Financial Services Summit at Black Hat USA

Head of Security Analytics

ING

Eduardo Barbaro is a seasoned, results-driven leader with extensive experience in the data science and artificial intelligence fields. As the Head of Security Analytics at ING, he leads the strategic direction and execution of high-quality analytics and data strategy. His expertise in AI, data science, and analytics has been honed through a series of progressive leadership roles, including serving as the AI Practice Leader for IBM Benelux and Principal Data Scientist for IBM Europe, where he played a key role in defining the AI strategy at the EU level and developing industry-aligned AI-powered solutions. He has a proven track record of delivering value through data-driven insights, with experience in building and validating AI models and consulting for clients at IBM, Mobiquity and Easytobook. His academic background includes a Ph.D. in Atmospheric Physics from Wageningen University, the Netherlands, and several well-cited papers in top-tier international scientific journals. He has received a number of honours and awards in the US, Europe, and Brazil. He is certified as a Distinguished Data Scientist by the OpenGroup, and as of 2022, he acts as a board member for the Data Scientist profession certification. In 2023, he became a visiting researcher at the Cybersecurity Lab of the Faculty of Technology, Policy and Management at Delft University.

Global Head of Security Research

Daniel Cuthbert has been on a relentless quest to build software so secure that even he might struggle to hack it (but don't count on it). Self-diagnosed with an obsession for bugs and offensive operations, he's turned his penchant for poking holes into a crusade for making vendors shape up. By channeling his mischief into the OWASP ASVS and other cunning initiatives, he's been plotting to save the software world—one responsible vendor at a time.

Chief Information Security Officer

Scotiabank US

Andrew Jaquith is the Chief Information Security Officer for Scotiabank US. Andrew's 25-year career as a CISO, CTO, executive, and cyber practitioner spans startups (with two successful exits), Fortune 100s, and global financial services firms. He founded Markerbench, a boutique consultancy specializing in cybersecurity. Through 2023, he served as the CISO of Covington & Burling LLP. He has served as a Managing Director in technology risk and cybersecurity for Goldman Sachs and JP Morgan Chase, respectively. He serves as a Board Advisor to SecurityScorecard, as an Advisor to Anetac, and as a member of the Technical Advisory Board of Panaseer. Andrew graduated from Yale University.

Prior to Scotiabank, Andrew was most recently the CISO of Covington & Burling LLP, a $1.5B AMLAW 50 firm with 14 offices in the US, EMEA, Asia Pacific and China. At Covington, Andrew was responsible for cyber and physical security globally. During his tenure, his focus areas included shrinking the firm's external perimeter, implementing new security tools, expanding and upskilling the security team, de-risking Active Directory, shifting security services to the cloud, and speeding up the firm's IT operating tempo to reduce risk.

Andrew's prior experience includes serving as the CISO of QOMPLX, Inc, a cyber-security startup focused on critical enterprise infrastructure. He was the global Cyber Security Operational Risk Officer for JP Morgan Chase, and was a Managing Director for Technology Risk Measurement and Analytics at Goldman Sachs. Andy's earlier roles include as Chief Technology Officer (CTO) of the managed security services provider SilverSky. He has held senior security analyst roles at Forrester Research and Yankee Group, and was a co-founder of @stake, a pioneering cyber-security consultancy. Andrew wrote the best-selling and definitive book on security metrics ("Security Metrics: Replacing Fear, Uncertainty and Doubt"), used by a generation of risk professionals to connect security to the corner office.

Andrew graduated from Yale University with a BA in Economics and Political Science. He lives with his family in New York.

Security Engineering at a Canadian Financial Institution

Vicky Laurens is a cybersecurity professional with over two decades of experience spanning diverse industries. For more than eleven years, she has been dedicated to protecting global financial institutions from various information security risks. Vicky is a sought-after speaker at cybersecurity and industry conferences where she shares her expertise on information security and effective leadership strategies. She is a passionate leader who is focused on strategizing, implementing, and deploying new and emerging detective and preventative technologies that keep global financial institutions safe.

CISO, Barclays Asia, Middle East & Africa

A technology and information security leader with over 25 years of experience delivering and supporting business solutions for global investment banks. In my role as Chief Information Security Officer for Barclays Asia, Middle East & Africa, I am accountable for cyber and information security risk management across a diverse portfolio of locations and businesses. My personal focus area for 2025 is to develop more engaging techniques to educate our employees on cyber security awareness topics. I have in-depth knowledge of the Capital Markets and Investment Banking domain, and a strong delivery record in the areas of technology service management, information security and technology risk management. Having been based in Singapore for the past 19 years, I have become intimate with the regulatory landscape across Asian markets.

Founder & CEO

Cartomancy Labs

Allison Miller is the Founder and CEO of Cartomancy Labs, an advisory firm that guides teams in innovating and solving problems anywhere that people, money, and technology connect. Prior to establishing Cartomancy Labs, Allison was the CISO and VP of Trust at Reddit where she led the cybersecurity, privacy, risk, and safety teams.

