STAR Lead Auditor Training Contributors
Reviewers
Renu Bedi
Manager-IT Security
Mark McDonagh
Head of information security, Verodat
With more than 25 years in the Software industry Mark has consistently delivered best in class results in roles including Software development, Team leadership, product management, Head of Technology and Head of Information security. Mark holds a first class Honors Masters in Cyber security, a Postgraduate degree in Executive Management as well as numerous professional accreditations including: CISM, CCSK, PMI-ACP, PMI-DASSM, PSM, SPS, PSPO...
Manish Mishra
Senior Technical Account Manager, Amazon Web Services
Technology leader with over 18+ years of experience in cloud operational excellence, cloud security and enterprise automation. Provides technical leadership and best practices guidance to build best-in-class architecture, and robust and scalable solutions in the cloud helping them achieve their desired business outcome.
Malith Fernando
Head of Information Security
I’m a cybersecurity professional and AI security enthusiast with over nine years of experience protecting enterprise environments across the financial, software, and manufacturing sectors.
Currently serving as Head of Information Security at Intervest Software Technologies (Pvt) Ltd, I design and implement organization-wide security strategies, manage governance and risk, and lead security operations across hybrid cloud...
Heinrich Smit
CISO at Linked Systems & Risk Management at Semperis
Heinrich is a recognized Information Protection and Zero Trust expert who started out in Law, and pivoted to his love of technology during the Tech Boom. He has led teams at software innovators and large financial institutions, has authored entire Information Security Policy stores, and has protected data at both 280,000 seat regulated enterprises and SAAS-based startup unicorns. He is passionate about Privacy and Zero Trust, as well as Def...
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC
Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.
He has co-chaired...
Asim Masood
Wells Fargo
Asim Masood, CISA, CISSP, CRISC, is a technology risk leader at Wells Fargo with 20+ years in financial services, specializing in AI governance and vendor risk. He advises Pace University’s cybersecurity board, supports the development of the ISC2 CISSP exam, and founded CSA Lehigh Valley.
Cameron Page
Information Assurance & GRC Specialist
.jpg)
Anitha Dakamarri
Lead Security Engineer, Donnelley Financial Solutions
I am Anitha Dakamarri, a seasoned IT professional with over 19 years of experience in the field of information security. Over the years, I have honed my skills in various domains, including threat modeling, application security assessments, and network security assessments. My work experience spans across reputable organizations like DFIN, USCELLULAR, and Syntel Inc., where I have led teams, developed security standards, and implemented rob...
Dr. Onkar Nath
Cybersecurity Strategist, Freelancer
Dr. Onkar Nath is a distinguished cybersecurity leader with extensive expertise in information security, cyber risk management, cloud security, artificial intelligence and IT governance. As the former Chief Information Security Officer (CISO), he spearheaded the cybersecurity strategy and security operations for one of India’s major public sector banks. In this role, he played a pivotal part in strengthening the security posture of cr...
Patrice Cheesman
Risk Management, Cloud Security, AI Governance, Data and Privacy Risk, Cybersecurity Compliance
George Joseph
Vice President
Tosin Ojo
.jpg)
Henry Hon
Senior Lead Security Professional, Lumen Technologies
Henry is a dedicated cybersecurity professional with over 20 years of experience spanning multiple industries. He excels in both individual and team roles, effectively bridging the gap between business and technical stakeholders. Henry is a firm believer in lifelong learning, embracing the philosophy that no one knows everything and continuous growth is essential.
Ashish Vashishtha
Security Compliance Leader
Analytical, results-oriented IS/IT Audit, Governance, Risk, and Compliance (GRC) leader over 19 years of experience managing enterprise-wide IT/IS security risk approach for large healthcare and IT services organizations. Passionate design thinker with an ability to harness innovation by facilitating collaboration to develop enterprise-wide security risk assessments (onsite as well as remote) for high-risk Third-Parties leveraging NIST 800-...
Swapneel Khandagale
Diego Angelo Bolatti
Jayasudha Yedalla
Larry Timmins
Technical Project Lead II, PMP, IT Cyber Risk
Hazem Adham
Security and Privacy SME, Protiviti Middle East Member Firm
Hazem is a Subject Matter Expert in Security & Privacy at Protiviti Middle East Member Firm, with international experience across Egypt, Saudi Arabia, Iraq, Libya, and Australia. He has extensive expertise in information security and privacy, focusing on risk identification, mitigation strategies, and delivering actionable reports to clients. His professional background covers international regulations and privacy standards, network sec...
Rosina Marmion Arago
Head of information security & compliance
MSc in Information Security with 20+ years of experience across cloud security, payment ecosystem protection, compliance, and emerging AI/ML threat modeling and governance.
