Speakers CISO 360 UK 2025

Alan was formerly Group CISO at Babcock International, UK CSO at CSC and T-Systems, an Associate Partner at IBM Security, and served in the Royal Air Force for 21 years.

Barry Coatesworth, FCIIS, CISSP
Senior Security Government Advisor & Cybersecurity Leader
Barry Coatesworth is a globally recognized cybersecurity expert with a track record of shaping security strategies in financial services, public sector, and critical infrastructure. As a trusted advisor to governments and global enterprises, he has led security transformations, built high-performing teams, and developed regulatory frameworks that protect millions. Currently advising the UK’s national pension dashboard program, Barry plays a key role in securing the financial well-being of millions of UK citizens. A recipient of the IFSEC Global Influencer Award and a Lifetime Achievement Award at the Cyber OSPAs, he continues to mentor future cybersecurity leaders while speaking at major industry conferences.

The BMA’s mission is to look after doctors so that they can look after you.

The CIO is accountable for the development and delivery of the IT & Digital Strategy and capabilities which support the BMA Group in the fulfilment of its mission.

Danielle Sudai manages the Security Operations and Automation team at Deliveroo, managing and optimising all Organisational Cloud Assets and SaaS solutions’ security monitoring and identifying real-time threats and security breaches.

Danielle was also a Cloud Security Engineer. In her career, she co-engineered a CSPM internal solution, reviewed and governed different cloud services from a security perspective, Cloud IAM misconfigurations and KMS services automation.

Emili Evripidou, CCSP, CISM, CISSP, PMP, MSc

Emili is a seasoned risk management leader with 15 years of experience in financial services, payments, and energy. She specialises in Governance, Risk and Compliance helping organisations navigate complex security challenges. Currently a Senior Manager at Klarna Bank, she is driving AI innovation in risk assessment. Emili has held leadership roles at Accenture, Deloitte, EY, and Hellenic Bank, advising on major transformation projects. Passionate about diversity in security, she founded the Women in Security group with 3,000+ members. She is a recognised speaker at industry conferences and a contributor to leading cybersecurity publications.

Ivan Milenkovic is a Vice President for Cyber Risk Technology at Qualys, a pioneer and leading provider of disruptive cloud-based IT, security and compliance solutions designed to streamline and consolidate customers’ security and compliance solutions in a single platform. Ivan has over 20 years of experience aligning complex technology landscapes and fluctuating risks with business objectives. His professional background includes serving as Group CISO at a $4.8bn multi-national BPO, leading a cyber advisory business, and holding multiple advisory board positions. Ivan is a Certified Information Security Officer (S-CISO®) and instructor for the CISO2.0 course by SECO Institute. His ongoing pursuit of domain knowledge continues at Lancaster University, where he is a Cyber MBA candidate in the first NCSC-accredited programme in the UK.

Jake Bernardes is a seasoned CISO with extensive experience spanning technical consultancy, advisory roles, and executive leadership. Throughout his career, Jake has worked and lived across the globe, amassing deep insights into building and scaling security programs for growth-stage and enterprise organizations alike. A proven expert in developing robust security and IT functions, Jake equally specializes in driving go-to-market strategies for security-focused products, particularly for international companies expanding into the U.S. market. His holistic approach to cybersecurity enables businesses to align their security posture with operational and strategic goals, ensuring resilience in today’s evolving threat landscape. Jake’s dedication to innovation and his practical understanding of security challenges make him a trusted partner to companies navigating complex regulatory environments and seeking scalable security solutions. He was an early adopter of many GRC solutions and have served in multiple customer advisory boards prior to joining Anecdotes, where he continues to lead with a vision of empowering organizations through smarter, data-driven compliance management.

James started his career in Information Security in the late 1990’s working in the desktop anti-virus software field, progressing to email security in the early 2000’s where he joined Microsoft’s security team during the trustworthy computing era. James now works in the threat detection and investigation response marketplace holding the position of Regional Sales Manager at Exabeam. During his spare time, he is an avid volunteer at The National Museum of Computing located at Bletchley Park.

Jaya is a seasoned cybersecurity professional with 13 years of specialized experience in the financial sector and consulting services, including roles at Capital One, Wells Fargo, Deloitte, and Accenture. She possesses a unique blend of expertise across various cybersecurity domains, such as Cyber Assurance, Governance, Risk, and Compliance, Product Security, and Cloud Security.

