With over 25 years financial services experience, Shamial has worked in insurance, banks and now investment management firm leading the strategic supplier oversight agenda globally.
Shamial has a passion to build inclusive and diverse teams which have been demonstrated through his various roles which have included operations, change and supply chain management.
Shamial continues to challenge the status quo and drive the supplier oversight agenda forward as critical part of any firm dealing with third parties.

“Olga Baldwin is a VP, Vendor Management at Axiom Bank with over 13 years of experience in third party risk management. Currently she is responsible third-party risk management program development, improvements, and implementation to ensure a proper oversight of the bank third parties is conducted in accordance with regulatory requirements including vendor selection, risk assessment, due diligence, ongoing monitoring, and terminations. Prior to this role, Olga held a position of a Director, Vendor Risk Management at Sterling National Bank overseeing Vendor Risk Management Program.

Tom Brandt is a risk management practitioner in the federal government. With nearly three decades of federal service, he is currently the Chief Risk Officer (CRO) and Director of Planning and Risk for the Federal Retirement Thrift Investment Board. He previously served as CRO for the IRS. He is a fellow with the National Academy of Public Administration, a past president of the Association for Federal Enterprise Risk Management (AFERM), and also served as chair of the OECD Forum on Tax Administration’s ERM Community of Interest from 2018–2021.

Leah Campbell is a Senior Attorney in Bradley’s Charlotte office. Leah has significant experience representing financial services and insurance company clients in both federal and state courts, as well as before state regulators. Leah has provided intellectual property guidance in M&A and corporate structuring matters and advised on GDPR implementation and cross-border encryption issues.  Leah currently advises banks on payment systems technology and licensing, data privacy, address confidentiality programs, and emerging risk issues.

Prior to joining Bradley, Leah served as Senior Counsel in the Cyber/Intellectual Property/Information Technology group for Deutsche Bank AG in New York. Leah was responsible for negotiating outsourcings, software license agreements, SaaS agreements, consulting services agreements, commercial leases and construction agreements.

Rodney Campbell is a recognized industry leader in Third-Party Risk Management (TPRM) framework, Relationship Management, Contract Management & Performance Management. Rodney is a business champion, dedicated to empowering organizations and business leaders with industry insights and best practices to establish both regulatory compliance and operational success. Experienced in developing global programs, processes, cross-functional teams from the ground up and leading projects spanning Asia-Pacific, Latin America, United Kingdom and North America regions, Rodney creates a high-impact, collaborative environment that eliminates silos and cross borders.Additionally, Rodney serves on Seton Hall University Customer Experience Program Advisory Council and The Board of Directors for HANDS Housing and Neighborhood Development.

Javier Cubano is Vice President, Third Party Risk and Oversight at BNY Mellon, where he specializes in third party due diligence. Recognized as an SME for building and optimizing global third-party risk management programs in the financial industry, Javier has significant experience conducting onsite and remote third-party risk assessments on programs of varied maturity. Javier has streamlined processes for external audit requests, crafting policies and authoring procedures to create effective third party management practices. Javier strives to create solutions that harmonize business, regulatory, and management goals, while strengthening the vendor management lifecycle by working cross functionally with sourcing and legal.      

Javier is a graduate of Rutgers University and Rutgers Law School. Javier is a Certified Third Party Risk Professional (CTPRP) and a Certified Third Party Risk Assessor (CTPRA).

Andrew is the Senior Cybersecurity Specialist at ProcessUnity. He has more than 30 years’ international experience providing cybersecurity advisory and consulting services across a wide variety of industry verticals in Australia, the UK and the USA.Andrew is responsible for keeping up to date with all the latest cybersecurity trends and advancements, as well as evangelizing the use of the ProcessUnity Cybersecurity Risk Management service offering for customers across the globe

Biography coming soon.

