SPEAKERS
RANSOMWARE RESILIENCE 2026
Ts. Wan Roshaimi Wan Abdullah
CTO
Ts. Wan Roshaimi Wan Abdullah is a seasoned cybersecurity professional with over 25
years of experience. He has a proven track record in cybersecurity risk management,
strategic planning, and operational excellence. His expertise spans advisory roles,
cybersecurity governance, compliance, and operations management.
Previously, he held leadership positions at renowned organizations such as the Gulf
Organization for Research & Development, Permodalan Nasional Berhad (PNB), MEPS
Sdn Bhd, PwC Consulting Services, BAE Systems Detica, and Sapura Secured
Technologies.
As the Chief Technology Officer (CTO) and Chief Information Security Officer (CISO) of
CyberSecurity Malaysia, Wan Roshaimi is responsible for leading the strategic and
operational efficiency of 3 technical divisions: Responsive Technology & Services,
Proactive Technology & Services, and Pre-Emptive Technology & Services.
Wan Roshaimi holds a Bachelor of Science in Computer Science from the University of
Wisconsin-Madison, USA, and is certified as a Certified Chief Information Security Officer
(C|CISO) by EC Council and Certified Information Systems Security Professional (CISSP)
by (ISC)2.
JASON MURRELL
Co-Founder
Jason Murrell is a cyber security strategist, investor and keynote speaker who helps boards, CISOs and founders turn cyber risk into competitive advantage. He is Co-Founder of Murfin Group, former Chair of the Australian Cyber Network (ACN) and current Chair of DSI’s SMB1001 security standard. Jason also serves as Entrepreneur in Residence to the AU $100m Fusion the next wave of deep tech scaleups.
He has advised government agencies, ASX boards and global technology firms on ransomware response, identity security, privacy regulation and resilience. A repeat founder and early investor across award winning ventures, from consumer brands to cutting edge cyber and AI, Jason blends policy insight, breach war stories and startup pragmatism. He regularly leads executive briefings and publishes industry insight, including the ACN State of the Industry work. Jason’s sessions are known for clarity, actionable playbooks and measurable outcomes.
Chirag Joshi
CISO & Founder
Chirag Joshi is a globally recognised cyber security leader, author, and the Founder and CISO of 7 Rules Cyber — an award-winning advisory firm known for enabling strategic, efficient, and defensible cyber security outcomes across sectors.
A multi-award-winning executive, Chirag was named Cyber Security Consultant of the Year (SME) at the 2025 Australian Cyber Security Awards, marking his second win in this category. He previously received the Excellence Award and has been recognised on the CSO30 list of Australia’s top cyber security executives for three consecutive years (2022–2024).
Chirag brings global leadership experience across critical infrastructure, financial services, government, energy, healthcare, higher education, consulting, and the not-for-profit sector. He has led major cyber transformation programs, advised boards and executives, and guided organisations through M&A activity, regulatory change, and operational technology risk - always with a pragmatic, business-aligned approach. He is the author of two bestselling books - 7 Rules to Become Exceptional at Cyber Security and 7 Rules to Influence Behaviour and Win at Cyber Security Awareness - which have reshaped how leaders think about strategy, influence, and culture in cyber.His thought leadership is regularly featured by notable organisations such as the Australian Institute of Company Directors, the Governance Institute of Australia, and leading industry publications.
As a keynote speaker, Chirag presents at premier conferences globally, sharing insights drawn from real-world challenges and strategic engagements. Chirag also serves as President of ISACA Sydney, where he leads initiatives that advance professional development and thought leadership across the cyber, risk, and governance community. In addition, he is the National Ambassador for the Critical Infrastructure ISAC Australia, promoting trusted collaboration, threat intelligence sharing, and enhanced cyber resilience across Australia’s most essential sectors.