In her current role at ICBC Standard Bank, Jaya leads the Purple Team and independently manages various cyber assurance projects.

She excels at leading cross-functional teams of varying sizes, optimizing security processes, minimizing cyber risk, and ensuring compliance with industry regulations.

Jonathan is an experienced lawyer based at Punter Southall Law in London working on compliance & technology.  He is also a Professor at Fordham Law School teaching a new post-graduate course on international compliance and a Director at L-EV8 working to increase cybersecurity skills on boards.

Jonathan’s professional practice includes advising organisations on risk and compliance across Europe.  This includes work on:

• Prevention (e.g. putting in place policies and procedures);
• Training (including state of the art video learning); and
• Cure (such as investigations and dealing with regulatory authorities).

Jonathan has handled legal matters in more than 60 countries.  He has handled more than 250 data breaches and has worked extensively with technology legislation including GDPR, NIS2, DORA & the EU AI Act.  He has conducted a wide range of investigations of various shapes and sizes, a request to appear before a UK Parliamentary enquiry and led clients through real and simulated bet-the-company situations.

Jonathan is also regarded as an acknowledged expert on AI and he currently serves on the New York State Bar Association’s AI Task Force looking at the impact of AI on law and regulation.  Jonathan also sits on the Law Society AI Group.

Jonathan is a co-author of LexisNexis’ definitive work on technology law, “Managing Risk: Technology & Communications”.  In addition to being a lawyer, Jonathan is a Fellow of The Chartered Institute of Marketing.  He has spoken at conferences in the US, Japan, Korea, Canada, China, Brazil, Singapore, Vietnam, Mexico, the Middle East & across Europe.

Jonathan qualified as a lawyer in the UK in 1991 and has focused on technology and risk and governance matters for more than 25 years.  Jonathan has been selected as one of the Thomson Reuters stand-out lawyers for 2024 – an honour bestowed on him every year since the survey began.  Thomson Reuters has listed Jonathan as the 6th most influential figure in risk, compliance and fintech in the UK.  Jonathan is listed as a Super Lawyer and has been listed in Legal Experts from 2002 to date.

A highly effective and resourceful business leader who thrives in SaaS businesses with complex and challenging environments with a proven record of dealing with business issues and addressing a company’s most difficult challenges.
A history of building and managing globally distributed and culturally diverse teams as well as collaborating with stakeholders across all areas of the business to deliver security and compliance objectives, digital transformation projects and strategic business goals.
Draws on an extensive background in operations and solution engineering and combines with broad security expertise to transform, change and future-proof very large-scale cloud infrastructures and SaaS business operations

Kev Eley is Vice President UKI at Exabeam. For nearly three decades he has delivered expert insight and solutions to the IT and software industry, dedicating 15 years specifically to cybersecurity and fraud detection. He has been personally involved in over 150 security information and event management (SIEM), User and Entity Behaviour Analytics (UEBA) and Security Analytics deployments, with a core focus on customer success and value realisation. 

Lorne is a computer scientist with a background in philosophy and a passion for cybersecurity. A recent Oxford graduate, she has been involved in the cybersecurity community since she was 11. Now a Product Associate at The Hacking Games, she explores the intersection of security, technology, and ethics.

Mark is Chief Information Security Officer for NHS England having joined from UKHSA (Test and Trace) where he was head of Cyber Assurance and Oversight. With over 30 years of experience in security, Mark has held a number of high profile roles in the public and private sectors. He has a strong business focus seeing security as a business enabler. At every opportunity Mark seeks to manage the needs of business against those of security and risk. Outside of work, Mark works to raise much needed funds for NSPCC Childline. He is a member and former Chair of the WhiteHat Ball Committee which to date has raised over £2M for the NSPCC. less

Martyn is Chief information security officer at dunnhumby, the world’s largest consumer data analytics organisation. He runs a large team and is an experienced cyber security practitioner, with over 20 years experience in the field, spanning big-4 consulting and running large teams. He advises multiple VCs and start ups, operates at board level and is seen as a strategic partner to the businesses that he advises. His technical background, coupled with his MBA for Durham, enables him to operate at the highest levels of business with a deep technical understanding of the security domain.

