STAR AI Controls Auditor Training Contributors
Contributors to the STAR AI Controls Auditor Training receive a digital badge that demonstrates their collaboration in developing a CSA course. The digital badge recognizes their achievement and can be displayed online on social media, resumes, and professional profiles.
If you have any questions or interest in participating in future course or certificate development, please reach out to CSA at support@cloudsecurityalliance.org.
Reviewers
Hazem Adham
Security and Privacy SME, Protiviti Middle East Member Firm
Hazem is a Subject Matter Expert in Security & Privacy at Protiviti Middle East Member Firm, with international experience across Egypt, Saudi Arabia, Iraq, Libya, and Australia. He has extensive expertise in information security and privacy, focusing on risk identification, mitigation strategies, and delivering actionable reports to clients. His professional background covers international regulations and privacy standards, network sec...
Ozair Malik
Security Researcher, Veeam Software Corporation
Mahdi Rahimi
Senior Cyber Security Manager, Ströer Media Solutions GmbH
Polly Gitau
Cybersecurity Professional and Responsible AI Advocate
Polly Gitau is a cybersecurity professional with deep expertise in developing and implementing robust security frameworks aligned with international standards and regulatory requirements. Experienced across diverse sectors including banking, insurance, mobile payments, manufacturing, and automotive, she specializes in advancing cybersecurity maturity and resilience within complex, multi-stakeholder environments.
Her professional j...
Eder Marques
Director, Payments Security, Royal Bank of Canada
Eder is a seasoned cybersecurity executive and Board member with a solid track record of success helping some of the world’s largest and most complex financial institutions to improve their cybersecurity posture.
He is currently the Director of Payments Security at Royal Bank of Canada (RBC).
With over two decades of experience in three different continents, he served the United Nations building IT infras...
Martin Giguere
Asim Masood
Wells Fargo
Asim Masood, CISA, CISSP, CRISC, is a technology risk leader at Wells Fargo with 20+ years in financial services, specializing in AI governance and vendor risk. He advises Pace University’s cybersecurity board, supports the development of the ISC2 CISSP exam, and founded CSA Lehigh Valley.
Karthikeyan Vaidyalingam
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC
Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.
He has co-chaired...
Ashish Vashishtha
Security Compliance Leader
Analytical, results-oriented IS/IT Audit, Governance, Risk, and Compliance (GRC) leader over 19 years of experience managing enterprise-wide IT/IS security risk approach for large healthcare and IT services organizations. Passionate design thinker with an ability to harness innovation by facilitating collaboration to develop enterprise-wide security risk assessments (onsite as well as remote) for high-risk Third-Parties leveraging NIST 800-...
.jpg)
Pradheep Shrinivasan
Senior Technical Leader, Cisco systems Inc
Pradheep Shrinivasan is a Senior Technical Lead in Cisco’s SBG organization, focused on architecting and delivering secure, cloud-scale networking solutions with a strong emphasis on Zero Trust principles. His expertise spans network security architectures, identity-aware access, micro-segmentation, and cloud-native networking across hybrid and multi-cloud environments. Pradheep works at the intersection of networking, security, and d...
Nestor Reveron
Sr. Technical Trainer, Microsoft
AI & Governance, Risk and Compliance Leader | GenAI Adoption | Speaker | Trainer | PMP® | ITIL | CISA® | AAIA™ | AAISM™ | CISM® | AICP | PECB ISO 42001 | Cobit | CCZT | CEH | GitHubx4 | Microsoftx41 | AWSx7 | GCPx5 | Kubestronaut
✓ Authorized Instructor: Amazon Web Services | Google Cloud | Microsoft | Linux Foundation (Kubernetes) | EC Council | PECB | ISACA
Highly accomplished and ...
Amrutha Sudhakaran
Cyber Risk Manager, Gore Mutual Insurance
Information Security professional with over a decade of experience in GRC. Her career spans across diverse industries, including Media, Insurance, Manufacturing, Oil & Gas, and Government Services, where she has successfully tackled complex cybersecurity challenges. Amrutha holds CISSP and CISM certifications. She is passionate about creating resilient security strategies that align with organizational goals, ensuring robust protection ...
Sachit Malik
Senior Security Engineer, Microsoft AI
Sachit Malik is a Senior Security Engineer specializing in AI and software supply chain security. He previously led several large-scale initiatives at Apple, including the design of enterprise-wide secure code generation frameworks, software supply chain and container security programs, and scalable secure-by-default tooling across thousands of repositories and microservices. His work integrates machine learning, formal methods, and program...
