Speakers
CSO 360 Congress Amsterdam

Peter was appointed by the Civil Aviation Authority (CAA) as its first Director of Aviation Security in May 2013. Peter led the transfer of the Aviation Security function (and some 90 posts) from the Department for Transport (DfT) to the CAA, which took place as planned on 1^st April 2014. Peter now leads the Aviation Security Directorate within the CAA, as a member of the CAA Executive Committee, developing its regulation and compliance roles within the context of the CAA’s broader aviation regulation responsibilities. A key aim is to evolve aviation security regulation into a process that is more performance and risk based.  Before joining the CAA, Peter served for 5 years as the Director Security & Business Continuity for the Home Office. Prior to joining the Home Office, Peter had served for 32 years in the Royal Air Force, from which he retired as an Air Commodore in April 2007.  Peter’s last appointment as Air Officer Force Protection combined the roles of Commandant General of the Royal Air Force Regiment and Air Officer RAF Police (formerly Provost Marshal RAF).

Victoria is an experienced cybersecurity professional with a demonstrated history of working in the internet industry and international law enforcement. Published academic author and futurist with a strong research background. Skilled in Crisis Management and Response, Negotiation, Intelligence Analysis, Strategy Delivery, and Coaching.

Andy Williams is VP Business Development and Quality Assurance for Safehotels, an international hotel security certification company based in Sweden. Andy has over 20 years of international safety, security and crisis management expertise within hotel, real estate development and travel security risk management fields. On the Association and volunteer leadership front, Andy has served as a Regional Vice President for ASIS International, the technical review committee for international security standard PSC1; advised the UK government on counter terrorism and public safety initiatives, presented to the EU Council and most recently published a case study paper on crisis management for United Nations UNISDR.

Jeroen Meijer serves as a Senior Partner and leads Control Risks’ business in the Benelux (Belgium, The Netherlands and Luxemburg), with offices in Amsterdam and Brussels. With his team, he is responsible for advising Control Risks’ clients on issues related to risk management, security management, crisis management, business continuity and crisis communications. His main competencies and experience consist of developing, implementing and maintaining global risk management, crisis management and crisis communications structures for both corporate and government clients. This includes the design of risk and crisis management strategy and policy, the development of plans, procedures and teams and the execution of scenario-based crisis exercises and training, aimed at developing both individual and team knowledge and skills. In the case of an actual crisis, Jeroen advises and supports clients throughout the different steps of managing the incident. He is also the Americas representative on Control Risks’ global maritime security team. Prior to Control Risks, Jeroen was a communications consultant in The Netherlands, coaching and training leaders in business and government in effective communication with stakeholders through presentation and media training. During his tenure he specialized in reputation management and crisis communication, benefitting from his operational crisis management experience and his expertise in strategic crisis management. In this capacity Jeroen consulted with clients from both the profit and not-for-profit sectors. The first 18 years of his career, Jeroen served as an officer in the Royal Netherlands Navy in numerous management positions in various regions of the world. This career laid the foundations for his extensive operational crisis management knowledge. Jeroen still serves as a lieutenant commander in the Royal Netherlands Navy Reserve, specializing in merchant marine operations in risk areas. Jeroen holds a degree in mathematics from the Royal Netherlands Navy Academy/Delft University of Technology with a specialization in system reliability engineering/integrated logistic support and an honor Master of Arts degree in corporate and crisis communication from the Erasmus University of Rotterdam. He is fluent in both Dutch and English and has a good working knowledge of French and German.