Madiha Fatima is a Director and Head of Third Party Risk Management where she is responsible for development of Third Party Risk Management Framework while enabling businesses to achieve their strategic objectives from utilizing vendors. She oversees the firmwide Third Party Risk Management Program including vendor cyber, technology, business continuity and data security assessments. Prior to joining Angelo Gordon, Madiha Fatima served as Head of Third Party Risk Governance & Oversight at DTCC. Madiha is a Certified Third Party Risk Professional (CTPRP). Madiha earned a Bachelors of Science degree in Financial and Capital Markets from Rutge

Biography coming soon

Carolyn Handley is the Head of Vendor Due Diligence and Monitoring for NA Investments, in Aon’s Global Investment Center.  She joined Aon in 2013 as the Finance Lead for NA Investments, previously holding lead roles in financial, analytical and business decision support for top-tier companies such as PepsiCo, Walmart Stores Inc., and GE Capital. Carolyn holds an MBA in International Business, BS in Accounting, and an active CPA license.

Stuart is a Policy Analyst with the OCC’s Bank Supervision Policy division, specializing in governance and operational risk policy. He is also a Bank Information Technology examiner, specializing in cybersecurity and information technology risk / information security. He supports international efforts as the OCC’s interim representative to the Basel Committee on Banking Supervision (BCBS) Operational Resilience Group. Stuart joined the OCC as an industry hire in June of 2013. Prior to joining the OCC, Stuart held IT risk management related positions at Citigroup, Cisco, and GE.  His career also includes management consulting experience at Deloitte. He has substantial experience in regulatory examinations, technology audits, IT certification efforts, and cross-border initiatives from both the regulatory and business perspectives. Stuart completed his BA and MBA at NYU and holds several industry-recognized credentials, including the CISA, CISSP, and CRISC.

Tausif leads the Third Party Risk Governance and Reporting group of DTCC. He is responsible for managing the Third Party Risk Management framework and lifecycle specifically focusing on Critical Third Parties, firmwide awareness of responsibilities, due diligence of 4th/nth parties, governance for monitoring and oversight, and regulatory responses. Tausif holds a BS in Finance from the University of South Florida and is currently pursuing his MS in Cybersecurity from Virginia Tech.

Michelle Koestani is a solutions engineering leader at SecurityScorecard. She has experience working on third party risk management with many of the largest global financial organizations, specifically on how cybersecurity data can be incorporated to drive better decisions. A California native living in NYC, you can find her geeking out on the latest tech, in a pilates class, or dining out in the city!

Biography coming soon.

Wes has been with Archer for over five years and serves as the product manager for Third Party Risk Management, Business Resilience, and Operational Resilience. Prior to joining product management, he worked as a product owner and solutions engineer where he developed offerings for Third Party Risk Management, IT & Security Risk Management, and integrations with AWS Security Hub and RiskRecon. Prior to joining Archer, Wes worked for 10 years in the financial services industry as a relationship manager and risk analyst.

James McPherson is Director & Counsel at Credit Agricole Corporate and Investment Bank in New York.  He is a member of the Regulatory Group and his work includes reviewing and negotiating a broad range of commercial agreements for the Bank, including contracts for a variety of technology and trading related services.  He also participates in various steering committees related to the procurement and ongoing monitoring of the Bank’s various service providers and outsourcing initiatives, including the Bank’s Vendor Management Committee.

Melissa J. Mellen is an Officer within Procurement Value Management, leading the Policy, Analytics, & Vendor Strategy team. In this capacity, Melissa is responsible for overseeing Procurement Policy related compliance, and advisory client driven services. She also manages the Federal Reserve Bank of New York’s Vendor Management, and Supplier Diversity Program.

Prior to joining the Federal Reserve Bank of New York, Ms. Mellen spent fifteen years in the private sector, focused on Procurement, Supplier Diversity and Vendor Risk Management for firms such as: MUFG Union Bank, JP Morgan Chase, OppenheimerFunds, and Mizuho Bank, Ltd.

Ms. Mellen received her bachelor’s degree in Philosophy from SUNY Albany and holds an MBA with a concentration in Risk Management from Saint Peter’s University. She earned a Professional Certificate in Diversity & Inclusion from Cornell University. Melissa is currently a Doctoral Candidate at Pace University, with a focus in Consumer Psychology and Marketing.