Mark Anthony McDonagh
Information security and compliance, Verodat
Mark McDonagh is a seasoned technology executive and information security specialist with over 25 years of experience in enterprise software development, cloud transformation, and cybersecurity governance. He has led high-performing cloud engineering teams in the telecoms, contact-centre and airline industries, delivering secure, scalable platforms and overseeing compliance programs.
Mark holds a Bachelor's degree in Comp...
Rosina Marmion Arago
Head of information security & compliance
MSc in Information Security with 20+ years of experience across cloud security, payment ecosystem protection, compliance, and emerging AI/ML threat modeling and governance.
Marco Wong
Beril Dindar
Cloud Engineer, D Tech Cloud
I’m Beril Dindar, a Computer Engineer developing end-to-end solutions within the Microsoft ecosystem. My expertise spans Power Platform, Azure AI Foundry, Generative AI solutions, AI Security / Security for AI, Microsoft Fabric, AI and Data Governance.
I transform organizational workflows through AI-powered applications, autonomous agent architectures, RAG-based solutions, HR and operational automations, and secure clou...
Rupesh Paterical
Cybersecurity and AI consultant
Rupesh Paterical is a senior advisory consultant specializing in cybersecurity and AI, with over 20 years of experience in the Middle East. He has advised and delivered cybersecurity and strategic consulting services to leading organizations across the telecommunications, utilities, financial services, and healthcare sectors. His expertise includes greenfield security programs, regulatory and compliance assessments, and enterprise-scale clo...
.JPG)
Mehmet Emre Ates
Cloud Security Director, Dtech Cloud
With over 21 years of experience, I operate at the intersection of complex engineering and executive strategy. My role is to bridge the gap between technical defense mechanisms and board-level risk management. Whether securing hybrid, cloud or ensuring the 24/7 broadcast continuity of a major media conglomerate, my mission remains the same: Zero Trust, Zero Downtime, and Absolute Integrity.
Bilal Dursun
IT & Software Project Lead, Independent Tech Consultant
IT & Software Project Lead with over 15+ years of experience in software development, IT infrastructure, systems architecture, and data analytics. Holding both MSc and BSc and Assc degrees, I specialize in delivering scalable, mission-critical systems and leading cross-functional teams to ensure business continuity. My engineering philosophy is built on a strict "Resilience Protocol," focusing deeply on edge cases, failure sta...
Craig Rydalch
Senior Director Risk and Compliance
.png)
Sanitra Angram
Audit Project Manager, Sr. Lead, First Horizon Corporation
Sanitra Angram is an accomplished IT audit leader with a decade of experience spanning internal audit, information security, and regulatory bank examinations. As a Senior Lead Audit Project Manager, she drives risk-based assurance initiatives that strengthen governance, data protection, and technology resilience across complex environments.
Sanitra holds an MBA from the University of Memphis and multiple globally recognized c...
Manish Mishra
Senior Technical Account Manager, Amazon Web Services
Technology leader with over 18+ years of experience in cloud operational excellence, cloud security and enterprise automation. Provides technical leadership and best practices guidance to build best-in-class architecture, and robust and scalable solutions in the cloud helping them achieve their desired business outcome.
Goutama Bachtiar
Board Member, Global Advisory Board, Subject Matter Expert, Multi-Fellow
Goutama Bachtiar is an accomplished technology advisory leader with over two decades of experience in Governance, Risk and Compliance on IT, Cybersecurity, and Artificial Intelligence. Awarded as a fellow of multiple global institutes (Royal Society of Arts, Manufactures and Commerce, FINSIA and OneTrust, among others), he has over thirty global credentials, is a Global Awards Judge, and an International Advisory ...
Guido Orlando Garrido Narváez
Defensive Cybersecurity Manager Senior - AI Risk and Security, Banco de Credito BCP
MBA Usach - Magister en Seguridad, Peritaje y Auditoria en Procesos Informáticos | CEHv10| IL 27001| Al 27001 | IL22301
Priya Mohan
Manager, Cybersecurity & Tech Risk, KPMG
Cybersecurity and AI governance leader with 9+ years of experience, currently a Manager at KPMG, leading multi-million-dollar compliance and technology risk programs for global clients, impacting systems serving 7B+ users and $40B+ in revenue. Author and instructor of LinkedIn Learning courses on AI and data governance reaching 50,000+ professionals worldwide and adopted by top universities, alongside contributions to industry standards suc...
