CISO New York schedule

•    How to communicate cyber risk in business language executives understand 
•    What is driving increased board accountability for cybersecurity oversight 
•    Insights into how leading CISOs influence strategic business decisions
Afzal Khan, Global Chief Information Security Officer, OPKO
Alan Halfenger, Chief Compliance Officer, ARCTARIS IMPACT INVESTORS
Tammy Klotz, Chief Information Security Officer, TRINESO
Bob Stasio, Deputy Chief Information Officer, & Chief Information Officer, MERCK + MERCK ANIMAL HEALTH
Gigi Schumm, Chief Revenue Officer SECURONIX

•    Exploring how digital transformation, AI, and third-party dependencies are redefining enterprise cyber risk
•    What CISOs need to know about the next generation of supply chain, vendor, and ecosystem threats
•    Insights into the technologies, strategies, and operating models helping organizations gain greater visibility and resilience across their extended enterprise
Reserved

•    Where is AI delivering measurable improvements in cyber defence today, and where is it still falling short?
•    How are threat actors operationalising AI, and how should defenders adapt?
•    What security capabilities will define high-performing organisations over the next three years?
•    How should CISOs balance investment between AI, people, and foundational security controls?
•    Which AI trends deserve executive attention, and which are simply hype?
Erica Pan, Chief Data Analytics Officer, AI & ML, Data Platform Product Delivery, JP MORGAN CHASE*
Ewa Kozlowska, Senior Vice President, Treasury & Trade Solutions, Global In Business Product Risk, CITI
Gopichand Mannav, Chief Data Architect, STATE OF CONNECTICUT 

•    How to lead executive decision-making during high-pressure incidents
•    What is expected from CISOs during ransomware or operational disruption
•    Insights into communication strategies during crisis response
Angela Silva, US Deputy Chief Information Security Officer, LLOYDS BANKING GROUP

•    How to build a resilient security culture across the organization
•    What is driving risky employee behavior in modern workplaces
•    Insight into fatigue, trust, and security adoption challenges
•    Exploring human decision-making during cyber incidents
•    How to create security ownership beyond the security team
Shawn Campbell, Chief Information Security Officer, OUTTEN & GOLDEN LLP

•    What is the single most important decision a leadership team makes in the first 24 hours
•    Has the threat of personal liability changed how security leaders operate?
•    How much should organizations rely on vendor-provided forensic findings?
•    Where do Security and Legal teams most commonly misalign during a crisis?
•    Will AI give defenders an advantage, or are attackers winning the race?
Corey Dennis, Chief Privacy Officer & Assistant General Counsel, LEGEND BIOTECH
Jim Rutt, Chief Information Officer, DANA FOUNDATION
Shivani Suresh, Assistant Vice President, Information Security Engineer, SYNCHRONY 
Stephen Garcia, Chief Information Security Officer, BreachRX

Identity security has long focused on the moment of login. But criminals have moved to what happens after authentication, using phishing-as-a-service kits and malware infections to harvest live sessions and tokens instead of passwords, giving them access that bypasses MFA entirely. For employees, contractors, and suppliers alike, this means the identity attack surface now extends well past credentials, into access that traditional controls were never built to see.

In this session, we’ll explore how SpyCloud’s insight into the criminal underground reveals this shift from credential theft to session hijacking, and share practical guidance on closing the exposure gap it creates, so you can advance your identity security program to match how criminals attack in 2026.
Geff Ambrose, Senior Solutions Engineer – Enterprise, SPYCLOUD

•    What separates successful AI agent initiatives from pilots that fail to scale
•    How to align AI agent development with business objectives, operational needs, and risk requirements
•    Insights into the organization's journey from concept to deployment, including key successes, setbacks, and takeaways
Alaa Moussawi, Chief Data Scientist, NEW YORK CITY COUNCIL

•    How to identify hidden risks introduced by generative AI tools
•    What is increasing organizational exposure through AI adoption
•    Insight into shadow AI and unmanaged integrations
•    Exploring how AI changes data access patterns
•    How to monitor and govern expanding AI ecosystems
Randy Rose, Vice President, Security Operations & Intelligence, CENTER FOR INTERNET SECURITY 
Steven Papadopoulos, Director of Information Security, GELLER
Carl Eyler, Chief Information Security Officer, USBC
Vyshak Bellur, Senior Software Engineer, JPMORGAN CHASE
Arun Kumar Pandey, Senior Vice President, LAZARD ASSET MANAGEMENT
Moderator: Reserved Rocket Software 

