Technology Risk Management Experts 2025

Josh Fleming is the Risk Advisory & GRC practice lead at Echelon Risk + Cyber, where he helps organizations strengthen resilience against today’s most complex cyber and physical threats. He brings a unique ability to bridge technical expertise with executive strategy, enabling leaders to make confident, informed decisions during both preparation and crisis. With extensive experience across industries such as healthcare, manufacturing, financial services, and energy, Josh has partnered with organizations to identify risks, fortify defenses, and implement effective governance strategies. His work spans from building incident prevention programs to leading executive tabletop exercises, risk assessments, and crisis response planning. Josh regularly advises executive teams, C-suites, and boards on incident response readiness and strategic risk management. He is known for developing actionable frameworks and clear decision-making playbooks that reduce risk exposure, accelerate response, and build stakeholder trust. As an industry thought leader, Josh is committed to advancing the conversation around governance, risk, and compliance. He stays at the forefront of emerging trends and regulations, particularly in areas such as AI governance and cybersecurity resilience, to ensure his clients and partners are not only compliant, but future-ready. Above all, Josh is recognized as a trusted advisor who combines technical depth, business acumen, and a client-centric approach to deliver lasting value. His mission is to help organizations move beyond compliance to achieve true resilience and competitive advantage in an evolving risk landscape.

Matt Lindley is the Chief Innovation & Information Security Officer at NINJIO, a leading cybersecurity awareness training and human risk management platform. Matt leads NINJIO’s cybersecurity team and AI innovation projects. Previously, he was the CEO and Principal Consultant at REIN Cybersecurity, which focused on governance, risk management, and compliance (GRC). He has also served as the Director of Security Services at Cal Net Technology Group and the virtual CIO at Convergence Networks. Matt is an authority on IT, cybersecurity, GRC, and operational maturity whose expert insights have been published in media outlets spanning cybersecurity and many other relevant verticals. His byline has appeared in a wide range of cybersecurity and tech publications, including Dark Reading, Cyber Defense Magazine, Innovation & Tech Today, Spiceworks, Security Magazine, Cybersecurity Insiders, Security Boulevard, U.S. Cybersecurity Magazine, Information Week, and Cyber Protection Magazine. Matt has also published extensively in outlets serving specific industry verticals, such as InsuranceNewsNet, Business Traveler, Manufacturing.net, and Carrier Management. He is considered a leading security analyst whose research and expertise cover AI strategy and transformation, emerging cyberthreats, behavioral psychology, social engineering, and organizational resilience. Matt has over a decade and a half of experience as both a practitioner and a thought leader in cybersecurity, and he is particularly focused on human risk management—a core pillar of cybersecurity at a time when the human element is implicated in the majority of breaches.

Cyber Security Consultant and Tech Enthusiast with 10+ years of experience helping businesses strengthen digital security, optimize technology strategies, and drive innovation across the Cyber Security, Business Consulting, Technology, and SaaS industries. Skilled in identifying security risks, implementing resilient solutions, and advising organizations on secure digital transformation initiatives. Passionate about emerging technologies, PKI, cloud security, SaaS ecosystems, and helping startups and enterprises build scalable, secure, and future-ready systems. Known for combining technical expertise with business insight to deliver practical solutions that enhance operational efficiency, compliance, and cybersecurity resilience.