Melissa lives in Hoboken New Jersey with her husband Kevin, and Pitbull puppy Viggo.  She is a certified yoga instructor affiliated with both the Dharma Yoga Center of New York City, as well as National Yoga Alliance.

Biography coming soon.

Matthew Moog serves as the General Manager, Third-Party Risk at OneTrust, the category-defining enterprise platform to operationalize trust. In his role, Matthew advises companies throughout their third-party risk management implementations to help meet requirements relating to relevant standards, frameworks, and laws. Prior to joining OneTrust, Matthew spent 18 years at EY where he led their Global Third-party Risk offering for Financial Services and their Third-party Risk Managed Service offering for the Americas. Moog is a CISA and has a BS in Management Information systems from Rensselaer Polytechnic Institute in Troy, NY

Andrew Moyad is the Chief Executive Officer of Shared Assessments.
Andrew is an accomplished leader and trailblazer in third party risk management. As a practitioner and a senior risk management executive, he has driven a culture of accountability and diligence in safeguarding information. Andrew has more than 25 years in risk management and information security. He has contributed greatly to the transformation and advancement of risk management as a strategic function that intersects with and helps guide all aspects of organizations.
Most recently, Andrew served as Senior Vice President, Vendor Risk Management at Blackstone, where he led a team of risk professionals responsible for overseeing all phases of the vendor lifecycle at the firm, including risk assessments, control diligence, contract reviews, financial checks, performance monitoring, issue tracking, and management reporting. Prior to Blackstone, he served as a director and global head of vendor risk management and BlackRock and Senior Vice President for Citigroup, where he was a Business Information Security Officer in Global Fixed Income and led third party risk assessments for several years.
Andrew holds a Bachelor of Arts Degree in Natural Sciences from Harvard University and a Master of Science Degree in Information Systems from the Stevens Institute of Technology.

Biography coming soon.

Peter Pernebo is the Global Head of Third Party Risk Solutions for KY3P, S&P Global Market Intelligence, where he is leading the commercial, strategy and client delivery of third-party risk management solutions. KY3P is designed in close cooperation with large financial institutions to provide efficiencies and standardization to the third-party due diligence process.

Before joining S&P Global, Peter spent eight years leading various engagements within Goldman Sachs third party risk management office, establishing vendor management policies, procedures and infrastructure to support the firm’s program.

Prior, he was recruited to head the US NE region for Totality, a silicon valley technology upstart providing operational support for major ecommerce clients. His responsibilities included sales, client service delivery and consulting. As part of the executive leadership team, Peter was responsible for product and growth strategies. Totality was acquired by Verizon Business and he led the integration of Totality services.

Before joining Totality, Peter was a senior Director at Accenture, leading global supply chain projects for clients in the US, Canada, Japan, UK, Sweden and many other locations.

Peter holds a BSc in Business and Strategy from Lund University as well as minors in History and Sociology. He is also ITIL certified.

Biography coming soon.

Hugo Ramirez has over 33 years of internal audit experience in three countries (US, Mexico, and Puerto Rico) providing assurance on governance effectiveness Risk management and control practices.

Professional Experience and Responsibilities

Hugo Ramirez joined BBVA Internal Audit in February 1993.

During his time at BBVA, Ramirez has held audit positions at five BBVA entities in three different countries. Ramirez has held the title of Chief Audit Executive at BBVA Bancomer USA (2006) and BBVA Puerto Rico (2012). Before joining the audit team of BBVA New York, Ramirez served as Director of the Internal Audit Fraud Division and subsequently he was appointed as Corporate Assurance Director for Internal Audit, focusing on the enactment of a three line of defense integrated structure for all BBVA entities in the US.

As a part of the Solutions Development team in BBVA New York (Agile Methodology), Ramirez is focused on audits related to Operations, and Third-Party Risk Management, although his experience in auditing covers almost all areas of the banking industry as a result of the diversity of his functions throughout his wide-ranging banking career. Notable audits worked on/led include Retail Banking Sales Incentives, Forensic investigations, Volcker Rule Compliance, Vendor Risk Management, Operational Risk, Consumer Deposits, Governance, IT & Data Security, and Lending reviews.