A multi-award-winning executive, Chirag was named Cyber Security Consultant of the Year (SME) at the 2025 Australian Cyber Security Awards, marking his second win in this category. He previously received the Excellence Award and has been recognised on the CSO30 list of Australia’s top cyber security executives for three consecutive years (2022–2024).
Chirag brings global leadership experience across critical infrastructure, financial services, government, energy, healthcare, higher education, consulting, and the not-for-profit sector. He has led major cyber transformation programs, advised boards and executives, and guided organisations through M&A activity, regulatory change, and operational technology risk - always with a pragmatic, business-aligned approach. He is the author of two bestselling books - 7 Rules to Become Exceptional at Cyber Security and 7 Rules to Influence Behaviour and Win at Cyber Security Awareness - which have reshaped how leaders think about strategy, influence, and culture in cyber.His thought leadership is regularly featured by notable organisations such as the Australian Institute of Company Directors, the Governance Institute of Australia, and leading industry publications.
As a keynote speaker, Chirag presents at premier conferences globally, sharing insights drawn from real-world challenges and strategic engagements. Chirag also serves as President of ISACA Sydney, where he leads initiatives that advance professional development and thought leadership across the cyber, risk, and governance community. In addition, he is the National Ambassador for the Critical Infrastructure ISAC Australia, promoting trusted collaboration, threat intelligence sharing, and enhanced cyber resilience across Australia’s most essential sectors.
Tanvinder Singh
Cyber Security & Privacy Director
Tanvinder Singh is a Director within the Cyber Security practice of PwC Malaysia. He has 18 + years of cross industry experience in defining, developing, and executing change and cybersecurity strategies in large organisations. He has a proven record of accomplishment as a thought-leader with broad subject matter knowledge in information security domains and success in developing and implementing cybersecurity technologies for large institutions. Tanvinder is adept at managing both projects and people, as seen through his experience in formulating technology strategy and platform architecture while leading momentous change initiatives across cybersecurity.
LUKAS STEFANKO
Malware Analyst
Lukas Štefanko is an experienced malware researcher with a strong engineering background and a well-demonstrated focus on Android malware research and security. With more than 13 years’ experience with malware, he has been focusing on improving detection mechanisms of Android malware and in the past couple of years has made major strides towards heightening public awareness around mobile threats and app vulnerabilities. He has presented at several security conferences such as RSA, Virus Bulletin, Confidence, DefCamp, BountyCon, AVAR, CARO Workshop, Infoshare, Ekoparty, Code Blue, and Copenhagen CyberCrime.
Muhammad Dawud Wilmot
Executive Director
Muhammad Dawud leads client engagements out of KPMG’s Technology Risk and Cyber Security Advisory unit in Malaysia. He brings more than 23 years of experience in cyber security, IT audit and assurance.
Prior to joining KPMG, he was the head of cyber security, cloud and infra management at Maxis Berhad and had also worked in leading tech companies such as Intel, Celcom Axiata, and Symantec. His career progression entailed achieving various cyber security certifications including the CISSP, CBCP, CISM, CISA, and ISO 27001 Lead Auditor.
Accreditation
Certified Information Systems Security Professional (CISSP)
Certified Business Continuity Professional (CBCP)
Certified Information Security Manager (CISM)
Certified Information Systems Auditor, ISACA
ISO 27001 Lead Auditor
Accreditation
Certified Information Systems Security Professional (CISSP)
Certified Business Continuity Professional (CBCP)
Certified Information Security Manager (CISM)
Certified Information Systems Auditor, ISACA
ISO 27001 Lead Auditor
Abhinav Mishra
Founder
Abhinav Mishra a.k.a 0ctac0der, is an Application Security Researcher with over 13 years of experience in penetration testing across web, mobile, and infrastructure. He is the founder of ENCIPHERS, where he leads offensive security projects, including penetration testing, red teaming, and specialized training programs. In addition to his deep expertise in traditional security domains, Abhinav has expanded his focus to
include AI security, with experience in assessing the robustness of machine learning models, securing AI-powered applications, and researching adversarial attack techniques. He has been actively involved in helping organizations integrate secure AI systems into their existing infrastructure.