Stephen Pike is the Founder and CEO of TravRisk, a Canadian travel preparedness and Travel Risk Management expert with more than 30 years of international travel and occupational safety experience. He specializes in helping organizations and travellers make better decisions under uncertainty through practical preparedness, risk awareness, and human judgment. Stephen is the author of Beyond the Booking: Modern Travel Risk and the Rise of Duty of Care, which explores how modern travel has evolved beyond traditional safety advice and why preparedness has become an essential travel skill. His work bridges the gap between travel planning and real-world travel, focusing on the point where organizational systems, technology, and individual decision-making intersect. His areas of expertise include travel preparedness, travel safety, business travel, duty of care, ISO 31030, travel disruptions, traveller behaviour, destination risk, digital dependency, travel scams, crisis response, artificial intelligence in travel, and decision-making under pressure. He is frequently sought for commentary on breaking travel events, airline disruptions, geopolitical developments, travel technology, and the changing expectations of modern travellers. Stephen's commentary is known for translating complex travel issues into practical, actionable insights. Rather than simply describing what happened, he helps audiences understand what it means, why it matters, and how travellers and organizations can respond more effectively. His core philosophy is that preparedness—not fear—is the foundation of safer travel, and that while travel has become more connected and convenient than ever before, it has also become more complex. His work emphasizes capability, resilience, and informed human judgment as the keys to navigating today's travel environment. Stephen is available for interviews, expert commentary, podcasts, television, radio, and print media, and is committed to providing timely, balanced, and publication-ready insights that help journalists explain travel events with context and clarity.

Nikolas Lamprou is a Principal Consultant in Vulnerability Management with 15 years of hands-on experience in IT, spanning web development and e-commerce before specialising in cybersecurity. He holds an MSc and industry certifications including GCFR, SC-200, Security+, PNPT, eJPT, and BTL1, and works daily at the intersection of vulnerability management, penetration testing, and practical security defence. He is also the founder of Solve Tech Today, where he writes clear, no-nonsense guidance on security, Windows, and everyday tech problems.

Mark Lynd is the Head of Executive Advisory & Strategy at Netsync, one of the nation's leading value-added resellers, where he works daily with C-Suite executives on AI, cybersecurity strategy, and digital transformation. A 5x CIO/CISO, author, thought leader and keynote speaker with decades of hands-on operational experience, Mark brings a rare combination of boardroom perspective and practitioner depth to every engagement. Ranked as a Top 5 Global Thought Leader in both AI and Cybersecurity by Thinkers360, Mark has facilitated over 150 incident response tabletop exercises across school districts, Fortune 500 enterprises, healthcare systems, government agencies, and mid-market manufacturers. His original research from these exercises represents the most comprehensive tabletop dataset published by a single practitioner. Mark has delivered more than 100 keynotes at marquee events including RSA Conference, Oracle CloudWorld, Cisco Partner Summit, Dell Technologies World, IBM Think, and Gartner Security & Risk Management Summit. His speaking topics span AI generative strategy, AI infrastructure, cybersecurity operations, ransomware preparedness, incident response, and business continuity. He holds a Bachelor of Science degree from the University of Tulsa and attended The Wharton School. Mark served honorably in the United States Army's 3rd Ranger battalion, and 82d Airborne. My Newsletters: - Cybervizer: Weekly strategic briefings for 10k+ professionals. (www.cybervizer.com) - AI Bursts: Cutting through the noise of AI adoption. (www.aibursts.com) My Published Books: Books available on Amazon, Barnes & Noble, Apple Books, and many other outlets: - Cyber War: One Scenario – A guide to infrastructure resilience. - A Leader’s Playbook to Cyber Insurance – Managing the financial ROI of risk. - Cybersecurity Life Skills for Teens – My passion project for digital safety.

Would love it if you contact me via OODA.com instead of DM here. Bob Gourley is an experienced board member, a Chief Technology Officer (CTO), Board Qualified Technical Executive (QTE), author and entrepreneur with extensive past performance in enterprise IT, corporate cybersecurity, risk mitigation in artificial intelligence and blockchain projects, and data analytics. CTO of OODA LLC, home of the OODA Network, a community of business leaders, technologists, intelligence and security professionals. Winner of InfoWorld top 25 CTO and Washingtonian Magazine's "DC Tech Titan" list.Served as the CTO for the Defense Intelligence Agency and was previously a naval intelligence officer.

Co-Founder of SG6, ITRES and DEV6. Cybersecurity consultant with a deep technical background. More than 20 years of experience in the fields of IT Security, Cybersecurity, Security Research and IT Best Practices. Dozens of acredited CVE vulnerabilities since Y2K. I publish practical offensive/defensive research: vulnerability analysis, exploitation notes, reverse engineering, and hardening/detection takeaways.