Akhilesh Mahesh
Phil Garrelhas
Director, Threat Intelligence Services, CIBC
Cameron Page
Information Assurance & GRC Specialist
Milankumar Rana
.jpg)
Anitha Dakamarri
Lead Security Engineer, Donnelley Financial Solutions
I am Anitha Dakamarri, a seasoned IT professional with over 19 years of experience in the field of information security. Over the years, I have honed my skills in various domains, including threat modeling, application security assessments, and network security assessments. My work experience spans across reputable organizations like DFIN, USCELLULAR, and Syntel Inc., where I have led teams, developed security standards, and implemented rob...
Renu Bedi
Manager-IT Security
Joyce Tiwari
Head of InfoSec and TechOps, Tarabut
Patrice Cheesman
Risk Management, Cloud Security, AI Governance, Data and Privacy Risk, Cybersecurity Compliance
Guillaume Boutisseau
CCSK and CCZT Instructor , Cloud Security Architect
Guillaume has been a CSA Authorized Instructor since 2018 ans has contributed to the development of CCSK version 5 and CCZT.
He has worked on cloud migrations and deployments since 2014, and has developed a strong expertise in the technical, business and security aspects of cloud computing. He also holds CISSP, CCSP, CCSK, CCZT, CCAK, CISMP certifications, as well as TOGAF, AWS, and Artificial Intelligence certifications.
Kathiravan Thangavelu
Principal Cloud Solution Architect, Microsoft
Kathiravan Thangavelu is a Principal Cloud Solution Architect where he leads the design and delivery of large-scale cloud and AI solutions for enterprise customers.
With deep expertise in Azure, AI, Security and multi-agent systems, Kathir works closely with business and engineering leaders to modernize applications, build intelligent platforms, and drive digital transformation across industries.
Kathir is also an active speak...
Dr. Onkar Nath
Cybersecurity Strategist, Freelancer
Dr. Onkar Nath is a distinguished cybersecurity leader with extensive expertise in information security, cyber risk management, cloud security, artificial intelligence and IT governance. As the former Chief Information Security Officer (CISO), he spearheaded the cybersecurity strategy and security operations for one of India’s major public sector banks. In this role, he played a pivotal part in strengthening the security posture of cr...
Diego Angelo Bolatti
George Joseph
Vice President
Sanjog Bhatta
Rammohan Goud Karnati
Malith Fernando
Head of Information Security
I’m a cybersecurity professional and AI security enthusiast with over nine years of experience protecting enterprise environments across the financial, software, and manufacturing sectors.
Currently serving as Head of Information Security at Intervest Software Technologies (Pvt) Ltd, I design and implement organization-wide security strategies, manage governance and risk, and lead security operations across hybrid cloud...
Jayasudha Yedalla
Peter van Eijk
Head Coach at ClubCloudComputing.com
Dr. Peter van Eijk is one of the world's most experienced cloud trainers. He offers CCSK as an instructor-led online course, as well as in-person. He is an authorized CSA CCSK (since 2011) and (ISC)2 CCSP trainer with a passion to make you more effective in your work.
.jpg)
Chigozie Ejeofobiri
Network Security Operations
As a seasoned Network Security Architect with a track record of 14+ years, I've been instrumental in fortifying enterprise networks for global clients. My focus includes network perimeter security, Zero-trust designs, and seamless project coordination in both on-premises and cloud environments (AWS, Azure, Oracle cloud). My expertise spans Next-Gen Firewalls (Cisco, Check Point, Palo Alto, FortiGate), Identity and access management (Cis...
Staff
Anna Campbell McKee
Training Program Director, CSA
Anna Campbell McKee is the Director of Training Programs at the Cloud Security Alliance (CSA), where she leads global education programs focused on cybersecurity best practices. She oversees CSA’s flagship certifications, the Certificate of Cloud Security Knowledge (CCSK) and the Certificate of Competence in Zero Trust (CCZT), which have received top industry honors, including recognition for Best Cloud Security Certification and Cutt...
Tara Hanson
Training Project Manager, CSA
Hannah Rock
Content Development Manager, CSA
Marina Bregkou
Principal Research Analyst, Associate VP, CSA
Stephen Smith
Senior Graphic Designer, CSA
John DiMaria
Chief of Staff, CSA
John DiMaria; CSSBB, HISP, MHISP, AMBCI, CERP is the Director of Operations Excellence and Research Fellow with the Cloud Security Alliance. He has 40 years of experience in Standards and management System Development, including Information Systems, Business Continuity, and Quality. John was one of the innovators and co-founders of the CSA STAR programs Open Certification Framework for cloud providers and developed the first certification s...