SPEAKERS AT THE ENTERPRISE RISK / SECURITY MANAGEMENT – CHICAGO CONFERENCE
Henry Beverly, Deputy CIO, Clerk of the Circuit Court of Cook County
Henry Beverly was recruited to join the Clerk of the Circuit Court of Cook County, IL in 2015 for the opportunity to modernize data management and transform operations’ effectiveness. Currently, Henry oversees infrastructure transformation of the courts’ 24/7 mainframe and server Data Center operations for the 2nd largest unified court systems in the USA. It has more than 400 judges who serve over 5.2 million residents of Cook County. More than 1.2 Million cases are annually filed, producing 1.5 Billion images.
Henry is a former Military Police Station Commander and credits his military career with horning his skills as a Strategic Planner and Innovative Manager. Henry brings military precision and high speed execution to every challenge he takes on.
Henry’s former clients are some of the world’s largest technology and manufacturing leaders, including Intel, Verifone, Walmart, BIC, Black & Decker, Toyota, Magna International, Engineer System Industry, and JDA Software Group.
Henry is active in his community, promoting IT and Financial Empowerment as an educator and sponsor of the Chicago Federal Reserve Bank’s Money Smart Week Program. Henry also mentors underserved high school students through United Way Worldwide’s outreach program.
Mike Boucher, Sr. Director, Information Risk Management, FTD
Mike is an innovative and experienced leader in information security and compliance. He has experience working on complex global information security projects that require close cooperation between IT and business teams. Mike is able to appropriately align risk tolerance with business objectives and recommend the necessary security solutions.
Specialties: Identity and access management
Network security
ISO 27001 and 27002
Sarbanes Oxley
PCI-DSS
Leading and managing global teams
Information security governance
Disaster Recovery
IT Outsourcing
Mitch Christian, Sr. IT Security Administrator, American Hotel Register Co.
I have been described as passionate about security. I am constantly learning, applying and adapting to the ever changing Cyber Security world. That’s what I love about it. That’s what I do. Protection, detection, remediation, strategy and making a difference. Applying Confidentiality, Integrity and Availability to everything I do.
EXPERTISE: CISSP; Global Cyber Security Strategy,SSO, Cloud, Policy and Governance, Creating a Cyber Security Culture, Data Center Security and network segregation, Security Architecture, Cyber Security Enterprise Policy and Procedure, Incident response, Risk based analysis and communication to C Level, Raising Security awareness throughout an organization, Ransomware remediation. Disaster recovery and Business continuity, SAP Security Strategy and GRC. Vulnerability identification and management with a large network of resources both in the public and government sectors including threat intelligence through Infragard (FBI).
CYBER SECURITY EXECUTIVE: An entrepreneurial thought leader with a passion for security and a focus on Enterprise Wide Risk Management. A wide range of experience with national and global companies and and global privacy laws. Hands on experience with machine learning technologies as well as overall management of all Cyber Security operations.
Designed security architecture spanning both on site data centers as well as cloud and hybrid applications. A strong background in identifying risks and translating those risks to business terms to make optimal decisions on mitigation strategies.
A true defense in depth strategy leveraging Policy, People and Technology. Enabling business through secure compute practices with an in depth understanding of how to build a security framework around business goals. Third party management of pen testers, security engineers and contractors.
Experience with Checkpoint, Darktrace, Cylance, Proofpoint, SAP, ADFS, AzureAD, SQL, WIndows, VMWARE, Manage Engine, Project Management
Chris Hazelton, Director, Enterprise Marketing, Blackberry
A former industry analyst turned IT software marketer, Chris has been working in management and security for enterprise endpoints for over 10 years. Chris leads the product marketing team for BlackBerry Enterprise software and services that secure today’s Enterprise of Things for over 20,000 companies around the world. He also oversees Global Industry Analyst Relations as well as BlackBerry’s Competitive Intelligence. Prior to BlackBerry, Chris led the Enterprise Mobility research practice at 451 Research where he authored over 500 reports on emerging mobile software and services impacting IT. While at IDC, Chris was the worldwide smartphone analyst, researching emerging trends in the mobile and wireless space that impacted the design and deployment of smartphones in enterprise and consumer markets.
Jessica Hendon, Physical & Information Security Officer, Alpine Bank
I graduated from Northern Illinois University with a Bachelor of Science in Finance. Then I started in Banking as a Teller. After a year on the teller line I moved to Operations There I focused mostly on fraud prevention but worked at a small enough organization that I was able to learn many other jobs within the Deposit Operations area. While working in that role I went back to school and received my Masters of Business Administration from Northern Illinois University. Nine years ago I took over Physical Security for 15 bank branches while continuing to work with fraud prevention. In 2012 I earned my certification as a Certified Financial Services Security Professional from the Institute of Certified Bankers. In 2014 I moved into my current role of AVP Information and Physical Security overseeing Physical Security and Information Security for Alpine Bank. In this role I continue to oversee physical security for 15 bank branches. On the Information Security side I focus mostly on Vendor Management, Disaster Avoidance and Risk Assessments. I have been a member of the International Association of Financial Crimes Investigators for several years and also lead a local group of Fraud Investigators in the Rockford area, Northern Illinois Financial Crime Investigators. I am also an active member of FS-ISAC. Supporting my community is very important to me and I dedicate several hours a year doing that by volunteering for the Rockford Schools through Alignment Rockford.
Chris Hoesly, Manager, Sales Engineering, Varonis
Chris Hoesly is a manager of sales engineering for the Midwest and Heartland regions for Varonis. He’s been with the company for approximately 2 ½ years starting as the primary sales engineer for Wisconsin before moving into the manager role. Currently, his growing team resides in Indiana, Illinois, Kansas, Michigan, Missouri and Wisconsin. Prior to Varonis, he spent approximately 8 years in the financial services and logistics industries in various engineering and engineering management roles.