Prior to his current role with Uber, Richard built and led the EMEA Threat Operations team. Other responsibilities include partnering with legal, policy, communications and operations teams to manage complex security threats in conjunction with government and law enforcement partners.Investigations – Technical investigation and attribution of threats/abuse to individuals; Research – Industry leading information gathering, threat analysis and threat assessment; Law Enforcement Outreach – Proactive relationship building between the business and law enforcement; Law Enforcement Response Team (LERT) – Responding to law enforcement requests in a timely manner

An experienced information security leader with over 19 years of professional experience in information and cyber security, IT, risk management, privacy and data compliance. Derek has recently joined TalkTalk as their Chief Security Officer, where he is building and leading the cyber security strategy and team to protect TalkTalk’s critical infrastructure, assets, and customer data. Previously, he was the Global Head of Security and Risk Management (CISO) at Electronic Arts (EA) where he led a large, global team to protect EA’s intellectual property and sensitive data. Prior to EA, Derek spent over 6 years at Deloitte & Touche where he managed and performed a multitude of information security and risk management engagements for several global Fortune 500 companies across various industries including financial services, technology, consumer business, manufacturing, and public sector. His primary areas of expertise include developing and leading tactical and strategic security strategies, building and maturing security teams, and ensuring executive governance around security to manage risks appropriately. Derek has also published information security articles and white papers and has been a presenter/panellist at CISO conferences. Derek holds a Bachelor Degree in Computer Science from the California Polytechnic State University, San Luis Obispo CA.

Richard is a corporate security specialist with a broad experience in Physical and IT security, Investigations and the development of security infrastructure in the widest sense. He is a true security evangelist, always connecting the field with the business, delivering value added services.

A fraud prevention and discovery professional, with more than 15 years of proven experience, Alexander is a Certified Fraud Examiner (since 2007). He has been a CISA since 2009. With hands-on experience from both Law Enforcement, Big 4 and Corporate, with in-country, regional and Group roles, he has good insight into CIS/FSU, Central Asia and Eastern Europe. A proven track record in establishing Investigation teams and uncovering material losses.

The first 16 years of Graham’s career were spent in the Diplomatic Service engaged in technical security for the Foreign and Commonwealth Office.  He then moved to the financial services sector where he has held senior security posts with Abbey National, Standard Chartered, Barclays, RBS, HBOS and ING.  Through these roles he has developed a holistic approach to risk management and security, holding responsibility for information risk, IT security, physical security, fraud, money laundering, business continuity planning, compliance, crisis management and intelligence.  He has also worked outside of the banking industry as the Group Head of Information Risk for Centrica. He currently holds the position of Director of Data Security at Nationwide Building Society. Graham has a master’s degree in Information Security from Royal Holloway.

Paul is the Group CISO for Unipart Group of Companies. With nine years’ experience in the cyber security world, including consulting to some of the world’s biggest brands, he engages with the business at board level to enable trusted secure commerce. With an ‘ethical hacker’ background, he is able to address complex security challenges but is equally passionate about driving effective change through unambiguous leadership and communication. Paul is a regular speaker at various industry conferences such as the e-Crime Congress, PCI London and the GBI CISO Summit. When he isn’t keeping Unipart safe, you can find him tinkering with code and figuring out how to inspire the next generation of cyber security professionals. Paul is proud to be shortlisted as CISO of the Year 2017. You can reach him on LinkedIn or on Twitter at @pjh_22.

Sally advises companies and governments on catastrophic risk where losses to companies and governments may involve critical functions essential for operations and reputation. She runs exercises to stress test critical function failures and resilience capability. Dr. Leivesley is known for her appearances on aviation terror attacks, ISIS, Al Qaeda, Al Shabaab and other international terrorism, cyber breaches, CNI protection and government policy on the BBC World Service, ITV This Morning and other UK based media and European, Middle East and Australian media. She raised the forensic importance of the risk of cyber hijacking of flight MH370 which was the subject of a Discovery Channel documentary and has been a commentator on the risks relevant to Donald Trump economic, terror and nuclear influences during his Presidential campaign and on his election. Dr Leivesley works in conjunction with The Exercise Group7 (TEG7) a London based group of companies that specialise in resilience operations for cyber-attacks, international terrorism and nation state threats and solutions for business and government-critical infrastructure.  The focus is on testing through exercises, assurance and pen tests using an integrated approach to all hazards including social factors. (www.Teg7.co.uk) In the UK she has been a member of the technical committee for the first IET (formerly IEE) guidance document on Resilience and Cyber Security of Technology in the Built Environment which was supported by the Centre for the Protection of National Infrastructure. She is also a member of the British Register for Security Engineers and Specialists established to advise at a strategic level on terrorist and other extreme threats to critical infrastructure. She interfaces with a USA company to extend exercising for aviation and energy industries.  Dr Leivesley originally trained as a Scientific Advisor with the British Home Office. She is a specialist in CBRN.