Professional and Community Activities
Ramirez holds a Certification in Risk Management Assurance, designation by the IIA and is a Certified Regulatory Vendor Program Manager. He is a member of the Institute of Internal Auditors and the Association of Certified Fraud Examiners. He has experience as college professor and conference speaker on financial subjects.

Education
Ramirez holds a Master’s degree in Financial Engineering with concentration in Mergers and Acquisitions and a Bachelor’s degree in International Trade both from the Universidad de Guadalajara in Mexico. He has also completed executive training in Leadership and Senior Management at recognized business schools in Texas, Guadalajara (MX) and Mexico City.

Brian has worked in business process automation targeting risking and compliance for over 25 years, supporting hundreds of Fortune 500 and mid-market firms across all industries. Since 2011 Brian has focused on Third-Party Risk, Compliance and Performance Management for the Financial Services Industry, as well as Master Data Management and Know Your Customer (KYC) challenges. At Mirato, Brian serves as Director of Financial Services Sales, responsive for sales to financial services firms in North America and Europe.

Michael Steinhoefel is a Director of Operational Risk Management at Barclays responsible for Connecting Risk in the Supply Chain. Prior to this Michael was at BNY Mellon Global Markets and 20 years with Citi, the Swiss Stock Exchange, and Credit Suisse in roles in Internal Audit and in first line Risk & Control and Business Process Reengineering in the US, LATAM and EMEA. Michael worked several years as external auditor. He holds a Master of Political Science from the Johannes Gutenberg University in Germany and an MBA from the Institute of Management Development (IMD)

Biography coming soon.

Nate Vanderheyden is an Executive Director on Morgan Stanley’s U.S. Banks Cybersecurity and Information Security Team.Mr. Vanderheyden is responsible for the evaluation and evolution of banking systems to enhance cyber resiliency and defensive measures. He started at the firm in 2018 on the Wealth Management Cybersecurity team in direct support of Global Banking Technology and the Private Bank.Prior to joining Morgan Stanley, Mr. Vanderheyden served for 11 years in the U.S. Marine Corps and was deployed to Iraq and Afghanistan. His last six years of duty were spent at the National Security Agency (NSA), where he conducted and led a team performing computer network operations, advised senior government officials, and authored multiple policy documents shaping cyberspace operations in support of the U.S. Intelligence Community and national security objectives.

Olga Voytenko is a Managing Director of Operational Resilience with Silicon Valley Bank.  She is responsible for building the global operational resilience program and supporting resolution and recovery planning.  In her role, she is regarded as the operational risk and resilience expert who promotes the importance of sound operational resilience practices and supports her financial organization in the timely and effective build and execution of operational risk and resilience management programs and processes.  Prior to this role, Ms. Voytenko was the Global Head of Third Party Risk Management with State Street Corporation, where she was responsible for building the Third Party Risk Management program and managing third party risks, including operational resilience and cyber security risks.  Ms. Voytenko’s extensive experience across financial and non financial risk domains includes serving as Vice President within Treasury leading the Global Liquidity Risk Management team, as well as, leadership roles in Recovery Resolution Planning, Valuation & Analytics, and Corporate Audit. Ms. Voytenko also contributed to Sun Life Financial, where she held a leadership position in the Investment Finance and Security Valuation team.
Olga holds a Master of Science in Business Administration from Suffolk University and a Bachelor of Science in Accounting and Finance from Boston University.

Ken Wolckenhauer is the Head of Vendor Management at Nordea Bank’s New York branch. Leading up to this position, Ken was as a subject matter expert, trainer, solutions provider, and consultant for FIS, the world’s largest global provider dedicated to banking and payments technologies. With FIS, Ken specialized in financial industry regulatory risk and compliance, mostly in the area of anti-money laundering and watchlist compliance. Nordea Bank leveraged Ken’s risk and compliance knowledge to build out the vendor management program for the New York branch, developing a program that would properly manage risk as well as gaining acceptance to the US regulators. The success of the US program is now being used to advise Nordea’s European branches on enhancements to its TPRM program. Ken is a graduate of Bucknell University and is a Certified Anti-Money Laundering Specialist.