.jpg)
Chigozie Ejeofobiri
Network Security Operations
As a seasoned Network Security Architect with a track record of 14+ years, I've been instrumental in fortifying enterprise networks for global clients. My focus includes network perimeter security, Zero-trust designs, and seamless project coordination in both on-premises and cloud environments (AWS, Azure, Oracle cloud). My expertise spans Next-Gen Firewalls (Cisco, Check Point, Palo Alto, FortiGate), Identity and access management (Cis...
Nestor Reveron
Sr. Technical Trainer, Microsoft
AI & Governance, Risk and Compliance Leader | GenAI Adoption | Speaker | Trainer | PMP® | ITIL | CISA® | AAIA™ | AAISM™ | CISM® | AICP | PECB ISO 42001 | Cobit | CCZT | CEH | GitHubx4 | Microsoftx41 | AWSx7 | GCPx5 | Kubestronaut
✓ Authorized Instructor: Amazon Web Services | Google Cloud | Microsoft | Linux Foundation (Kubernetes) | EC Council | PECB | ISACA
Highly accomplished and ...
Goutama Bachtiar
Board Member, Global Advisory Board, Subject Matter Expert, Multi-Fellow
Goutama Bachtiar is an accomplished technology advisory leader with over two decades of experience in Governance, Risk and Compliance on IT, Cybersecurity, and Artificial Intelligence. Awarded as a fellow of multiple global institutes (Royal Society of Arts, Manufactures and Commerce, FINSIA and OneTrust, among others), he has over thirty global credentials, is a Global Awards Judge, and an International Advisory ...
Mikhail Sokolov
Product GRC Specialist
GRC cybersecurity expert with more than a decade of experience, driven by a passion for technology and a curiosity about the risks that lie beneath it
Sedat Salman
Solutions and Consultancy Manager
.jpg)
Pradheep Shrinivasan
Senior Technical Leader, Cisco systems Inc
Pradheep Shrinivasan is a Senior Technical Lead in Cisco’s SBG organization, focused on architecting and delivering secure, cloud-scale networking solutions with a strong emphasis on Zero Trust principles. His expertise spans network security architectures, identity-aware access, micro-segmentation, and cloud-native networking across hybrid and multi-cloud environments. Pradheep works at the intersection of networking, security, and d...
Uttej Badwane
Uttej is a seasoned cybersecurity professional with nearly a decade of experience protecting some of Silicon Valley's leading tech companies. He actively contributes to security organizations while dedicating time to mentoring and developing the next generation of cybersecurity talent.
Guido Orlando Garrido Narváez
Defensive Cybersecurity Manager Senior - AI Risk and Security, Banco de Credito BCP
MBA Usach - Magister en Seguridad, Peritaje y Auditoria en Procesos Informáticos | CEHv10| IL 27001| Al 27001 | IL22301
Frank O. Iheonu
Managing Consultant/Qualified Security Assessor at Digital Jewels Africa Limited
Alex Rebo
Enterprise Security Architect
30+ years of Information Security / Assurance, Risk Management in private and public sectors.
CEA, PMP, CISSP, CCSP, ITIL, AWS CSA-A
Guillaume Boutisseau
CCSK and CCZT Instructor , Cloud Security Architect
Guillaume has been a CSA Authorized Instructor since 2018 ans has contributed to the development of CCSK version 5 and CCZT.
He has worked on cloud migrations and deployments since 2014, and has developed a strong expertise in the technical, business and security aspects of cloud computing. He also holds CISSP, CCSP, CCSK, CCZT, CCAK, CISMP certifications, as well as TOGAF, AWS, and Artificial Intelligence certifications.
Beril Dindar
Cloud Engineer, D Tech Cloud
I’m Beril Dindar, a Computer Engineer developing end-to-end solutions within the Microsoft ecosystem. My expertise spans Power Platform, Azure AI Foundry, Generative AI solutions, AI Security / Security for AI, Microsoft Fabric, AI and Data Governance.
I transform organizational workflows through AI-powered applications, autonomous agent architectures, RAG-based solutions, HR and operational automations, and secure clou...
Ashish Mehta
Cybersecurity - Sr. Risk Manager & Security Architect
Ashish Mehta has extensive experience in cybersecurity, blockchain, web development, IT management, financial markets, and the energy industry.
He currently serves as Co-Chair of the Blockchain Working Group and is a part of the Internet of Things (IoT) and Quantum-Safe Security Leadership Teams at the Cloud Security Alliance. In that capacity, he is responsible for pushing their multiple research efforts as well as coordinating with ...
Bilal Dursun
IT & Software Project Lead, Independent Tech Consultant
IT & Software Project Lead with over 15+ years of experience in software development, IT infrastructure, systems architecture, and data analytics. Holding both MSc and BSc and Assc degrees, I specialize in delivering scalable, mission-critical systems and leading cross-functional teams to ensure business continuity. My engineering philosophy is built on a strict "Resilience Protocol," focusing deeply on edge cases, failure sta...
Joyce Tiwari
Head of InfoSec and TechOps, Tarabut