He holds numerous accolades & rewards for finding security issues through responsible disclosure programs. He is a well-known trainer, speaker, cyber security strategist and ethical hacker in the information security community, where he majorly talks about the offensive security/penetration testing/responsible disclosures/AI Security. He authored the book "Mobile App Reverse Engineering". Abhinav has trained security professionals globally on web, mobile, infrastructure, and AI-driven application hacking, bringing real-world insights and hands-on experience to his highly rated sessions.
JELENA MATONE
CISO
Jelena Matone is a respected and leading CISO at European Investment Bank, who was awarded the CISO of the year for 2019 in Luxembourg, and recently ‘CISO Sentinel GLOBAL’. Jelena is a versatile and innovative Cybersecurity professional with emphasis on cyber security risk management, policies and procedures creation, IT/IS security, IT Operations, audit, risk mitigation, business process improvement and IT governance. She is also a member of World Economic Forum, Founding board member and first president of Women4Cyber & Woman Cyber Force.
Prior to her current role at EIB, Jelena served as the Senior Operational Risk and ISO for the European Stability Mechanism, the crisis resolution mechanism for euro area countries. The ESM issues debt instruments in order to finance loans and other forms of financial assistance to euro area Member States. Earlier in her career, Jelena managed IT Audit and Compliance for Sobey’s, one of the two national grocery retailers in Canada and Audit, Corporate Development, M&A and growth strategies and IT Audit for George Weston, one of the Canada’s largest publicly traded food processing and distribution companies.
PETER MOSMANS
Founder
Peter Mosmans started out in the nineties as a software engineer working on internet banking applications for various European financial institutions.
Then he moved to the role of defending and designing systems and networks for high-availability web sites. Since 2004 he started specializing in
breaking: pentesting complex and feature-rich web applications. Currently he spends his time on teaching secure coding principles, consulting companies on DevSecOps, and penetration testing.
DANISH TARIQ
Director, Cyber Security
Danish Tariq is a Security Engineer by profession and a Security researcher by passion. He has been working in Cyber Security for over 8 years and it all started out of a curiosity to break things and look deep down into those things (physical or virtual) back in his teenage years. His major expertise is Penetration Testing and Vulnerability Assessments.
- He was also involved in bug bounty programs as well, where he helped many companies by finding vulnerabilities at different levels. Companies include Microsoft, Apple, Nokia, Blackberry, Adobe, etc. He spoke at Blackhat MEA and was featured in "The Register" for an initial workaround for the NPM dependency attacks.
Certified Ethical Hacker, Certified Vulnerability Assessor (CVA), Certified AppSec Practitioner, Certified Network Security Specialist (CNSS), IBM Cyber Security Analyst.
KEVIN O’ LEARY
CISO
Kevin O’Leary is the leader of the Security and Resiliency practice at Kyndryl, assisting customers across the region in navigating their cyber risks with confidence, meeting regulatory requirements, and becoming operationally resilient. O’Leary brings over 25 years of extensive experience as a chief information security officer (CISO), cybersecurity subject matter expert, and IT executive. His career includes leadership roles across Asia, Australia, Europe, and the Middle East, working with major multinational companies in industries such as finance, manufacturing, and technology.
Before joining Kyndryl, O’Leary served as the APAC Regional CISO and head of Cybersecurity and Technology Controls for JP Morgan. Earlier in his career, he was the field chief security officer for Palo Alto Networks, APJ, where he promoted cybersecurity strategies across Asia Pacific and Japan.
ABID ADAM
Group Chief Risk & Compliance Officer
Abid Adam is a recognized leader in Cybersecurity, Data Privacy, Enterprise Risk Management, and Compliance. As the Group Chief Risk & Compliance Officer (GCRCO) at Axiata Group, he has led transformative initiatives across Asia, Africa, and Latin America, driving strategic advancements in these critical areas.
