP, is Co-Founder and President of eMazzanti Technologies, is a leading business technology consulting firm. The firm specializes in Outsourced IT Support, Cloud Migrations, Cybersecurity and AI. The firm has more than 500 clients throughout the New York metropolitan area and internationally. Carl is a graduate of Georgetown University, with a triple major in Finance, New & Small Business Management, and International Business. The firm is also a leader in artificial intelligence applications for business processes, Cybersecurity, and other Asset Management, Loss Prevention and other services. In addition, services include computer network management and troubleshooting, threat hunting, PCI DSS compliance, security awareness implementations, mobile workforce technology, malware remediation, cloud computing, and business continuity and disaster recovery. eMazzanti Technologies has won industrywide and other recognition as a leader for superior service delivery and stellar growth. The firm has placed on the Inc. 5000 list of fastest-growing privately held companies ten times, including eight years in a row; and has been recognized by Microsoft as a 4x partner of the year and a Watchguard 5x partner of the year. NJBIZ recognized the firm as the Small Business of the Year and as a leading NJ Digital Innovator in 2019, 2020, 2022, 2023, and 2024. For more information visit www.emazzanti.net or call 201-360-4400.
Cecil McMaster
Mc 2 Consulting
Cecil McMaster’s professional acumen spans over twenty-five years of experience in Information Technology leadership as an agent of change for first-class service delivery. Cecil was the Business Information Officer for The New York City Department of Environmental Protection, where he successfully implemented many innovative technology solutions. He was appointed twice as the CIO at the New York City Department of Environmental Protection, whose mission is to protect public health and the environment by supplying one billion gallons of clean drinking water daily, collecting and treating over one billion gallons of wastewater daily, as well as reducing air, noise, and hazardous materials pollution for approximately nine million New Yorkers. He has also served as the Director of Infrastructure at Web.com, as the New York City Consulting Practice Manager for Microsoft, and as a Vice President and Senior IT Systems Manager at Prudential Securities.
Allie Mellen
Forrester Research
Allie Mellen advises the Fortune 500 on security operations and nation-state threats, as well as the use of automation, machine learning, and AI in security tools. She is a featured speaker at many leading security conferences, including RSA Conference, Black Hat, HOPE, and others. She is often quoted in top business press outlets including NPR, The Financial Times, The Washington Post, The Wall Street Journal, CNN, and CNBC.
Anna Mercado Clark
Phillips Lytle LLP
Anna Mercado Clark, CIPP/E, CIPP/US, CIPM, FIP, is a partner at Phillips Lytle LLP and serves as the firm’s Chief Information Security Officer (CISO). She is Co-Leader of Phillips Lytle’s Technology Industry Team, which includes serving as Leader of the Data Privacy and Cybersecurity Team and e-Discovery Team, as well as Co-Leader of the Cryptocurrency and Blockchain Team. In these roles, Anna focuses on complex e-discovery and digital forensics, cybersecurity and data privacy, and complex commercial litigation. Anna routinely counsels sophisticated clients on data governance issues to address business needs while minimizing risks and complying with a rapidly evolving regulatory landscape and other legal obligations. Anna has been awarded the following ANAB-accredited credentials by the International Association of Privacy Professionals (IAPP): Certified Information Privacy Professional/Europe (CIPP/E); Certified Information Privacy Professional for the U.S. Private Sector (CIPP/US); and Certified Information Privacy Manager (CIPM). She has also been designated as a Fellow of Information Privacy (FIP) and is among a select group of individuals around the world who have received this designation. She is a member of Phillips Lytle’s Governing Committee, as well as its Diversity, Equity and Inclusion Steering Committee.