Results-oriented technology leader with over 9 years of experience in Infrastructure Security, Automation, Generative AI, and Software-Defined Operations. Demonstrated ability to lead high-performing teams, streamline enterprise support, and execute strategic initiatives that enhance organizational resilience and operational efficiency. A seasoned cybersecurity professional, experienced in vulnerability and patch management at scale, with a strong track record of driving measurable, data-driven impact through intelligent automation. Skilled in designing and implementing secure, scalable, and compliant infrastructure solutions that align with business and regulatory goals. Proven expertise in project and program management, particularly within Agile and Scrum frameworks, with a focus on cross-functional collaboration, risk mitigation, and continuous improvement. Recognized for combining technical depth with strategic vision to deliver transformative outcomes in complex enterprise environments.

For over 20 years I've been on the front lines of cybersecurity, working for security vendors alongside global organisations to answer one critical question: how effective are your security measures against a real cyber attack? Day to day I'm a solutions engineer, helping leadership teams evaluate their security stack and build actionable roadmaps. These days I specialise in AI security: how organisations adopt AI safely, and how attackers already use it. I'm also the founder of CyberDesserts.com, a cybersecurity skills and knowledge hub, where I write about AI security, supply chain risk and cybersecurity careers. Topics I can comment on with confidence: • AI security: LLM and agent risks, prompt injection, and attacker use of AI • Security validation and exposure management: does your stack actually work • Software supply chain attacks and dependency risk • Ransomware and attacker innovation • Enterprise security strategy, culture and cyber resilience • Cybersecurity careers, skills and the talent market Track record: quoted by IT Brew and Cybernews, byline in The AI Journal, guest on the Smashing Security and Cybercrime Magazine podcasts, and recently on stage at the FCA for the ISC2 London Chapter. I respond quickly, speak in plain English, and back opinions with hands-on experience rather than vendor talking points. Ready-to-use bio and headshot: shakelahmed.com/bio

Seasoned technologist with global experience in successfully overseeing and managing complex IT infrastructure (LAN/WAN/Data Centre) and managing build-out projects, cybersecurity initiatives, and application development projects. Skilled in various project management methodologies, including agile, Scaled Agile Framework (SAFe), and waterfall, to drive project success and achieve desired outcomes. Demonstrated expertise in leading cross-functional teams across diverse geographical locations, delivering projects within budget and timeline constraints, and aligning technology solutions with strategic business objectives. Excellent communication, stakeholder management, and technical skills to drive project success and achieve desired outcomes. Adept at leveraging industry best practices, methodologies, and global standards to ensure efficient project execution, optimize resource utilization, and maximize value for organizations.

CISSP-certified cybersecurity and technology executive with more than 20 years of progressive leadership across the renewable energy and critical infrastructure sectors. My work sits at the intersection of four disciplines usually held by different specialists: enterprise information security, operational technology (OT/SCADA) security in regulated energy environments, federal regulatory compliance, and the responsible governance of artificial intelligence in critical infrastructure. I serve as Director of Enterprise AI and Risk for a renewable power operator, accountable for the cybersecurity, regulatory, and AI governance posture of a North American fleet exceeding 1,800 distributed solar assets — operations within the U.S. bulk electric system and under federal critical infrastructure regulation. My contributions rest on three programs I have personally designed and led. First, I established secure architecture and OT/SCADA refresh standards securing utility-scale wind and solar operations, advancing the cybersecurity of U.S. critical energy infrastructure. Second, I authored the enterprise data privacy program harmonizing multiple U.S. state privacy laws (CCPA, CPRA, VCDPA, CPA, CTDPA, UCPA) under a NIST 800-53 control architecture, and built upon it the enterprise Data Security Program required for the DOJ rule under 28 CFR Part 202 (EO 14117). Third, I authored the enterprise AI governance program aligned to the NIST AI Risk Management Framework, operationalizing responsible deployment of generative and agentic AI in a regulated, OT-heavy environment. I lead integrated programs across the DOJ Data Security Program, multi-state privacy law, and the NIST AI RMF — translating unsettled federal regulation into board-ready strategy. CISSP. ISC2 peer judge. Forbes Technology Council member.