Abid's influence extends to global forums, actively contributing to the World Economic Forum's Digital ASEAN initiatives and the Pan ASEAN Data Policy and Cybersecurity Taskforce. His commitment to a secure digital economy is central to his mission of aligning technological growth with robust security measures.
In addition to his executive role, Abid served as an adjunct professor at Deakin University, shaping future leaders in cybersecurity. With a background in Computer Science and professional credentials including CISSP, CISM, CRISC, and MBCI, Abid is dedicated to fostering a safer, more secure digital landscape.
INDRANI CHANDRASEGARAN
Senior Director Technology Advisory
Indrani Chandrasegaran is Senior Director of Consulting and Technology Advisory, APAC at vCyberiz, with over 24 years of global experience in cybersecurity leadership. She has held executive roles at EY, Accenture, Infosys Compaz, Trusted Source (Temasek), and Symantec, driving major cyber transformations across APAC, the Middle East, and Europe. Recognized among the Top 20 Cyber Women in Singapore and Top 30 in ASEAN, she advises boards on resilience and AI governance. Indrani also serves on customer and partner advisory boards of leading global cybersecurity vendors as a recognized thought leader shaping industry perspectives on Ai led resilience and digital trust.
Shahmeer Amir
CEO & Co-Founder
Shahmeer Amir stands as a globally recognized Entrepreneur, world renowned public speaker and Ethical Hacker, awarded Entrepreneur of the year 2024 for founding multiple startups including Speeqr and also ranking as the third most accomplished bug hunter globally. Shahmeer has been invited to speak at 130 international conferences including Blackhat, DefCON, GiSec, National Security Summit, One Conference, and International Cyber Security. His expertise has been instrumental in assisting over 400 Fortune companies, such as Facebook, Microsoft, Yahoo, and Twitter, in resolving critical security issues within their systems. Shahmeer's entrepreneurial ventures in the technology realm have led to the establishment of multiple startups, with his current role involving the leadership of Speeqr, and involvement in Veiliux and Authiun. He serves as the Cyber Security Advisor to the Ministry of Finance in the Government of Pakistan. His involvement spans various projects, including Deep Sea Tracking, Digital Transformation of Legislation, and the Digitization of Pakistani Cultural Content. As a testament to his influence in the tech industry, he holds a position on the Forbes Technology Council.
Dr. Carrine Teoh
President (Cybersecurity & Governance)
DR. CARRINE TEOH CHOOI SHI (CISSP, CBCP) is Chief Strategy Officer at Bond
Holdings. With over 20 years of experience in engineering technology and
cybersecurity, her areas of expertise are CNI protection, standards and privacy.
She has vast experience in cybersecurity frameworks and policy, ISO 27001,
Common Criteria, PDPA, Cyber Ethics and Critcal Infrastructure Protection. She
is passionate about developing the next generation of cybersecurity talents, by
mentoring and sharing her knowledge and skills.
Dr Carrine is President of ASEAN CIO Association (Cybersecurity & Governance
Chapter) and Vice President for Nanyang Technological University Singapore
Alumni (Malaysia). In addition, she is Global Chapter
Security & Cyber Security Committee in Della Leaders Club, global forum of
leaders that brings people to positively impact the world. She is also VigiTrust
Global Advisory Board member. She is part of Organisation for Women in
Science for the Developing World (OWSD), Association of Information System
(AIS) and Malaysian Institute of Management. She was part of the team which
spearheaded Malaysian Women in Security (MYWiS).
Dr Carrine was awarded Top 30 Women in Cybersecurity in ASEAN 2021. She
was appointed Awards Selection Committee for Cybersecurity Woman of the
Year 2021. In 2021, she was named as Top 10 Linkedin ASEAN Cybersecurity
Influencers 2021. Dr Carrine was awarded Top 10 Women in Security in
Malaysia 2020. She had also hold advisory board and jury roles in IndoSec
Conference 2022 (Indonesia) and PhilSec Conference 2022 (Philipines), and
appointed judge for ASEAN Women in Security Award 2022 and Top Women
Tech Leaders Awards 2024.