Preston Miller
Palo Alto Networks
Preston Miller, a Director at Palo Alto Networks’ Unit 42, is an accomplished cybersecurity professional with deep subject matter expertise in digital forensics and incident response, and he has experience leading high-level, complex investigations. He has co-authored several books on digital forensics, including “The Python Digital Forensic Cookbook,” which was named Digital Forensics Book of the Year by Forensic 4:cast. Preston joined Unit 42 in 2021 after six years at Stroz Friedberg, where he managed complex incident response and digital forensic matters for clients across a wide range of industries. He helped establish Stroz’s mobile device working group and provided expert testimony on forensic analysis in the cases he worked. As a graduate student, Preston worked with the West Virginia State Police Digital Forensics Unit, where he developed a digital evidence database and assisted analysts by inventorying evidence, preparing evidence for preservation and analysis, and maintaining case logs.
Michael OConnell
Aspire Technology Partners
Michael possesses more than 18 years of specialized experience in engineering, architecture, and design within the realm of network security. His current role as a Security Solutions Architect at Aspire's Cybersecurity practice underscores his pivotal role in crafting and implementing cutting-edge security measures. Michael's expertise is backed by a suite of certifications from industry leaders, including Cisco, ISC2, Palo Alto Networks, and Fortinet, marking him as a distinguished professional in his field. Apart from his contributions to security architecture and design, Michael is also renowned for his role as an instructor. His experience in teaching Cisco Security portfolio products has not only amplified his own knowledge but also allowed him to shape the next generation of cybersecurity experts.
Jennifer Pittman-Leeper
Axonius
Jennifer Pittman-Leeper, known professionally as JPL, brings nearly two decades of expertise as a strategic thought leader and policy developer in state government. She currently serves as the SLED Field CISO at Axonius, where she collaborates with state and local governments to address cybersecurity challenges and support the successful adoption of new technology initiatives. JPL is also a passionate advocate for expanding opportunities for women in tech and empowering the next generation of cyber heroes through partnerships with public, private, and nonprofit sectors. In her previous role as Cybersecurity Program Manager for the State of Arizona, JPL spearheaded collaboration among multiple state agencies to identify enterprise solutions and develop comprehensive state cybersecurity policies. She led the deployment and implementation of several enterprise-level cybersecurity tools and managed the statewide cybersecurity grant program, which provided critical security tools to local municipalities. JPL’s efforts also led to the creation of governance models that continue to guide the state's cybersecurity practices today.
Paula Plaza
Phillips Lytle LLP
Paula concentrates her practice on a broad range of litigation in the areas of antitrust, trademark, data security and privacy, e-discovery, white collar criminal defense and government investigations. She is also experienced in international arbitration proceedings and arbitral award enforcement as advocate and tribunal assistant. Prior to joining Phillips Lytle, she was a senior associate in the litigation group of the largest law firm in the Philippines.
In regards to her data privacy and cybersecurity work, Paula’s experience includes a table-top exercise on cyber attacks, cybersecurity and privacy. She advises on various legal aspects, such as data access agreements, privacy policies, cookie policies, website terms and conditions, acceptable use policies and compliance due diligence. Additionally, Paula has experience preparing productions in response to a subpoena from the Federal Trade Commission (FTC) and collaborating with the FTC in that capacity.
Paula obtained the ANSI-accredited Certified Information Privacy Professional/Europe (CIPP/E) credential from the International Association of Privacy Professionals, highlighting her expertise in European data protection laws, standards and practices. She completed a data governance and protection course at the National University of Singapore, a national security course at the National Defense College of the Philippines and a technology and innovation course at Fulbright University Vietnam as a fellow of the U.S. Department of State’s Young Southeast Asian Leaders Initiative. In 2023, Paula served as an American Bar Association Dispute Resolution Section Technology Fellow.
Q-Z
Brett Sagenich
Black Duck
Brett currently works as a Principal Sales Engineer at Black Duck, supporting the public sector business. He has a strong technical background spanning multiple industries. His career journey includes roles such as an Applications Developer at the American Cancer Society, a Senior Solutions Architect at Micro Focus and most recently, a Senior Sales Engineer at Synopsys. A Penn State University graduate, he has built a career around solving complex technical challenges and driving impactful results through innovative software solutions. Currently based in Atlanta, Georgia, he is always looking for ways to leverage technology to create value for his customers.