As a Cybersecurity Auditor operating at the intersection of complex digital infrastructures and human systems, my mission is to build resilience in an increasingly volatile world. With over 20 years of experience in Global MNCs, I’ve realized that protecting a network is only half the battle; the ultimate firewall is the clarity and alignment of the professional mind. ​I am a published author of three works that explore the architecture of security and the science of patterns: ​'The Interview': A deep dive into the technical and psychological nuances of Cybersecurity. ​'Cosmic Catalyst' & 'Beyond Constellations': Research into systemic cycles, predictive analytics, and ancient pattern-recognition frameworks. ​ My methodology is unique. By day, I audit global cybersecurity frameworks for US-based clients. Beyond the code, I am a dedicated researcher of Bio-Energetic Systems and Chronobiological Trends. I have successfully applied these 'multidimensional' patterns to predict global events and organizational shifts with high accuracy—bridging the gap between the measurable and the metaphysical. Through my research I offer high-performance philosophy to fellow cybersecurity professionals. My goal is to help leaders navigate 'zero-day' life challenges with the same precision they apply to their digitalecosystem. ​ I believe the future of leadership belongs to those who can traverse both the logical and the intuitive. I am here to help you audit your path to sovereign success.

Karthikeyan Ramdass a seasoned cybersecurity professional with over 18 years of experience securing mission-critical systems for leading Fortune 500 companies across industries including aviation, finance, automotive, and technology. I have played a pivotal role in protecting organizations such as Southwest Airlines, Wells Fargo, Morgan Stanley, Toyota Motors North America, AIG, Cognizant, Salesforce, and Deluxe Corporation. Specializing in application security, vulnerability management, secure architecture, and supply chain defense, led the design and implementation of enterprise-scale security frameworks, CI/CD pipelines, and advanced security testing solutions. Extensive experience in SAST, DAST, SCA, zero-day vulnerability management, and penetration testing, ensuring compliance with global standards such as NIST CSF, PCI DSS, and OWASP Top 10.

I’m an Information Security Manager and technology writer with hands-on experience securing modern web applications, SaaS platforms, and cloud infrastructure. I specialize in cybersecurity strategy, data protection, privacy-by-design, and secure software development, with a strong focus on translating complex technical risks into clear, actionable insights for businesses and the public. Through Techternet, I research, analyze, and publish in-depth content on cybersecurity, AI, cloud computing, DevOps, and emerging technologies, helping organizations and individuals understand real-world threats, compliance requirements, and best practices. My work bridges the gap between engineering, security operations, and executive decision-making. I’m available for expert commentary, interviews, and analysis on cybersecurity incidents, data breaches, AI security risks, SaaS security, and technology trends.

Ryan Windt is Head of Growth Marketing at SeedPod Cyber, a direct cyber insurance company specializing in cyber liability and Technology E&O coverage for businesses, MSPs, MSSPs, and tech companies. Ryan leads SEO, content strategy, and demand generation efforts, with a focus on translating complex insurance and cybersecurity concepts into practical guidance for buyers and channel partners.