Dr. Syarifah B. Rahayu
Cyber Security Director
Dr. Syarifah Bahiyah Rahayu received the B.S.B.A. degree in Computer Information Systems from Northern Arizona University (NAU), USA, the M.Sc. degree in Information Technology from Queensland University of Technology (QUT), Australia, and the Ph.D. degree in Information Science from Universiti Kebangsaan Malaysia (UKM), Malaysia. She is currently the Director of the Cyber Security and Digital Industry Revolution Centre at the National Defence University of Malaysia (NDUM), where she also serves as a Senior Lecturer in the Faculty of Defence Science and Technology. Her academic and professional background spans both industry and academia, including prior roles as a Tutor at NAU, Academic Trainee and Lecturer at Universiti Teknologi PETRONAS (UTP), and IT Consultant. At NDUM, she has contributed to national digital defence initiatives and leads research on emerging technologies. Dr. Syarifah has published over 30 peer-reviewed articles in high-impact journals and international conference proceedings, and holds several intellectual property rights. Her research interests include cybersecurity, blockchain, artificial intelligence, image processing, and big data analytics. She is an active member of IEEE, the IEEE Education Society, and the IEEE Blockchain Community.
SADEED TIRMIZEY
CISO
Sadeed Tirmizey is a seasoned cyber security leader with over 20 years of experience across the industry. He’s held senior roles at Airservices Australia, Queensland Health, and is currently the CISO at Seqwater. Sadeed is known for building high-performing security programs that support business goals, not slow them down. He brings a strong focus on strategy, risk, and culture — making cyber a partner in growth, not just a gatekeeper. In his words: ‘Cyber shouldn’t slow you down — it should keep you in business.’
Chris Cubbage
Director
Chris Cubbage is Director and Executive Editor for MySecurity Media and principal security consultant with Amlec House. With over 30 years’ experience, Chris is a multi-certified security professional with a formative 15 years policing background, including as a Homicide Detective and Australian Crime Commission Senior Investigator. Chris is author of Corporate Security in the Asia Pacific Region, Security Risk Management in Corporate Governance and publisher of Cyber Risk Leaders by Shamane Tan. Chris is host of MySec.TV, Cyber Security Weekly Podcast and editor of the Australian Cyber Security Magazine and Cyber Risk Leaders Magazine.
Christopher Chai
Solution Director, APJC
Christopher Chai, Solution Director (APJC) at Hackuity, has over 10 years of experience helping organizations strengthen their cybersecurity posture.
A strong advocate of the Vulnerability Operations Center (VOC) framework, he focuses on unifying vulnerability data to help teams make faster, risk-based decisions.
Hassan Khan Yusufzai
Co-Founder
Hassan Khan is a highly experienced Security Researcher with a proven track record of internet-wide scanning and penetration testing. A sought-after speaker, Hassan recently presented at the BlackHatMEA 2022, 2023 conference. His expertise extends to Ruby security, where he has conducted extensive research over the past few years. As a certified OSCP (Offensive Security Certified Professional), Hassan has also made a name for himself as a successful bug bounty hunter on both HackerOne and Bugcrowd.
His achievements have earned him recognition in the industry, including inclusion in the Google Security Hall of Fame (2017), Twitter Security Hall of Fame (2017), and Microsoft Security Hall of Fame (2017). He has also conducted extensive research into WordPress security and won the HackFest CTF competition.
In addition to his research, Hassan is also the developer of several security testing tools and an npm scanner for account hijacking, further demonstrating his commitment to the security field and his skills as a developer.
Daniel Tan
Regional Head, Solution Engineering, Asia
Daniel Tan, or known as DT is currently holding the position of Regional Head of Solution Engineering for Commvault. He leads a team of talented solutions engineers across the region of Japan, Korea, Southeast Asia, and Greater China, responsible for enablement and delivery of Commvault’s industry-leading data protection and cyber resilience solutions to customers and partners.