David Santeramo
Mainline Information Systems
David Santeramo, Network and Security Leader for Mainline Information Systems, combines more than two decades of security expertise and risk management securing some of the world’s most critical infrastructures. From technical research to building and implementing enterprise security programs, David has a track record of success with a wide variety of organizations. David is an active contributor in the security community and participates in a variety of industry groups. David has earned a number of vendor security certifications as well as holding the CISSP, CISA, CDPSE and CGEIT credentials.
Kenneth Sill
NYS DHSES
Ken has more than 25 years of experience in information technology and cybersecurity and is a Certified Information Systems Security Professional (CISSP). Ken has also earned a Certificate of Cloud Security Knowledge (CSA-CCSK) from Cloud Security Alliance, as well as multiple vendor-issued technical, and leadership certifications. He holds a master’s certificate in cybersecurity from Villanova University. He provides technology and security consulting to various state and local government agencies and higher education clients. Ken has experience creating and implementing risk assessment programs that center on identifying security gaps and leveraging best practices to reduce security risks.
Matt Singleton
CrowdStrike
Matt Singleton is an Executive Strategist at Crowdstrike, Professor of Cybersecurity at the University of Oklahoma and former chief information security officer for the State of Oklahoma where he completely rebuilt Oklahoma Cyber Command into a world-class program and launched the Oklahoma Information Sharing and Analysis Center. Previously, Matt served as chief operations officer for the state’s information services division, as well as state CIO for Education and in multiple leadership roles for the University of Oklahoma. Matt holds a master’s degree from Georgetown University in Applied Intelligence, specializing in Cyber Intelligence, Homeland Security, and Counterterrorism, a bachelor’s degree from OU and multiple industry certifications.
Tim Tipton
Arctiq
Tim Tipton is an accomplished cybersecurity leader, speaker, and author with deep expertise in threat intelligence, regulatory compliance, and security strategy. As the Principal Security Architect at Arctiq, Tim works at the intersection of business and cybersecurity, helping organizations translate complex security challenges into actionable business strategies. With a background spanning the Department of Defense, Fortune 500 enterprises, and federal compliance frameworks, he has built and led cybersecurity programs that balance technical effectiveness with business priorities. Tim is the author of “Psybersecurity,” a groundbreaking book that explores the psychological and sociological aspects of cybersecurity, from hacker profiling to executive communication. Throughout his career, Tim has spearheaded initiatives in risk management, incident response, regulatory compliance (NYDFS, SEC, CMMC, and more), and security operations, ensuring businesses remain resilient in an increasingly complex threat landscape. He is also a sought-after speaker, known for delivering engaging and thought-provoking sessions that bridge the gap between technical cybersecurity challenges and executive decision-making. Connect with Tim on LinkedIn or visit his website to explore his latest thought leadership, speaking engagements, and cybersecurity initiatives.
John Trest
Inspired eLearning | VIPRE Security Group
John Trest is responsible for the strategic product vision at Inspired eLearning, spearheading the development of their acclaimed Security Awareness and Compliance training content. A recognized expert in Security Awareness Training, John brings deep subject matter knowledge to the creation of courses, simulations, and learning content that not only inform but also influence lasting behavior change. With a keen focus on adult learning best practices and trends, and high-quality multimedia production, John has played a pivotal role in shaping Inspired’s award-winning training library. He has over two decades of experience in designing and delivering eLearning courses across diverse industries and subjects and has been a member of Inspired since 2009. John’s unwavering dedication lies in crafting top-notch training content that captivates learners while driving impactful outcomes.
Munish Walther-Puri
NYU Center for Global Affairs
Munish is a seasoned risk advisor and security strategist. He focuses on the nexus of cyber, tech, national security, and industrial policy – with experience spanning startups, local government, financial services, and think tanks – and cultivates a wide network across sectors and industries. Munish recently spoke with CSO Online about the impact of a new EO on SLTT cyber, with Fortune on the upcoming admin and last year, and with CNN on the day of the Crowdstrike outage. Munish was the first Director of Cyber Risk for the City of New York, and focuses on cyber risk and resilience in critical infrastructure, large scale/third party incidents, and strategic risks like supply chain and geopolitics. Most recently, he worked on cyber risk and supply chain risk in critical industries, specifically, energy, telecommunications, and semiconductors. Munish has done some forward-thinking work on the supply chain of GenAI and open source software supply chain security. He has built and led teams in global intelligence and analysis, dark web monitoring, municipal cyber risk, account management, product development, and business development.