Darren Coleman is a cybersecurity expert, technology strategist, and founder of Coleman Technologies, a managed IT services and cybersecurity firm helping organizations across North America reduce cyber risk and modernize their IT infrastructure. Since founding Coleman Technologies in 1999, Darren has advised business leaders on cybersecurity, ransomware protection, cloud strategy, and the evolving risks of the dark web. He is a recognized speaker on cybersecurity and emerging technology trends, including artificial intelligence and AI-driven business productivity. Darren has spoken at the Harvard Business Expert Forum and has appeared in media outlets discussing cybercrime, cybersecurity awareness, and technology risk. He is also a contributing author to the Amazon bestselling cybersecurity book Easy Prey: How to Protect Your Business from Data Breach, Cybercrime and Employee Fraud. Through his work with Coleman Technologies, Darren helps organizations implement proactive cybersecurity strategies, AI-enabled productivity tools, and managed IT services designed to improve operational reliability and protect critical business systems. Website: https://colemantechnologies.com

Apogee Global Risk Management Services is a veteran-led firm delivering cybersecurity consulting, risk management services, and threat assessment to organizations in the U.S. and around the world. Backed by certified experts and multinational operations experience, we help clients reduce risk, meet compliance goals, and secure critical systems against evolving cyber threats. Our services include cybersecurity risk assessment, vulnerability management, penetration testing services, incident response planning, and cybersecurity compliance consulting. We also offer virtual CISO support and scalable, mission-ready solutions tailored to SMBs and public sector organizations. Request a tailored cybersecurity plan that protects what matters today. Cybersecurity consulting management, cybersecurity risk management services, cybersecurity staffing & talent acquisition — Apogee Global RMS delivers comprehensive solutions tailored to your organization’s security needs. Visit our site to learn how we can strengthen your cybersecurity posture today.

Rahul Mewawalla has held leadership roles with technology companies across global Fortune 500 companies and Silicon Valley startups, such as Yahoo!, General Electric Company, and Nokia Corporation. He has also served as CEO, President, and Chairman across Nasdaq-listed public companies. Other operating roles include head of platforms and technology businesses, amongst other business and technology leadership roles, and as a public company board director. His experience spans industry-leading platforms, products, and infrastructure across transformative and growth enterprise and consumer businesses. Rahul has extensive technology, business, and innovation expertise and served as an Advisor to Stanford University’s Persuasive Technology Lab, Senior Advisor to the San Francisco Mayor’s Office on Innovation, Chair of Venture Capital Task Force Committee on Services and Systems, and advised the MIT-Stanford Venture Lab. He has received several awards and honors for technology, innovation, and business such as “Silicon Valley’s Top 50 Innovators,” “Top 40 under 40 Leaders” and “Future Mobile Gold Award”. He also led the U.S.’s first digital, technology, and innovation program in Silicon Valley in collaboration with the White House. He has been a speaker and judge at numerous business and technology institutions such as Harvard, MIT, Stanford, Wharton, Yale, University of California and at events such as the Red Herring CEO Conference, Federal Labs Consortium World’s Best Technologies, and the Intel Capital CEO Summit. Rahul has been featured in publications such as Wall Street Journal, CNBC, Harvard Business Review, Financial Times, Bloomberg Businessweek, Newsweek, MIT Technology Review, Fast Company, TechCrunch, VentureBeat, CNN, ABC, FOX, CBS News and Reuters. He has authored numerous business and technology articles and frequently published in publications such as Forbes and Fast Company. He has also served on the boards of six NASDAQ-listed public companies, including as audit committee chair, compensation committee chair, nomination and governance committee, strategic transactions, and M&A committees. He has also served as Chairman of NASDAQ-listed public companies. He is a SEC-qualified and board-deemed audit committee financial expert (ACFE) and also has technology and cybersecurity expertise. He has also served on advisory boards such as at Cisco, Stanford, Yale-Goldman Sachs Foundation, and on philanthropic boards such as Nobel Prize nominee SOS Children’s Villages USA. He holds an MBA from the Kellogg School of Management at Northwestern University, and completed executive education programs at Stanford University and Harvard University.

A pragmatic leader with experience guiding, building, and scaling cybersecurity and privacy programs across sectors. I formerly led the Information Security program for Udemy an EdTech firm. Implemented company-wide cybersecurity and data privacy governance programs for payment organizations, Led service delivery strategy, audits and penetration testing engagements for Consulting organizations and help company stakeholders understand likely business threats and practical methods to minimize risk.