Michael Yaffe brings more than 20 years of experience at organizations ranging from start-ups to Fortune 100 companies to his position as Chief Marketing Officer. He has a significant record of achievement in developing strategic and tactical marketing programs for information security companies that deliver revenue. He possesses a strong set of skills in lead generation, public and analyst relations, product marketing, partnership development, positioning and branding.

Jing Zhao has over a decade of experience in the Third Party, Supply Chain, and Procurement space. Jing currently oversees USAA’s Third Party Data and Analytics team which is accountable for the delivery of Procurement and Third Party risk data, reporting and analytics, including Third Party Risk Appetite Metrics, Key Risk / Performance Indicators, Board of Director reporting, Data and Analytics Strategy, Pricing Analytics, and other intelligence supporting the Third Party program.

Jing’s professional career has been centered around Supply Chain Management and Third Party Risk Management. Jing has previous experience in the logistics field and he was a previous entrepreneur. Prior to USAA, Jing provided many years of leadership through setting strategic direction, implementing emerging technology such as AI and RPA, and process design in the Procurement / Third Party Risk Management division at Bank of America.

Jing received his bachelor’s degree & MBA focused on Supply Chain Management, Operations, and Strategy from Purdue University at West Lafayette, IN. Boiler Up!

Jing enjoys spending his free time with his wife, Lindsay, and 2 sons, Wade (2018) and Luke (2020) playing the piano and guitar, and binge watching basketball. He currently reside in Charlotte, NC.

CyberGRX is a data company that helps organizations manage third-party risk and reputation through cyber risk intelligence. CyberGRX’s revolutionary approach empowers enterprises to make rapid, data-informed decisions, reducing cyber risk across an entire vendor ecosystem. Due to the extensive depth and breadth of cyber risk data collected via the CyberGRX Exchange platform, the company is able to provide customers with both attested and predicted data in the form of actionable insights into the impact of evolving threats. For organizations operating as third parties, CyberGRX helps manage cybersecurity reputations in a collaborative, efficient, and business-enabling way.

CyberGRX first emerged as the market’s first global cyber risk exchange to help organizations work with their vendors to identify and reduce shared risk. As a two-sided Exchange, the company connects both the consumers of cyber risk data, primarily CISOs and their security teams, and the providers of cyber risk data, primarily the vendors themselves, via cyber risk assessments as well as other data feeds. The initial go-to-market approach was to populate the Exchange with as much data as possible before the company started charging participants for the value they received. Since then, CyberGRX has experienced significant growth scaling to over 225,000 companies on the Exchange.

S&P Global (NYSE: SPGI) provides essential intelligence. We enable governments, businesses and individuals with the right data, expertise and connected technology so that they can make decisions with conviction. From helping our customers assess new investments to guiding them through ESG and energy transition across supply chains, we unlock new opportunities, solve challenges and accelerate progress for the world. We are widely sought after by many of the world’s leading organizations to provide credit ratings, benchmarks, analytics and workflow solutions in the global capital, commodity and automotive markets. With every one of our offerings, we help the world’s leading organizations plan for tomorrow, today. For more information, visit www.spglobal.com.

Archer, an RSA company, is a leader in providing integrated risk management solutions that enable customers to improve strategic decision making and operational resiliency. As true pioneers in GRC software, Archer remains solely dedicated to helping customers understand risk holistically by engaging stakeholders, leveraging a modern platform that spans key domains of risk and supports analysis driven by both business and IT impacts. The Archer customer base represents one of the largest pure risk management communities globally, with over 1,500 deployments including more than 90 of the Fortune 100.