Nish is triple qualified in medicine, law and economics. He has started, run and advised businesses and governmental organisations at board-level across multiple industries and sectors, in the UK and abroad.  Nish originally trained and worked as a doctor for a number of years, both in the NHS and internationally, predominantly in the fields of acute medicine and intensive care. After cross-qualifying into law, he worked as a lawyer at a leading law firm, initially specialising in corporate and commercial work, with a focus on the health sector, before expanding into intellectual property. Subsequently, Nish left law establishing a health clinic in the UK and a health consultancy business abroad, and remains active in the latter. He later rejoined the law to project manage and provide specialist support in a multi-jurisdictional pharmaceutical litigation. Following its successful conclusion, he remained part-time in law, but pivoted towards the commercial aspects of law firms – leading on strategy, consultancy and innovation – while also maintaining his personal business interests, before having to give up the former due to expansion of the latter. With his varied educational and professional background, Nish has acquired a wealth of board-level experience of a diverse nature. Some of this has been obtained by serving on the Board of his own companies as Chair (or other Director in rotation), while other elements have been acquired through experience over many years of advising other companies’ or institutions’ boards as an appointed member, Non-Executive Director, secondee or specialist advisor, in both private and public sectors. Outside of formal work, Nish provides career advice and mentoring for university students as an Alumni Fellow, and volunteers for a national medical charity’s support helpline for patients and their carers.

Dr. Oliver Farnan has expertise in offensive security, advanced threats, and nation-state cyber policy. With a rich background in cybersecurity, Oliver has held diverse roles, including as an officer in the Royal Signals, a postdoctoral research position at Oxford University, and as the Global Head of Information Security for the INGO Oxfam. Holding a PhD in Cybersecurity, Oliver combines academic research with practical security operations, empowering organisations to effectively navigate emerging cyber threats.

Paul Colnan is the CISO at NewDay, financial services. Paul has 15 years of cyber security experience, including advising some of the world’s largest brands and he works with the board to enable secure and trusted commerce. He has an ‘ethical hacker’ background, which helps him tackle complex security issues, but he also cares about driving effective change through clear leadership and communication.  Paul has been a CISO in various sectors, including fintech, logistics, and manufacturing, and before joining NewDay he was CISO at ION, he was an Executive Director at JP Morgan Chase, where he held security roles in retail banking, M&A and cloud platform security teams. He was CISO of Revolut and Group CISO of Unipart Group. Paul likes aviation and is pursuing his private pilot’s licence in his spare time.

A successful SaaS GTM leader with proven history of delivering exceptionally high growth within international markets. I build and lead successful first and second line sales teams to deliver new market penetration & growth in multinational enterprise customers.
I believe that it is the team that makes the difference, and focus on inspirational leadership, teamwork and individual empowerment to cultivate high performance and growth. While providing servant leadership to optimise productivity, remove impediments and foster development.

Specialties: Leadership, GTM Strategy, New Business, New Market Penetration, Management, Organisational Capability, SaaS, Sales, Enterprise Software, IT Managed Services, GRC, Operational Resilience, Risk, DevOps, Governance, Compliance, Major Incident Response.

Dr Runli Guo, the Founder and CEO of AI Dionic. She is the driving force behind the organisation’s mission to deliver enterprise-grade AI agents with trust, security, and technological sophistication. As a former CISO with a PhD in artificial intelligence, Runli identified a pressing need for robust and reliable AI agents designed specifically for enterprise use. AI Dionic’s current focus is on the applications of Agentic AI in proactive reduction of enterprise risks including strategic risks, financial risks, operational risks, compliance and regulatory risks, tech and cyber risks as well as supply chain risks. Previously Runli has held leadership roles at FTSE 250 and Fortune 500 companies. She was the former CISO at Gett, IT Security Manager at AXA Health, and the Global Head of Digital Cybersecurity Initiatives at Marsh McLennan. Winner of the “Top 30 UK CISO” Award in 2022 by CSO Online.