Michele Warner
NYSTEC
Michele Warner is a senior principal consultant with extensive experience in IT privacy and security, eDiscovery, and quality assurance. Earlier in her career, she worked for Rational Retention, where she held positions as a quality assurance analyst testing eDiscovery and document-management software and as a client manager for the eDiscovery platform. Previously, Michele was a staff attorney with Boies, Schiller & Flexner, LLP. Since passing the bar, she has taken several HIPAA, healthcare, and privacy related continuing legal education classes. She is a member of the New York State Bar Association and the International Association of Privacy Professionals and has given several presentations focusing on privacy.
Nicholas Waugh
NYS Division of Homeland Security and Emergency Services Office of Counter Terrorism
Nick is an Information Technology and Cybersecurity specialist in the NYS Office of Counter Terrorism Critical Infrastructure Unit. Working with critical infrastructure owners and operators throughout New York State, Nick assists by evaluating their current IT, OT, and physical security posture, offering recommendations for improvement based on industry best practices. Nick maintains multiple cybersecurity certifications from organizations such as CompTIA and the SANS institute.
Jeff Wilson
NYSTEC
Jeff Wilson is a senior principal consultant who assists clients with information security and privacy, governance and strategy, and program management. Prior to joining NYSTEC, Jeff served as the CISO for Albany Medical Center. As director of information services, he oversaw comprehensive growth and redesign of the cybersecurity program. Jeff was also responsible for the PMO, BC/DR, and IT planning and budgeting for all medical center information technology investments. Previously, Jeff spent many years with the Albany Times Union newspaper and the Hearst Corporation in information technology, security, and compliance leadership positions. Jeff holds CISSP and CIPM certifications. He also served for four years as an adjunct professor at Mildred Elley College.
Emma Yeager
Gartner
Emma is a Senior Executive at Gartner, working with state and local government IT leaders throughout New York State to identify both business and technology requirements and to guide implementation and execution of Governor-directed and enterprise-wide strategic IT plans. A native New Yorker, Emma has spent 19 years empowering her clients and partners with the tools, insights, and resources to be successful. Emma received a B.S in Business from Wake Forest University.
Ryan Young
Vandis
Ryan Young is a seasoned technology expert with extensive experience in networking, security, and data center architecture. He serves as the Chief Technology Officer for Vandis Inc., where he is responsible for overseeing the company's technology vision, strategy, and development. Throughout his career, he has worked with customers of all sizes, from small and medium businesses to Fortune 50 Enterprises, to deploy and manage networking, security, and data center solutions. As a Chief Technology Officer, he has a unique ability to align business objectives with technology solutions that drive growth and success. He is passionate about using technology to drive business outcomes and is always looking for innovative ways to help customers solve their most pressing IT challenges. Ryan is an active member of the technology community and has participated in various conferences and events. He is committed to continuing his education and staying up to date with the latest trends and advancements in technology.
Rob Zeglen
NYSTEC
Rob Zeglen is NYSTEC’s Cybersecurity and Data Privacy practice leader where he is privileged to lead an outstanding team of cybersecurity and privacy professionals. Rob has more than 25 years of experience in information technology and cybersecurity. He began his career as a Systems Programmer at Knolls Atomic Power Laboratory and has worked at GE, Netscape, Sun Microsystems and Oracle before joining NYSTEC. His areas of specialty include identity and access management, performing risk assessments and helping clients improve their cybersecurity maturity. He holds an undergraduate and MS degree in Computer Science and is an ISC2 certified information security systems professional (CISSP) and ISC2 certified cloud security professional (CCSP).