BitSight Technologies is transforming how companies manage information security risk with objective, evidence-based security ratings. The company’s Security Rating Platform continuously analyzes vast amounts of external data on security behaviors in order to help organizations manage third party risk, benchmark performance, and assess and negotiate cyber insurance premiums. For more information, please visit www.bitsighttech.com or follow us on Twitter (@BitSight).

While traditional TPRM solutions automate workflow, Mirato automates the remaining manual work. Using natural language processing (NLP) and advanced artificial intelligence(AI), Mirato contextualizes the information in your TPRM evidence and data sources and completes your assessments for you, validating and documenting the controls in the process and automating the audit trail. It streamlines your entire operation’s data into one smart platform. The overall result is a significant reduction in money and time spent on the manual effort, workflow, and monitoring (cuts up to 60% of assessment costs). It also ensures improved accuracy, process integrity, and TPRM effectiveness. Mirato TPRM INTELLIGENCE allows you to assess new risks instantly and provide true continuous monitoring and true concentration risk. As Mirato is configured to your program, using your current platforms, data sources, and partners, it allows you to maximize the value of your existing technology, subscription, and service provider investments.

As society redefines risk and opportunity, OneTrust empowers tomorrow’s leaders to succeed through trust and impact with the Trust Intelligence Platform. The market-defining Trust Intelligence Platform from OneTrust connects privacy, GRC, ethics, and ESG teams, data, and processes, so all companies can collaborate seamlessly and put trust at the center of their operations and culture by unlocking their value and potential to thrive by doing what’s good for people and the planet.

SecurityScorecard is the global leader in cybersecurity ratings and the only service with millions of organizations continuously rated.
Our mission is to make the world a safer place by transforming the way organizations understand, improve, and communicate cybersecurity risk to their boards, employees, and vendors. SecurityScorecard’s patented rating technology is used by thousands of organizations for enterprise cyber risk management, third-party risk management, board reporting, cyber insurance underwriting, and regulatory oversight to meet compliance mandates; making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their externally facing digital- footprint. SecurityScorecard is the only provider of instant risk ratings that automatically map to vendor cybersecurity questionnaires and the largest ecosystem of integrations, providing a true 360-degree view of risk. But we don’t stop there. Through a customer- centric, solution-based commitment to our partners, we are transforming the digital landscape building a path toward resilience.

Shared Assessments is a global membership organization dedicated to developing the best practices, education and tools to drive third party risk assurance. We are creators of the industry standard third party risk toolkit, used by over 15,000 organizations worldwide.

Bradley is a national law firm with a reputation for skilled legal work, exceptional client service, and  impeccable integrity.  Our 10 offices are located in Alabama, Florida, Mississippi, North Carolina, Tennessee, Texas, and the  District of Columbia, giving us an extensive geographic base to represent clients on a  regional, national, and international basis. We frequently serve as national coordinating counsel, regional  counsel, and statewide counsel for clients in various industries. Clients rely on Bradley for innovative legal services that reflect a deep understanding of their business objectives

Biography coming soon.

MorganFranklin Consulting’s cybersecurity practice offers a hands-on approach that provides the right blend of experience and expertise to successfully deliver, execute, and manage your cybersecurity needs. We offer end-to-end cybersecurity services that provide a comprehensive approach to solving our clients’ most critical cybersecurity needs. From advisory and management consulting to managed services and project resourcing, we identify risks, develop and mature cybersecurity programs, and implement solutions that support and meet your organization’s business goals. Our team of professionals brings deep expertise in helping organizations design and implement cyber strategies across all cybersecurity domains

CeFPro Connect aims to connect industry experts through thought leadership content and timely news, written for the industry, by the industry. Gain unlimited access to CeFPro’s unparalleled library of resources including iNFRont Magazine, market intelligence reports, filmed presentations, insights Q&A’s, and much more.
Sign up for free.

iNFRont Magazine is a unique publication providing regular insight on the operational and non-financial risk (NFR) sector. Featuring contributions provided by leading industry figures and experts from around the world, iNFRont Magazine touches on the most critical themes and challenges currently affecting financial professionals.
Available to download for free.