Faculty Directory

Raffy is VP of Research and Intelligence at Forcepoint where he leads Forcepoint X-Labs, a specialized group dedicated to behavior-based security research and development of predictive intelligence to Forcepoint's human-centric product portfolio. Bringing more than 20 years of cybersecurity experience across engineering, analytics, research, and strategy, Raffy is one of the industry's most respected authorities on security data analytics, big data, and visualization. As such, he serves as an advisor to many technology startups. He is the author of Applied Security Visualization and is a frequent speaker at global academic and industry events. Additionally, Raffy has held key roles at IBM Research, ArcSight, and Splunk.

Gary is a Senior Advisor to the global management consulting firm Oliver Wyman. He previously served as the Chief Information Security Officer for AIG, where he led the company’s global cybersecurity risk management program and partnered closely with the Executive Leadership Team to shape enterprise security strategy.  In addition to his work with IANS, Gary provides CISO‑level advisory support to HiddenLayer, a cybersecurity company focused on protecting artificial intelligence and machine learning systems.  Before joining AIG, Gary was Senior Vice President and the first Chief Security Officer at USAA. In that role, he built and led a comprehensive security organization encompassing Information Security, Fraud Operations, Privacy, Business Continuation, Physical Security, and Corporate Investigations. Earlier in his career, Gary spent time with Deloitte’s federal practice following a 25‑year career as an officer in the United States Air Force. His military assignments included a wide range of leadership and staff roles in various technology areas including telecommunications, satellite communications, deployed network operations, and cybersecurity.

Stephen serves as an independent Security Consultant performing security assessments, developing information security programs and strategies, and creating remediation plans for select clients. He is also Co-Founder of Community of Practice, a Silicon-Valley-based membership organization for Engineering VPs and CTOs. Stephen has experience including building and leading worldwide teams and designing some of the world's largest Internet services.

Tim is a Principal Consultant and Founder at Red Siege, an information security company focused on adversary emulation and penetration testing. He also serves as the MSISE Program Director, Course Author, and Principal Instructor at the SANS Institute.

Rich is CEO and Analyst for Securosis, an information security research and advisory firm, in addition to Founder and Vice President of Product at DisruptOPS, a cloud environment monitoring platform. Prior to founding Securosis, he was Research Vice President for Gartner’s security team where he also served as Research Co-Chair for the Gartner Security Summit. Additionally, Rich has served as an independent consultant, web application developer, software development manager, and a systems and network administrator.

Josh is the owner and president of Eyra Security, an information security and business improvement consulting firm that specializes in helping startups and organizations in transition take advantage of lean and agile methods, open source technology and varied frameworks used for security, risk management and compliance. He also serves on the GIAC Advisory Board. Additionally, as an active member in the information security community, Josh is a member of ISSA, Agile Iowa, OWASP, DC612, Central Iowa Area Linux Users Group and Infragard.

Shamla is a CXO Advisor at Netskope and a former Managing Partner and Global CISO at IBM.  She is a public company Board Director at QBE and WisdomTree.  Her experience spans 40+ years in a variety of sectors and 6 continents, making her an expert in cross-cultural collaboration and working across industries. She is recognized as a leader that enables priorities of the business using technology innovation and cybersecurity.  Her background includes authoring and teaching several courses at the University of Illinois Chicago School of Law in technology, security, and privacy law.  Shamla coaches professionals on leadership, board communication and how to align security with strategic business initiatives.

Chris is the Co-Founder and CEO of LARES Consulting, an information security consulting firm that leverages a blend of assessment, testing, and coaching. He also serves on the Board of Directors at CREST, an international not-for-profit accreditation and certification body that represents and supports the technical information security market.

 Russell Okoth is a Business & Technology Executive. He is the Founder and Consultant at Cyberdiligent, a Dallas-based Information Security Governance and Risk Advisory firm, where he provides strategic guidance to Boards, C-suites, and Executives. Russell has over twenty years of experience in information security, cybersecurity, risk management, and regulatory compliance across technology, retail, telecommunications, finance, insurance, and fintech industries. Russell has held notable leadership roles, including Chief Information Security Officer (CISO) and Data Privacy Officer at Pacific Premier Bank and CISO at Apex Fintech Solutions.

Davi Ottenheimer is a leading authority on post-quantum cryptography (PQC) transition strategy, helping enterprises navigate the shift from classical to quantum-resistant cryptographic infrastructure. As founder of Ottenheimer GmbH and creator of pqprobe — a quantum cryptography discovery and inventory management toolkit — Davi enables organizations across healthcare, financial services, aerospace, and the public sector to assess their cryptographic exposure and build actionable PQC migration roadmaps. Ottenheimer GmbH also delivers counter-drone strategy and trust engineering for critical infrastructure.

Davi's career in security spans three decades at industry giants — from delivering the first VMware-based remote desktop for IBM/RedHat in 1999, to protecting two billion users at Yahoo! during the mobile phone revolution, to pioneering regulated software security at MongoDB where he served as its first CISO. In 2006, Davi foresaw the future of IoT security, patenting the "PIN login" for devices, and he helped lead app-level key management standards. A decade later he delivered field-level encryption for NoSQL databases.

Helen Patton is a strategic cybersecurity advisor at Cisco. Previously, she served as a CISO for the Cisco Security Business Group, and an Advisory CISO, providing strategic insights to the security community. She was the CISO at The Ohio State University and spent ten years in risk and resiliency at JPMorgan Chase. Helen is a founding member for the Cybersecurity Canon and the National Technology Security Coalition.

Lisa Perdelwitz brings over 20 years of global leadership and cybersecurity expertise. She is the Founder and CEO of Ligilo, a leadership consultancy, is a Board Advisor for the Cyber Resilience ISAC (CR-ISAC), and serves part-time in the Air National Guard. Lisa has led global security organizations, advised C-suite executives and boards on managing cybersecurity risk, shaped federal policies, and developed multinational cyber defense and warfare strategies. Throughout, she consistently focuses on creating competitive advantage by developing and investing in leaders who build resilient, high-performing tech teams and cultures.

Carlos is a Principal Consultant and Research Team Lead for TrustedSec, an information security consulting company. Carlos was the Director of Reverse Engineering and Integrations for a major Vulnerability Management company where he lead the team efforts in reversing protocols and vulnerabilities for the expansion of vulnerability scanning products, he also lead the team search and reporting of zero-day vulnerabilities on multiple consumer and enterprise products. Carlos is also an independent trainer having trained both offense and defensive principals to private and government customer.