DT brings 17 years of experience spanning across diversified domains such as networking, data center, virtualization, and application modernization. Prior to Commvault, DT spent 4 years with VMware and 11 years with Cisco respectively, in various engineering & leadership positions.
With an avid interest in cybersecurity, he was actively involved in ethical hacking community and a non-profit cybersecurity conference known as “Hack in The Box”. DT graduated with a Bachelor of Science on information systems engineering, and a Master of Business Administration (MBA) degree from Imperial College London.
Zara Laila Cheong
Cyber Security Officer
Zara Laila Cheong is a Cyber Security Officer with Cyber Security Brunei (CSB) and the Information Technology Protective Security Services (ITPSS), where her work focuses on strengthening Brunei Darussalam’s national cyber resilience, advancing cyber defense capabilities, and supporting capacity building across public and private sectors. She also serves as a Teaching Assistant at Universiti Brunei Darussalam (UBD), contributing to modules in cybersecurity, digital forensics, and blockchain, while pursuing a PhD in Cybersecurity and Digital Forensics.
Zara maintains a strong national and international presence as a cybersecurity speaker, trainer, and advocate. She was among the first speakers at the ASEAN For The People Conference, where she addressed the regional challenge of protecting communities from the rising threats of cybercrime and online scams. Her engagements span major platforms including Google DevFest, the Brunei Mid-Year Conference and Exhibition (MYCE), Girls in ICT Brunei, Brunei’s first Cyber Security Conference, Cyber Battle Capture the Flag, and BruCERT’s Women in Cybersecurity webinar series.
In recognition of her leadership and impact, Zara has received multiple accolades, including the Top Woman in Security ASEAN Region 2025 Award, Security Professional Ambassador 2025 Award, Security Trainer and Educator Award, and the Cyber Security Officer Award. She was previously selected for the Women in Foreign Policy Fellowship Southeast Asia Edition and recognized at the Brunei ICT Awards, and has contributed regional cybersecurity analysis in collaboration with FACTS Asia and the East-West Center in Washington.
Zara is a GIAC Certified Web Application Defender (GWEB), with expertise in securing web applications, APIs, and microservices, including access control, authentication, input validation, encryption, proactive defense, and incident readiness. She is an active member of the Brunei Cyber Security Association and is deeply committed to mentoring youth and championing pathways for women to lead in cybersecurity, contributing to a safer, more inclusive digital future for Brunei Darussalam and the wider ASEAN region.
Chaatish Rajandain
SOC Lead
Chaatish Rajandain is a cybersecurity professional with seven years of experience across security operations and threat intelligence. He currently serves as a Security Operations Center (SOC) Lead at ESET Malaysia, overseeing incident detection, response, and day-to-day security operations.
He began his career as a Cyber Threat Engineer, developing a strong foundation in enterprise security and threat handling. He later moved into advanced threat research focused on analyzing and dissecting sophisticated attack techniques.
His approach to threat analysis is shaped by a strong research background and an analytical mindset toward complex security problems. He holds a Master of Science (MSc) in Research, where his academic work focused on algorithm development for cybersecurity, bridging research-driven insights with real-world security operations.
BRENDA VAN RENSBURG
Cybersecurity GRC & Assurance Head
Brenda van Rensburg is a recognized authority at the intersection of data, security, and artificial intelligence. With a Bachelor of Science, a law degree, and postgraduate qualifications in AI, she brings a rare blend of technical and legal expertise to the evolving landscape of cybersecurity and governance. Brenda’s career spans sectors as diverse as mining, insurance, finance and government, giving her a well-rounded view of risk and resilience across industries. As an international speaker and author, she will share a critical message on how quickly ransomware can cripple a business; highlighting the implications from disaster recovery to legal accountability in a hyper-connected world.