With decades of experience at the intersection of cybersecurity, fraud, and abuse, Allison is known for implementing real-time risk prevention and detection systems running at internet-scale, with a proven track record of building and protecting customer-facing platforms and services (both B2C and B2B). She has also led major initiatives to engineer the defenses for core payment and e-commerce systems and technologies, having held technical and leadership roles at Bank of America, Google, Electronic Arts, Tagged/MeetMe, PayPal/eBay, and Visa International. Miller speaks internationally on security, fraud and risk, sits on the Faculty at IANS, and has been recognized by SC Media as a Power Player in IT Security.

Director - Information Security

BILL

Gourav Nagar is the Director of Information Security at BILL Holdings Inc., where he leads Information security engineering and security operations team. With over a decade of experience in cybersecurity, Gourav has built robust security programs across various domains, including security engineering, incident response, threat detection, cloud security, and digital forensics. His career includes key roles at industry leaders such as Uber, Apple, and EY. Gourav holds a Master of Science in Management Information Systems from Texas A&M University and multiple industry certifications, including CISSP, CISM, CHFI, and GIAC Certified Forensic Analyst (GCFA).

Security Transformation Expert

Becky Pinkard is a recipient of the 2022 Global Cyber Security Leadership Award - Editor's Choice (Global), previously appointed to the ‘100 Global CISOs for 2020’ list and was awarded ‘CISO of the Year, 2020’ by SC Awards Europe. Becky is a renowned practitioner and commentator on the information security sector who has been working in information technology and security since 1996.

A security transformation expert, Becky’s background and experience to date has provided her with broad information security expertise, coupled with global team management and in-depth, technical capabilities around cyber security operations.

Becky is an active advocate for promoting diversity and inclusion in business and was a co-founder of the ‘We Empower Diversity in Start-ups’ (WEDS) group. She has been a CyLon mentor since 2017, providing cyber security, operations and client success guidance to entrepreneurs. She also co-hosted a monthly podcast, Cyber Warrior Princess, focused on cyber security related commentary.

Becky was a SANS Certified Instructor for over a decade and served as a GIAC Certified Intrusion Analyst advisory board member and on the Strategic Advisory Council for the Center of Internet Security. She co-authored "Nmap in the Enterprise" and "Intrusion Prevention and Active Response, Deploying Network and Host IPS". Becky has shared her expertise in numerous publications, both written and in live interviews all over the world, including: The Wall Street Journal, Forbes, ChannelPost, The Telegraph, The New York Times, BBC News, Channel 4 News, and more.

Chief Information Security Officer

Affirm

Shyama Rose is the Chief Information Security Officer at Affirm, leading both Information Security and IT to ensure security is an enabler of innovation. A hands-on leader with a hacker’s mindset, she builds strategies that protect Affirm’s customers and financial systems while scaling with the speed of fintech. She believes security should be deeply embedded, and drive business growth rather than hinder it.

With over 20 years in cybersecurity, Shyama has led security programs across financial markets, media, telecommunications, and entertainment. Before joining Affirm, she held leadership roles at Nasdaq, CBS, and Live Nation/Ticketmaster, securing critical infrastructure, global trading platforms, and large-scale consumer products. She has successfully launched credit cards, ensured secure product rollouts, led high-stakes security events, and driven integrations with the world’s leading mobile device providers. Beginning her career as a penetration tester and security consultant, she brings an attacker’s mindset to proactive defense. Passionate about building strong teams and mentoring future leaders, she is committed to breaking down silos and driving meaningful change in the industry.

Vice President, CISO, and CIO

BILL

Rinki Sethi is the Vice President, Chief Information Security Officer (CISO), and Chief Information Officer (CIO) at BILL, a leading fintech company. She serves on the boards of Vaultree, One Prosper, and several cybersecurity startups. Previously, she was on the board of ForgeRock and advisory boards for UC Davis and NYU.

With a master’s in information security and extensive leadership experience at companies like Twitter, Rubrik, eBay, and Palo Alto Networks, Rinki has managed global security infrastructure, overseeing budgets over $500M and leading large teams. She holds industry certifications, including CISSP and CISA.

An angel investor and thought leader, Rinki contributes to Dark Reading, speaks at global conferences, and was featured in publications like Fortune and Forbes. She advocates for diversity in cybersecurity, developing the Girl Scouts' first cybersecurity badges and supporting women in tech initiatives.

Rinki has been recognized as a top CISO in Lacework’s 2023 list and recipient of the “One to Watch” award (2014) and “Senior Information Security Practitioner” award (2018).

Security Principal

MongoDB

Kenneth White is a security engineer whose work focuses on networks and critical infrastructure. He currently leads applied encryption engineering in MongoDB's global product group, where he specializes in the financial services space, developing security architecture for core banking, payments, and capital markets for the largest investment and retail banks in the world. He has directed R&D and security Ops in organizations ranging from startups to nonprofits to defense agencies to the Fortune 50. His research on applied signal analysis has been published in the Proceedings of the National Academy of Sciences. His work on network security and forensics has been cited by the Wall Street Journal, Reuters, Wired, and the BBC.