•    Navigating the tension between rapid innovation (AI, digital transformation) and cyber risk management
•    How CISOs and business leaders align on priorities without stifling progress
•    AI governance vs innovation: how organisations can safely adopt transformative technologies
•    Delivering change at scale: when security becomes a critical enabler of transformation
•    Why tension between security and innovation is necessary, and how to manage it effectively
Reserved

•    How to identify emerging AI-driven attack techniques 
•    What is changing in phishing, fraud, and social engineering through AI 
•    Insight into attacker adoption of automation and synthetic content
•    Quantum + AI: How will these technologies transform cyber risk over the next decade?
Afzal Khan, Global Chief Information Security Officer, OPKO
Ellis Wong, Chief Information Security Officer, JST DIGITAL  
Sharad Rai, Vice President, Cyber Security Product Management, STATE STREET 
Senior Representative, THREATLOCKER

•    Translating technical findings into business risk
•    Where GRC adds value vs creates friction
•    Balancing compliance with real risk reduction
•    What boards want vs what security reports deliver
Prasant Tangirala, Chief Information Security Officer, CITY OF STAMFORD
Toyin Makinde, Senior Manager Information Security, THE COCA-COLA COMPANY

•    How to govern enterprise copilots and AI assistants
•    What is creating data leakage concerns in AI productivity tools
•    Insight into security gaps in embedded AI workflows
•    Exploring access control and permissions within AI ecosystems
John Decker, Chief Technology Officer, TRIAN PARTNERS
Harish Vundavalli, Senior Information Technology Architect, STRATEGIC EDUCATION, INC. 
John Raven, Director of AI, MICHAEL KORS
Senior Representative, SENTRA

•    Identifying insider risk without creating surveillance culture
•    Key drivers of insider threats across users and contractors
•    Impact of hybrid work, burnout, and AI on insider risk
•    Building insider risk programs without harming culture
Dr Sharada Iyer, Chief Group Risk Executive, Global Head of Risk, FLYWIRE

•    Approaches to building a risk-based vulnerability management program and prioritizing vulnerabilities based on business risk. 
•    Insights into balancing security priorities with engineering capacity and reducing vulnerability fatigue. 
•    Successes, challenges, and strategies for gaining stakeholder buy-in and measuring the effectiveness of vulnerability management. management.
Nick Leghorn, Chief Information Security Officer, SIEMENS

•    Measuring outcomes from security investments
•    Drivers of security platform consolidation
•    Lessons from reducing tool and vendor overlap
•    Balancing best-of-breed vs platform approaches
•    Metrics that demonstrate security effectiveness

Reserved for StackTitan 

•    Drivers of identity-based breaches in modern enterprises
•    Managing privileged access at scale
•    Rising challenge of machine identities and AI agents
•    Lessons learned from Zero Trust implementations
•    Prioritizing identity investments under budget constraints

•    Exploring approaches to improving AI observability and monitoring model behaviour. 
•    Insights into enabling traceability across AI systems, data, and decision-making. 
•    Strategies for verifying AI outputs, managing risk, and building trust in AI.
Joseph Zhou, Chief Information Security Officer (EMEA, Americas), SHEIN
Praveen Nallasamy, Director, Global Head of Product Security, BLACKROCK*
Senior Representative, Fleak.ai

•    What AI-powered deception means for executive trust, business operations, and cyber risk management
•    How to prepare for deepfake-driven fraud, executive impersonation, and increasingly sophisticated social engineering attacks
•    Insights into the controls, processes, and cultural shifts organizations are adopting to verify what is real in an AI-driven world
Liron Golan, Group Chief Information Security Officer, LASER DIGITAL (Nomura Group)

•    How to structure immediate response actions during a crisis
•    What is most critical during the early hours of incident response
•    Insight into executive decision-making under uncertainty
•    How to reduce chaos during high-pressure situations
Keith Bettencourt, Director, Member Supervision Specialist Program, FINRA 
Catherine Burns, Senior Principle Intelligence Specialist, FINRA

•    How to identify and mentor future security leaders
•    What is required for long-term leadership development
•    Insight into skill gaps facing emerging CISO candidates
•    How AI is reshaping the skills and leadership capabilities required of the next generation of CISOs.
•    Exploring how organizations build leadership pipelines
•    How to create sustainable succession strategies
Dr Sharada Iyer, Chief Group Risk Executive, Global Head of Risk, FLYWIRE*
Jigar Shah, Chief Information Security Officer, MEDUSIND
River Nygryn, Chief Information Security Officer, COMMAND RIDGE VIRTUAL ASSET AUTHORITY
Juan Ramon Zarco, Chief Technology Officer, WELLCASE DUAL ACCESS OPEN
Allah Rakha Sheikh, Chief Information Officer, MADDISON MUTUAL