Sudha is the founding member of Post quantum working group at FSISAC and specialises in financial sector Cryptography focused architectures such as digital assets, confidential compute and post quantum cryptography. Experienced visionary with a demonstrated history of building high performing teams that deliver mission-critical results for financial industry risk reduction. A people focused leader with ultimate focus on results in production through inspirational approaches. Ability to leverage strong understanding on complex business, technical and risk baselines and apply quantitative techniques to collaboratively create solutions to business problems. Deep expertise in building measurable and scalable ROI focused risk remediation strategies, operating models in financial space to prepare the industry and my current enterprise towards the next digital readiness.

Sandip Wadje is Managing Director and Global Head of Emerging Technology Risks at BNP Paribas since 2017 where he is focused on governance and oversight of emerging technology domains such as cloud, artificial intelligence, digital assets, and quantum. Sandip also leads group-wide oversight on all aspects of “outside-in” intelligence collection with a particular focus on external attack surface, geopolitical risks, social media liquidity risk, cyber-posture of corporate clients and emerging threats such as deep fakes or synthetic identities. Sandip also represents the bank at various external forums. Sandip has been a member of European Cybercrime Centres (EC3) Financial Services Advisory Group since September 2017 and is also co-chair of European Financial Roundtable (EFR) Cyber Experts Group since February 2020. EFR comprises of 25 leading Financial Institutions in the UK &  Europe and is represented by Chairman / CEO’s of the participating institutions.  He has over 24 years of experience in cybersecurity, operational risk, IT risk, internal controls, and compliance. Sandip has a hands on technology background and his previous stints include BT Global Services, RiskIQ, SecureWorks, KPMG, JPMorgan Chase, and Deloitte.

Dr Leivesley, sally@newrisk.com works on generic solutions to catastrophic risks to critical infrastructure across all disciplines and contributes practical applications to government policy and business. She has been a Panel adviser to for the British IET and CPNI supported publication for Cyber Security in the Built Environment.
As an Advisor to companies and governments on protection of people and infrastructure and strategies for security and business Dr Leivesley has worked across industry sectors gas and petrochemicals; power distribution; hazardous goods transportation by rail; underground and aboveground rail; underground mines; bulk shipping and banks.
As an international media commentator she has commentated for BBC World Service and other news outlets on extreme threats – Chinese spy balloon over USA nuclear missile site, uranium package at London Heathrow airport, cyber; terrorism; aviation losses; nuclear reactor explosions; Kabul 2021 evacuation; South China Sea; Polonium-210 and Novichok poisonings, Beslan siege; Iran; DPRK; USA Presidential security abroad; Covid-19, unexplained incidents such as MH370 and chemical incidents.

Dr Leivesley has held international scientific meetings on issues of catastrophic risk including risks of emerging nuclear weapons, infrastructure resilience including cyber, Covid-19 solutions and hazardous near-earth objects.
She was director of two disaster recovery units in Australia (weather and chemical incidents) and trained by British Home Office as Scientific Advisor holding a Cold War appointment as on all aspects of nuclear war.
PhD London University; Member of the Register of Security Engineers and Specialists RSES; International Association of Bomb Technicians and Investigator; Royal United Services Institute for Defence Studies, and the British Information Assurance Advisory Council Community.

Steve is an independent Senior Board Adviser helping clients navigate geopolitical risks, national security, and cybersecurity/resilience challenges. 

Steve served in the UK Government for over three decades in a variety of National Security roles countering transnational threats such as terrorism, espionage and proliferation.  In 2017, he was Deputy Director in the National Security Secretariat of the UK Cabinet Office, with responsibility for aspects of cybersecurity policy.  Subsequently, Steve served in a senior of senior executive roles at Credit Suisse including Global Head of Technology, Cyber and Third Party Risk, head of Operational Resilience and Group CISO.

Steve is a senior visiting research fellow at King’s College, London, and a member of the Dell Technologies Global Security Advisory Board.

Zofia is a Marketing & Operations Associate at The Hacking Games. She holds a Bachelor’s degree in Psychology with Criminology, as well as a Master’s in Mental Health. Her interest in cybersecurity was sparked when her family became victims of a cybercrime. Having previously worked towards accreditation as a behavioural psychotherapist, Zofia now focuses primarily on the human aspect of cybersecurity. Outside of her professional career, Zofia has an impressive athletic background as a former member of the Polish National Volleyball Team