Brad Keller, Sr. Director, Third Party Strategy, Prevalent
Brad has been developing and leading risk management programs for more than 25 years. During this time Brad has developed and implemented vendor and business risk management programs at several financial institutions that have substantially improved risk management while also passing federal regulatory scrutiny.
Focusing on the risk of doing business online, he has implemented leading edge programs for the identification and mitigation of identity theft and online fraud. He has testified on behalf of the financial services industry at Congressional hearings on customer privacy issues; and, is a frequent member of financial industry led initiatives that address issues related to risk management, anti-phishing, online fraud, customer privacy, and authentication issues.
Today Brad is the Senior Director of Third-Party Practice Lead at Prevalent, where he focuses on the delivery of Prevalent’s third party risk management and assessment solutions, and the consulting to support those solutions. Prior to joining Prevalent, he was a Senior Vice President with The Santa Fe Group focusing on the management of the Shared Assessments Program. At Shared Assessments he led the development of Shared Assessments tools, training, and the risk management professional certification program.
Brad graduated with honors from the University of Missouri with a B.S. degree in Finance and received his J.D. with honors from St. Louis University School of Law. He is admitted to practice law in Oklahoma.
Justin Metallo, CISO, Beam Suntory
Collaborative and democratic Cyber Security Leader with 10+ years of experience working across C-suite disciplines to optimize effectiveness for protecting employer assets from cyber thieves, plaintiffs, or government regulators. Persuasive, self-motivated, and resourceful team builder with expertise managing processes, building dashboards, leading teams, generating leadership reports, and eliminating risks to drive productivity and ensure optimal, on-time project fulfillment.
Derek Milroy, Information Security, U.S. Cellular
Derek has been implementing security in corporate environments, as both an internal employee and a consultant, for five years. Although he has implemented firewalls, IDSs, and VPNs for various employers and clients he focuses heavily on securing Microsoft hosts and Domain structures. He has hardened hundreds of hosts in environments ranging from less than a dozen servers to enterprise environments with over 1000 servers and thousands of users. In conjunction with hardening he has also crafted and implemented standards, policies, and procedures to maintain the security of his employer’s / client’s environments.
Keith Rayle, Strategist, Fortinet
Over 20 years of governance and operational security experience. Executive level security consulting, to include program/portfolio creation and management. Provided board level reporting, security strategy creation and implementation, and global business security integrations. Acting CISO and Director of Security for large corporations. Led large multi-project teams at the program level, with oversight of multiple simultaneous and complex implementations of technical security projects. Designed and implemented most aspects of corporate security programs. Assisted large organizations in defining CISO responsibilities and requirements in order to provide alignment of security programs to business operations.
Consulting experience includes delivery of services to include large multi-project/multi-year programs. Provided executive advisory services in a variety of industries, to include retail, aerospace engineering, national/international banking, healthcare, manufacturing, logistics and transportation, federal/state organizations, and others. A wide range of regulatory experience includes PCI, SOX, FFIEC/FIDC, HIPAA, NERC CIP, and security framework knowledge extends to ISO/IEC 27001/27001, NIST, FISMA, OCTAVE and others.
Program level services for customers, including advisement to Fortune 100 executives (CIO and CISO), creation of corporate security programs and strategies, risk program operational definitions and implementation, and delivery of security/privacy framework implementations. Provided all aspects of creating and implementing multi-project technical programs, from requirements gathering to shifting systems into operational SDLC maintenance cycles. Created large risk management frameworks for global enterprises, to include complex operations such as mergers, acquisitions, and divestitures.
21-year military veteran as a nuclear weapons technician, threat officer, OH-58/AH-1/UH-60 helicopter pilot and maintenance operations officer.
Nirav Shah, Head of Information Risk Management, Takeda Pharmaceuticals
Nirav is the Head of Information Risk Management at Takeda Pharmaceuticals where he is responsible for developing and managing IT Risk Management, 3rd party Risk Management and Disaster Recovery programs globally.
Nirav has over 10 years of experience in developing and maturing overall risk management, vendor risk management, regulatory compliance programs, security policy and standards across Financial, retail and pharmaceutical industries. Nirav also has extensive expertise in developing governance, risk and compliance (GRC) framework to allow executives aggregate view of risks impacting their business.
Annur Sumar, Chief Technical Officer, MaeTech, Microsoft MVP, Former Vice President of IT D&P
Annur Sumar is a Microsoft Cloud and Datacenter MVP and technology consultant in the areas of Infrastructure Design, Enterprise Content Management, CRM, Microsoft Azure, System Center and Cloud Technologies. Annur is an industry recognized leader and independent speaker around strategic service automation, technology driven process improvements, IT service alignment, engineering best practices and operations management. All of which are targeted in his presentations to helping businesses with complex IT environments lower Total Cost of Ownership and raising Return On Investments.
Prior to joining a Microsoft Partner Consulting firm, Annur served as a Vice President of Technology for Duff & Phelps. One of the world’s leading independent financial advisory firms serving client needs in the areas of valuation, investment banking, transaction advice, and dispute consulting. During his tenure at Duff & Phelps, Annur worked closely with Microsoft product teams and case study managers in providing invaluable feedback around how businesses such as his were able to benefit from cloud technologies that were molded into business solutions. As a Microsoft MVP and industry expert, Annur brings 10 years of experience to work actively with other MVPs and Microsoft Partners to provide industry insight and strategic direction.