Steve joined The John Lewis Partnership in April 2016 and is responsible for both the Information Security and Data Privacy, both of these enable the John Lewis Partnership to protect the personal data of our customers and partners, to be compliant with data protection laws and regulations, and to provide trust and transparency – resulting in greater brand experiences across our digital, mobile and ecommerce channels.

Steve is passionate about big data and all things digital. With more than 20 years’ experience, designing, developing, managing and delivering transformational data, governance, privacy and security programmes, Steve’s vast experience as a pragmatic and charismatic leader, ideally places him as a ‘trusted advisor’ at board level on all privacy and security related matters. Steve is also a published author, a non-executive director and is regularly invited to speak at industry events, trade associations and thought leadership working groups, working towards continually finding new ways to increase trust and transparency in respect of consumer services, business functions and product vendors.

Steve strongly believes that governance, cyber security and privacy are all inextricably linked as they share common objectives and principles, and therefore, require satisfactory safeguards and assurances. From a business perspective, this can be achieved by building ‘data trust and assurance’ programmes based on the fundamental principles of transparency, accountability, protection, integrity, confidentially and availability, accompanied by clear policies and delivered through comprehensive training, integrated procedures and a robust compliance regime.

Having once served as a CISO, and held senior roles at, Unilever, Deloitte, PwC, Siemens and Capita, Steve has a full appreciation of what is required to get the job done in a cost effective, pragmatic and timely fashion with a natural ability to lead from the front, to coach others and to take responsibility consistently, courageously and with integrity.

Maitham is part of the executive management team that joined to establish the first cloud & managed service provider in Oman. Maitham has more than ten years of professional experience in cyber security.

Suzanne Oyen has a degree in Social Sciences and obtained a Master in Criminology with a thesis on Public Private Cooperation in Corporate Security matters. After graduation she joined G4S Cash Services where she had to deal with a series of brutal organized crime attacks on Cash in Transit and had to coordinate both the prevention and the response with the police and security services. In 1999, she became the first Corporate Security Manager of Proximus, Belgium’s premier Mobile Telecom Operator. In 2002, she was asked to set up the Mobbing Department at Belgacom (today Proximus), the main Telecom Operator in Belgium. 14 years ago, she was recruited by the Society for Worldwide Interbank Financial Telecommunication (SWIFT) to Head the EU operations of the Corporate Security Department. Since 2006 she has been appointed as Head of Global Corporate Security with a worldwide responsibility. She regularly participates as speaker at security conferences to share experiences and expertise in the security sector and promotes public private collaboration.

Xander Heemskerk is the Director Product Security – Personal Health in the Product and Services Security Office (PSSO) at Philips. In this role he drives the Product Security programs and initiatives for Personal Health and Population Health businesses worldwide. IOT, Mobile Apps and Big data are crucial parts of the Products and Services delivered by Personal Health and Population Health Management.

Prior to Philips Xander was the CSO at TomTom and the CISO at Royal Vopak and has been responsible for Corporate Security, Information Security, Information Risk Management and Product Security strategies, tactics and operations.

Xander has over 25 years’ of experience in almost all aspects of IT ranging from Consulting, Security, Architecture, Performance tuning, Development, Coding, Testing and Operations in different roles and positions at Oracle, Orient Overseas Container Lines (OOCL) ltd, Hong Kong Government, Everett (now PWC), Ricoh and at multiple customers in a consulting role. For Oracle University he provided training classes on Architecture, Security, Performance, High Availability and Identity Management for customers and internal staff.

Xander holds a bachelor degree in Informatics from The Hague University of applied sciences, is a Certified Information System Security Professional (CISSP) since 2002 and has Certified Cloud Security Knowledge (CCSK) since 2013.

Tim is responsible for standing up an intelligence service to support McDonald’s international lead markets. He previously ran a corporate intelligence boutique in London, providing business & strategic intelligence and political & security risk services to a broad set of multinationals. He has extensive experience building in-house and supplier analyst teams, managing complex projects in high-risk jurisdictions, cultivating human sources, developing business and bringing new products to market.

(OSAC) Aviation Security Working Group (ASWG) and on the Executive Board of the OSAC Latin America Regional Council (LARC). Before American Airlines, Ned spent four years at Royal Dutch Shell, where, as the Americas Security Analyst, he was responsible for assessing security and political risks to Shell’s operations throughout the Western Hemisphere. Prior to Shell, Ned spent over two years at Virtual Defense and Development International, Inc. (VDI), where he worked as the principle Security and Intelligence Analyst for the Inter-American Development Bank (IDB). In this capacity, he was in charge of risk analysis covering 26 countries in Latin America and the Caribbean. Ned has also worked in the United States Congress, as an aide to Rep. Ileana Ros-Lehtinen (R-FL), former Chairwoman of the House Foreign Affairs Committee, and at Morgan Stanley. His graduate coursework focused on both European energy security and terrorism, and his thesis analyzed the threat posed by terrorist radicalization among Muslim immigrants in Europe. Ned has studied, worked, and lived in both Europe and Latin America; he has traveled to over 75 countries. Ned received his B.A. in Political Science from McGill University in Montreal, Canada, and his M.A. in International Affairs from American University in Washington, DC. He also studied at the Universidad de Salamanca in Salamanca, Spain. He is fluent in Spanish and proficient in French. Ned was born and raised in New York City.

Robin joined the UK Police in 1990 and undertook a wide variety of roles that encompassed patrol, investigation, riot control and covert operations. As a Fulbright Scholar, Robin attended the FBI academy researching Less Lethal technologies.  Subsequently promoted to the rank of Superintendent Robin oversaw an Operations & Major Incident Centre. As a designated critical incident & firearms commander he gained an in-depth knowledge of and expertise in managing crises. In 2005 Robin was seconded to the Foreign & Commonwealth Office with responsibility for all aspects of diplomatic security in the Balkans.   Robin then moved into commercial security in 2008 first with Fidelity International and then AonHewitt. In 2010 Robin joined GE’s global operations team as regional director of security responsible for delivering physical security, investigation and crisis management across multiple business sectors. Robin is now the CEO of Aldbury International a security and crisis management consultancy that brings this commercial knowledge, expertise and hands-on experience to a wide range of organisations.

Tom Brabers CPP, CFE represents ASIS Benelux in his capacity as chapter secretary. He is the former Head of Global Security of Geodis Freight Forwarding and now works as an independent consultant in the field of strategic risk consultancy and knowledge brokerage. He has a fascination for the Extended Enterprise and organizational design.

Elizabeth Lawler is Vice President, DevOps Security at CyberArk. CyberArk, the market leader in Privileged Account Security, secures secrets and machine identities in highly dynamic DevOps environments at scale. Lawler is responsible for CyberArk’s DevOps business strategy and execution.
Prior to CyberArk, Lawler was CEO and co-founder of Conjur, a DevOps security company acquired by CyberArk in May 2017. Lawler has over 20 years of experience working in highly regulated and sensitive data environments. Prior to founding Conjur, Elizabeth was Chief Data Officer of Generation Health and held a leadership position in research at the Department of Veterans Affairs. She has been a programmer herself and is constantly working to help organizations move to a true DevSecOps delivery model that supports greater business agility.
Elizabeth is a member of the MassTLC Security Advisory Board.

Alex Wilson is Security Solution Architect at CyberArk Software Ltd. With over 5 years’ experience in Privileged Account Security, Alex is one of the leading experts in understanding the requirements and drivers for managing privileged access security within an organisation. Alex has led some of the largest design and implementation programs of privileged account security with companies across all sectors, many of which are in the Fortune 100. Leveraging this experience, Alex now focuses on privileged account security best practice with organizations embracing Cloud and DevOps.